File tree Expand file tree Collapse file tree 5 files changed +165
-213
lines changed
java/ql/src/semmle/code/java Expand file tree Collapse file tree 5 files changed +165
-213
lines changed Original file line number Diff line number Diff line change @@ -64,6 +64,14 @@ import java
6464private import semmle.code.java.dataflow.DataFlow:: DataFlow
6565private import internal.DataFlowPrivate
6666
67+ /**
68+ * A module importing the frameworks that provide external flow data,
69+ * ensuring that they are visible to the taint tracking / data flow library.
70+ */
71+ private module Frameworks {
72+ private import semmle.code.java.frameworks.ApacheHttp
73+ }
74+
6775private predicate sourceModelCsv ( string row ) {
6876 row =
6977 [
Original file line number Diff line number Diff line change @@ -163,14 +163,6 @@ private class GuiceRequestParameterSource extends RemoteFlowSource {
163163 override string getSourceType ( ) { result = "Guice request parameter" }
164164}
165165
166- private class ApacheHttpRequestParameterSource extends RemoteFlowSource {
167- ApacheHttpRequestParameterSource ( ) {
168- this .asParameter ( ) instanceof ApacheHttpRequestHandlerParameter
169- }
170-
171- override string getSourceType ( ) { result = "Apache HTTP request parameter" }
172- }
173-
174166private class Struts2ActionSupportClassFieldReadSource extends RemoteFlowSource {
175167 Struts2ActionSupportClassFieldReadSource ( ) {
176168 exists ( Struts2ActionSupportClass c |
Original file line number Diff line number Diff line change @@ -9,7 +9,7 @@ private import semmle.code.java.dataflow.DataFlow
99 * A module importing the frameworks that implement additional flow steps,
1010 * ensuring that they are visible to the taint tracking library.
1111 */
12- module Frameworks {
12+ private module Frameworks {
1313 private import semmle.code.java.frameworks.jackson.JacksonSerializability
1414 private import semmle.code.java.frameworks.android.Intent
1515 private import semmle.code.java.frameworks.android.SQLite
You can’t perform that action at this time.
0 commit comments