Skip to content

Commit 251f67d

Browse files
committed
Use the new CSV model
1 parent b357274 commit 251f67d

File tree

1 file changed

+5
-4
lines changed

1 file changed

+5
-4
lines changed

java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qll

Lines changed: 5 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -198,11 +198,12 @@ private class LoadSpringResourceFlowStep extends SummaryModelCsv {
198198
override predicate row(string row) {
199199
row =
200200
[
201-
"org.springframework.core.io;ClassPathResource;false;ClassPathResource;;;Argument[0];Argument[-1];taint",
201+
"org.springframework.core.io;ClassPathResource;false;ClassPathResource;;;Argument[0];Argument[-1];taint;manual",
202202
"org.springframework.core.io;ClassPathResource;true;" +
203-
["getFilename", "getPath", "getURL", "resolveURL"] + ";;;Argument[-1];ReturnValue;taint",
204-
"org.springframework.core.io;ResourceLoader;true;getResource;;;Argument[0];ReturnValue;taint",
205-
"org.springframework.core.io;Resource;true;createRelative;;;Argument[0];ReturnValue;taint"
203+
["getFilename", "getPath", "getURL", "resolveURL"] +
204+
";;;Argument[-1];ReturnValue;taint;manual",
205+
"org.springframework.core.io;ResourceLoader;true;getResource;;;Argument[0];ReturnValue;taint;manual",
206+
"org.springframework.core.io;Resource;true;createRelative;;;Argument[0];ReturnValue;taint;manual"
206207
]
207208
}
208209
}

0 commit comments

Comments
 (0)