@@ -14,57 +14,57 @@ import semmle.code.java.dataflow.DataFlow
1414
1515/** The interface `io.jsonwebtoken.JwtParser`. */
1616class TypeJwtParser extends Interface {
17- TypeJwtParser ( ) { hasQualifiedName ( "io.jsonwebtoken" , "JwtParser" ) }
17+ TypeJwtParser ( ) { this . hasQualifiedName ( "io.jsonwebtoken" , "JwtParser" ) }
1818}
1919
2020/** The interface `io.jsonwebtoken.JwtParserBuilder`. */
2121class TypeJwtParserBuilder extends Interface {
22- TypeJwtParserBuilder ( ) { hasQualifiedName ( "io.jsonwebtoken" , "JwtParserBuilder" ) }
22+ TypeJwtParserBuilder ( ) { this . hasQualifiedName ( "io.jsonwebtoken" , "JwtParserBuilder" ) }
2323}
2424
2525/** The interface `io.jsonwebtoken.JwtHandler`. */
2626class TypeJwtHandler extends Interface {
27- TypeJwtHandler ( ) { hasQualifiedName ( "io.jsonwebtoken" , "JwtHandler" ) }
27+ TypeJwtHandler ( ) { this . hasQualifiedName ( "io.jsonwebtoken" , "JwtHandler" ) }
2828}
2929
3030/** The class `io.jsonwebtoken.JwtHandlerAdapter`. */
3131class TypeJwtHandlerAdapter extends Class {
32- TypeJwtHandlerAdapter ( ) { hasQualifiedName ( "io.jsonwebtoken" , "JwtHandlerAdapter" ) }
32+ TypeJwtHandlerAdapter ( ) { this . hasQualifiedName ( "io.jsonwebtoken" , "JwtHandlerAdapter" ) }
3333}
3434
3535/** The `parse(token, handler)` method defined in `TypeJwtParser`. */
3636private class JwtParserParseHandlerMethod extends Method {
3737 JwtParserParseHandlerMethod ( ) {
38- hasName ( "parse" ) and
39- getDeclaringType ( ) instanceof TypeJwtParser and
40- getNumberOfParameters ( ) = 2
38+ this . hasName ( "parse" ) and
39+ this . getDeclaringType ( ) instanceof TypeJwtParser and
40+ this . getNumberOfParameters ( ) = 2
4141 }
4242}
4343
4444/** The `parse(token)`, `parseClaimsJwt(token)` and `parsePlaintextJwt(token)` methods defined in `TypeJwtParser`. */
4545private class JwtParserInsecureParseMethods extends Method {
4646 JwtParserInsecureParseMethods ( ) {
47- hasName ( [ "parse" , "parseClaimsJwt" , "parsePlaintextJwt" ] ) and
48- getNumberOfParameters ( ) = 1 and
49- getDeclaringType ( ) instanceof TypeJwtParser
47+ this . hasName ( [ "parse" , "parseClaimsJwt" , "parsePlaintextJwt" ] ) and
48+ this . getNumberOfParameters ( ) = 1 and
49+ this . getDeclaringType ( ) instanceof TypeJwtParser
5050 }
5151}
5252
5353/** The `onClaimsJwt(jwt)` and `onPlaintextJwt(jwt)` methods defined in `TypeJwtHandler`. */
5454private class JwtHandlerOnJwtMethods extends Method {
5555 JwtHandlerOnJwtMethods ( ) {
56- hasName ( [ "onClaimsJwt" , "onPlaintextJwt" ] ) and
57- getNumberOfParameters ( ) = 1 and
58- getDeclaringType ( ) instanceof TypeJwtHandler
56+ this . hasName ( [ "onClaimsJwt" , "onPlaintextJwt" ] ) and
57+ this . getNumberOfParameters ( ) = 1 and
58+ this . getDeclaringType ( ) instanceof TypeJwtHandler
5959 }
6060}
6161
6262/** The `onClaimsJwt(jwt)` and `onPlaintextJwt(jwt)` methods defined in `TypeJwtHandlerAdapter`. */
6363private class JwtHandlerAdapterOnJwtMethods extends Method {
6464 JwtHandlerAdapterOnJwtMethods ( ) {
65- hasName ( [ "onClaimsJwt" , "onPlaintextJwt" ] ) and
66- getNumberOfParameters ( ) = 1 and
67- getDeclaringType ( ) instanceof TypeJwtHandlerAdapter
65+ this . hasName ( [ "onClaimsJwt" , "onPlaintextJwt" ] ) and
66+ this . getNumberOfParameters ( ) = 1 and
67+ this . getDeclaringType ( ) instanceof TypeJwtHandlerAdapter
6868 }
6969}
7070
@@ -92,9 +92,9 @@ private predicate isInsecureParseHandler(Expr parseHandlerExpr) {
9292 */
9393private class JwtParserInsecureParseMethodAccess extends MethodAccess {
9494 JwtParserInsecureParseMethodAccess ( ) {
95- getMethod ( ) .getASourceOverriddenMethod * ( ) instanceof JwtParserInsecureParseMethods
95+ this . getMethod ( ) .getASourceOverriddenMethod * ( ) instanceof JwtParserInsecureParseMethods
9696 or
97- getMethod ( ) .getASourceOverriddenMethod * ( ) instanceof JwtParserParseHandlerMethod and
97+ this . getMethod ( ) .getASourceOverriddenMethod * ( ) instanceof JwtParserParseHandlerMethod and
9898 isInsecureParseHandler ( this .getArgument ( 1 ) )
9999 }
100100}
0 commit comments