File tree Expand file tree Collapse file tree
java/ql/lib/semmle/code/java/security Expand file tree Collapse file tree Original file line number Diff line number Diff line change 22
33import java
44import semmle.code.java.dataflow.TaintTracking
5- private import semmle.code.java.dataflow.TaintTracking2
65import semmle.code.java.dataflow.FlowSources
76import semmle.code.java.security.SensitiveActions
87
@@ -64,7 +63,8 @@ private module SensitiveResultReceiverConfig implements DataFlow::ConfigSig {
6463 predicate allowImplicitRead ( DataFlow:: Node n , DataFlow:: ContentSet c ) { isSink ( n ) and exists ( c ) }
6564}
6665
67- private module SensitiveResultReceiverFlow = TaintTracking:: Global< SensitiveResultReceiverConfig > ;
66+ /** Taint tracking flow for sensitive expressions flowing to untrusted result receivers. */
67+ module SensitiveResultReceiverFlow = TaintTracking:: Global< SensitiveResultReceiverConfig > ;
6868
6969/**
7070 * DEPRECATED: Use `isSensitiveResultReceiver` instead.
You can’t perform that action at this time.
0 commit comments