@@ -629,6 +629,27 @@ module CsvValidation {
629
629
not kind = [ "taint" , "value" ] and
630
630
msg = "Invalid kind \"" + kind + "\" in summary model."
631
631
)
632
+ or
633
+ exists ( string row , string kind | sinkModel ( row ) |
634
+ kind = row .splitAt ( ";" , 7 ) and
635
+ not kind =
636
+ [
637
+ "open-url" , "jndi-injection" , "ldap" , "sql" , "jdbc-url" , "logging" , "mvel" , "xpath" ,
638
+ "groovy" , "xss" , "ognl-injection" , "intent-start" , "pending-intent-sent" ,
639
+ "url-open-stream" , "url-redirect" , "create-file" , "write-file" , "set-hostname-verifier" ,
640
+ "header-splitting" , "information-leak" , "xslt" , "jexl" , "bean-validation"
641
+ ] and
642
+ not kind .matches ( "regex-use%" ) and
643
+ not kind .matches ( "qltest%" ) and
644
+ msg = "Invalid kind \"" + kind + "\" in sink model."
645
+ )
646
+ or
647
+ exists ( string row , string kind | sourceModel ( row ) |
648
+ kind = row .splitAt ( ";" , 7 ) and
649
+ not kind = [ "remote" , "contentprovider" , "android-widget" ] and
650
+ not kind .matches ( "qltest%" ) and
651
+ msg = "Invalid kind \"" + kind + "\" in source model."
652
+ )
632
653
}
633
654
}
634
655
0 commit comments