File tree Expand file tree Collapse file tree 1 file changed +9
-11
lines changed
java/ql/src/semmle/code/java/dataflow/internal Expand file tree Collapse file tree 1 file changed +9
-11
lines changed Original file line number Diff line number Diff line change @@ -377,21 +377,19 @@ private predicate taintPreservingQualifierToMethod(Method m) {
377377 or
378378 m = any ( ProtobufMessageLite p ) .getAGetterMethod ( )
379379 or
380- exists ( SpringUntrustedDataType dt |
381- m .( GetterMethod ) = dt .getAMethod ( )
382- )
380+ m instanceof GetterMethod and m .getDeclaringType ( ) instanceof SpringUntrustedDataType
383381 or
384- exists ( SpringHttpEntity sre |
385- m = sre .getAMethod ( ) and
386- m .getName ( ) .regexpMatch ( "getBody|getHeaders" )
387- )
382+ m .getDeclaringType ( ) instanceof SpringHttpEntity and
383+ m .getName ( ) .regexpMatch ( "getBody|getHeaders" )
388384 or
389- exists ( SpringHttpHeaders headers |
390- m = headers .getAMethod ( ) |
385+ exists ( SpringHttpHeaders headers | m = headers .getAMethod ( ) |
391386 m .getReturnType ( ) instanceof TypeString
392387 or
393- m .getReturnType ( ) .( RefType ) .getSourceDeclaration ( ) .getASourceSupertype * ( ) .hasQualifiedName ( "java.util" , "List" ) and
394- m .getReturnType ( ) .( ParameterizedType ) .getTypeArgument ( 0 ) instanceof TypeString
388+ exists ( ParameterizedType stringlist |
389+ m .getReturnType ( ) .( RefType ) .getASupertype * ( ) = stringlist and
390+ stringlist .getSourceDeclaration ( ) .hasQualifiedName ( "java.util" , "List" ) and
391+ stringlist .getTypeArgument ( 0 ) instanceof TypeString
392+ )
395393 )
396394}
397395
You can’t perform that action at this time.
0 commit comments