Skip to content

Commit e53a28c

Browse files
committed
Make abstract class for sinks for java/insecure-bean-validation
1 parent 7b53649 commit e53a28c

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

java/ql/lib/semmle/code/java/security/InsecureBeanValidationQuery.qll

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,8 @@ module BeanValidationFlow = TaintTracking::Global<BeanValidationConfig>;
6060
* A bean validation sink, such as method `buildConstraintViolationWithTemplate`
6161
* declared on a subtype of `javax.validation.ConstraintValidatorContext`.
6262
*/
63-
private class BeanValidationSink extends DataFlow::Node {
64-
BeanValidationSink() { sinkNode(this, "bean-validation") }
63+
abstract class BeanValidationSink extends DataFlow::Node { }
64+
65+
private class ExternalBeanValidationSink extends BeanValidationSink {
66+
ExternalBeanValidationSink() { sinkNode(this, "bean-validation") }
6567
}

0 commit comments

Comments
 (0)