We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent f7c07d5 commit 4f89081Copy full SHA for 4f89081
1 file changed
java/ql/lib/semmle/code/java/security/HardcodedCredentials.qll
@@ -59,15 +59,10 @@ abstract class CredentialsSink extends Expr {
59
*/
60
class CredentialsApiSink extends CredentialsSink {
61
CredentialsApiSink() {
62
- exists(Call call, int i |
63
- this = call.getArgument(i) and
64
- (
65
- javaApiCallableUsernameParam(call.getCallee(), i) or
66
- javaApiCallablePasswordParam(call.getCallee(), i) or
67
- javaApiCallableCryptoKeyParam(call.getCallee(), i) or
68
- otherApiCallableCredentialParam(call.getCallee(), i)
69
- )
70
+ this = any(PasswordParameter p).asExpr() or
+ this = any(UsernameParameter p).asExpr() or
+ this = any(CryptoKeyParameter p).asExpr() or
+ this = any(CredentialParameter p).asExpr()
71
}
72
73
0 commit comments