33import java
44private import semmle.code.java.dataflow.ExternalFlow
55
6- private class ApacheStrBuilderModel extends SummaryModelCsv {
6+ private class ApacheCommonsLangModel extends SummaryModelCsv {
77 override predicate row ( string row ) {
88 row =
99 [
@@ -155,15 +155,7 @@ private class ApacheStrBuilderModel extends SummaryModelCsv {
155155 "org.apache.commons.text;TextStringBuilder;false;toCharArray;;;Argument[-1];ReturnValue;taint" ,
156156 "org.apache.commons.text;TextStringBuilder;false;toString;;;Argument[-1];ReturnValue;taint" ,
157157 "org.apache.commons.text;TextStringBuilder;false;toStringBuffer;;;Argument[-1];ReturnValue;taint" ,
158- "org.apache.commons.text;TextStringBuilder;false;toStringBuilder;;;Argument[-1];ReturnValue;taint"
159- ]
160- }
161- }
162-
163- private class ApacheStrBuilderFluentMethodsModel extends SummaryModelCsv {
164- override predicate row ( string row ) {
165- row =
166- [
158+ "org.apache.commons.text;TextStringBuilder;false;toStringBuilder;;;Argument[-1];ReturnValue;taint" ,
167159 "org.apache.commons.text;StrBuilder;false;append;;;Argument[-1];ReturnValue;value" ,
168160 "org.apache.commons.text;StrBuilder;false;appendAll;;;Argument[-1];ReturnValue;value" ,
169161 "org.apache.commons.text;StrBuilder;false;appendFixedWidthPadLeft;;;Argument[-1];ReturnValue;value" ,
@@ -215,18 +207,7 @@ private class ApacheStrBuilderFluentMethodsModel extends SummaryModelCsv {
215207 "org.apache.commons.text;TextStringBuilder;false;setLength;;;Argument[-1];ReturnValue;value" ,
216208 "org.apache.commons.text;TextStringBuilder;false;setNewLineText;;;Argument[-1];ReturnValue;value" ,
217209 "org.apache.commons.text;TextStringBuilder;false;setNullText;;;Argument[-1];ReturnValue;value" ,
218- "org.apache.commons.text;TextStringBuilder;false;trim;;;Argument[-1];ReturnValue;value"
219- ]
220- }
221- }
222-
223- /**
224- * Taint-propagating models for `WordUtils`.
225- */
226- private class ApacheWordUtilsModel extends SummaryModelCsv {
227- override predicate row ( string row ) {
228- row =
229- [
210+ "org.apache.commons.text;TextStringBuilder;false;trim;;;Argument[-1];ReturnValue;value" ,
230211 "org.apache.commons.text;WordUtils;false;wrap;;;Argument[0];ReturnValue;taint" ,
231212 "org.apache.commons.text;WordUtils;false;wrap;(java.lang.String,int,java.lang.String,boolean);;Argument[2];ReturnValue;taint" ,
232213 "org.apache.commons.text;WordUtils;false;wrap;(java.lang.String,int,java.lang.String,boolean,java.lang.String);;Argument[2];ReturnValue;taint" ,
@@ -240,18 +221,7 @@ private class ApacheWordUtilsModel extends SummaryModelCsv {
240221 "org.apache.commons.text;WordUtils;false;initials;(java.lang.String);;Argument[0];ReturnValue;taint" ,
241222 "org.apache.commons.text;WordUtils;false;initials;(java.lang.String,char[]);;Argument[0];ReturnValue;taint" ,
242223 "org.apache.commons.text;WordUtils;false;capitalizeFully;(java.lang.String);;Argument[0];ReturnValue;taint" ,
243- "org.apache.commons.text;WordUtils;false;capitalizeFully;(java.lang.String,char[]);;Argument[0];ReturnValue;taint"
244- ]
245- }
246- }
247-
248- /**
249- * Taint-propagating models for `StrTokenizer`.
250- */
251- private class ApacheStrTokenizerModel extends SummaryModelCsv {
252- override predicate row ( string row ) {
253- row =
254- [
224+ "org.apache.commons.text;WordUtils;false;capitalizeFully;(java.lang.String,char[]);;Argument[0];ReturnValue;taint" ,
255225 "org.apache.commons.text;StrTokenizer;false;StrTokenizer;;;Argument[0];Argument[-1];taint" ,
256226 "org.apache.commons.text;StrTokenizer;false;clone;;;Argument[-1];ReturnValue;taint" ,
257227 "org.apache.commons.text;StrTokenizer;false;toString;;;Argument[-1];ReturnValue;taint" ,
@@ -279,31 +249,9 @@ private class ApacheStrTokenizerModel extends SummaryModelCsv {
279249 "org.apache.commons.text;StringTokenizer;false;previousToken;;;Argument[-1];ReturnValue;taint" ,
280250 "org.apache.commons.text;StringTokenizer;false;nextToken;;;Argument[-1];ReturnValue;taint" ,
281251 "org.apache.commons.text;StringTokenizer;false;getTSVInstance;;;Argument[0];ReturnValue;taint" ,
282- "org.apache.commons.text;StringTokenizer;false;getCSVInstance;;;Argument[0];ReturnValue;taint"
283- ]
284- }
285- }
286-
287- /**
288- * Taint-propagating models for `StrLookup`.
289- */
290- private class ApacheStrLookupModel extends SummaryModelCsv {
291- override predicate row ( string row ) {
292- row =
293- [
252+ "org.apache.commons.text;StringTokenizer;false;getCSVInstance;;;Argument[0];ReturnValue;taint" ,
294253 "org.apache.commons.text.lookup;StringLookup;true;lookup;;;Argument[-1];ReturnValue;taint" ,
295- "org.apache.commons.text.lookup;StringLookupFactory;false;mapStringLookup;;;MapValue of Argument[0];ReturnValue;taint"
296- ]
297- }
298- }
299-
300- /**
301- * Taint-propagating models for `StrSubstitutor`.
302- */
303- private class ApacheStrSubstitutorModel extends SummaryModelCsv {
304- override predicate row ( string row ) {
305- row =
306- [
254+ "org.apache.commons.text.lookup;StringLookupFactory;false;mapStringLookup;;;MapValue of Argument[0];ReturnValue;taint" ,
307255 "org.apache.commons.text;StringSubstitutor;false;StringSubstitutor;;;Argument[0];Argument[-1];taint" ,
308256 "org.apache.commons.text;StringSubstitutor;false;StringSubstitutor;;;MapValue of Argument[0];Argument[-1];taint" ,
309257 "org.apache.commons.text;StringSubstitutor;false;replace;;;Argument[-1];ReturnValue;taint" ,
0 commit comments