Skip to content

Commit e6658c5

Browse files
committed
Java: Cleanup TaintTrackingUtil.qll
1 parent 5d8f9a7 commit e6658c5

File tree

1 file changed

+9
-11
lines changed

1 file changed

+9
-11
lines changed

java/ql/src/semmle/code/java/dataflow/internal/TaintTrackingUtil.qll

Lines changed: 9 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -377,21 +377,19 @@ private predicate taintPreservingQualifierToMethod(Method m) {
377377
or
378378
m = any(ProtobufMessageLite p).getAGetterMethod()
379379
or
380-
exists(SpringUntrustedDataType dt |
381-
m.(GetterMethod) = dt.getAMethod()
382-
)
380+
m instanceof GetterMethod and m.getDeclaringType() instanceof SpringUntrustedDataType
383381
or
384-
exists(SpringHttpEntity sre |
385-
m = sre.getAMethod() and
386-
m.getName().regexpMatch("getBody|getHeaders")
387-
)
382+
m.getDeclaringType() instanceof SpringHttpEntity and
383+
m.getName().regexpMatch("getBody|getHeaders")
388384
or
389-
exists(SpringHttpHeaders headers |
390-
m = headers.getAMethod() |
385+
exists(SpringHttpHeaders headers | m = headers.getAMethod() |
391386
m.getReturnType() instanceof TypeString
392387
or
393-
m.getReturnType().(RefType).getSourceDeclaration().getASourceSupertype*().hasQualifiedName("java.util", "List") and
394-
m.getReturnType().(ParameterizedType).getTypeArgument(0) instanceof TypeString
388+
exists(ParameterizedType stringlist |
389+
m.getReturnType().(RefType).getASupertype*() = stringlist and
390+
stringlist.getSourceDeclaration().hasQualifiedName("java.util", "List") and
391+
stringlist.getTypeArgument(0) instanceof TypeString
392+
)
395393
)
396394
}
397395

0 commit comments

Comments
 (0)