We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 1b01f26 commit 55f7369Copy full SHA for 55f7369
1 file changed
java/ql/lib/semmle/code/java/security/UrlForward.qll
@@ -26,10 +26,15 @@ private class DefaultUrlForwardSink extends UrlForwardSink {
26
private class SpringUrlForwardPrefixSink extends UrlForwardSink {
27
SpringUrlForwardPrefixSink() {
28
any(SpringRequestMappingMethod srmm).polyCalls*(this.getEnclosingCallable()) and
29
- this.asExpr() = any(ForwardPrefix fp).getAnAppendedExpression()
+ appendedToForwardPrefix(this)
30
}
31
32
33
+pragma[nomagic]
34
+private predicate appendedToForwardPrefix(DataFlow::ExprNode exprNode) {
35
+ exists(ForwardPrefix fp | exprNode.asExpr() = fp.getAnAppendedExpression())
36
+}
37
+
38
private class ForwardPrefix extends InterestingPrefix {
39
ForwardPrefix() { this.getStringValue() = "forward:" }
40
0 commit comments