@@ -10,49 +10,6 @@ class CommonsFileUploadAdditionalTaintStep extends Unit {
1010}
1111
1212module ApacheCommonsFileUpload {
13- module DangerousSink {
14- class TypeDiskFileItemFactory extends RefType {
15- TypeDiskFileItemFactory ( ) {
16- this .getAStrictAncestor * ( )
17- .hasQualifiedName ( "org.apache.commons.fileupload.disk" , "DiskFileItemFactory" )
18- or
19- this .getAStrictAncestor * ( )
20- .hasQualifiedName ( "org.apache.commons.fileupload" , "FileItemFactory" )
21- }
22- }
23-
24- abstract class FileWriteSink extends MethodAccess {
25- abstract Expr getAPathArgument ( ) ;
26- }
27-
28- class FileItemWrite extends FileWriteSink {
29- FileItemWrite ( ) {
30- this .getReceiverType ( ) instanceof RemoteFlowSource:: TypeFileUpload and
31- this .getCallee ( ) .hasName ( [ "write" ] )
32- }
33-
34- override Expr getAPathArgument ( ) { result = this .getArgument ( 0 ) }
35- }
36-
37- class DiskFileItemFactoryCreateItem extends FileWriteSink {
38- DiskFileItemFactoryCreateItem ( ) {
39- this .getReceiverType ( ) instanceof TypeDiskFileItemFactory and
40- this .getCallee ( ) .hasName ( [ "createItem" ] )
41- }
42-
43- override Expr getAPathArgument ( ) { result = this .getArgument ( 3 ) }
44- }
45-
46- class DiskFileItemFactorySetRepository extends FileWriteSink {
47- DiskFileItemFactorySetRepository ( ) {
48- this .getReceiverType ( ) instanceof TypeDiskFileItemFactory and
49- this .getCallee ( ) .hasName ( [ "setRepository" ] )
50- }
51-
52- override Expr getAPathArgument ( ) { result = this .getArgument ( 0 ) }
53- }
54- }
55-
5613 module RemoteFlowSource {
5714 class TypeServletFileUpload extends RefType {
5815 TypeServletFileUpload ( ) {
0 commit comments