New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Docs: Update data flow documentation to the new API. #13743
base: main
Are you sure you want to change the base?
Conversation
| @@ -1,14 +1,14 @@ | |||
| import java | |||
| import semmle.code.java.dataflow.TaintTracking | |||
|
|
|||
| class TaintedOGNLConfig extends TaintTracking::Configuration { | |||
| TaintedOGNLConfig() { this = "TaintedOGNLConfig" } | |||
| module TaintedOGNLConfig implements DataFlow::ConfigSig { | |||
Check warning
Code scanning / CodeQL
Acronyms should be PascalCase/camelCase. Warning
| } | ||
|
|
||
| from TaintedOGNLConfig cfg, DataFlow::Node source, DataFlow::Node sink | ||
| where cfg.hasFlow(source, sink) | ||
| module TaintedOGNLFlow = TaintTracking::Global<TaintedOGNLConfig>; |
Check warning
Code scanning / CodeQL
Acronyms should be PascalCase/camelCase. Warning
| class TaintedFormatConfig extends TaintTracking::Configuration { | ||
| TaintedFormatConfig() { this = "TaintedFormatConfig" } | ||
| module TaintedFormatConfig implements DataFlow::ConfigSig { | ||
| predicate isSource(DataFlow::Node source) { /* TBD */ } |
Check warning
Code scanning / CodeQL
Dead code Warning
| override predicate isSource(DataFlow::Node source) { /* TBD */ } | ||
|
|
||
| override predicate isSink(DataFlow::Node sink) { /* TBD */ } | ||
| predicate isSink(DataFlow::Node sink) { /* TBD */ } |
Check warning
Code scanning / CodeQL
Dead code Warning
| class TaintedOGNLConfig extends TaintTracking::Configuration { | ||
| TaintedOGNLConfig() { this = "TaintedOGNLConfig" } | ||
| module TaintedOGNLConfig implements DataFlow::ConfigSig { | ||
| predicate isSource(DataFlow::Node source) { /* TBD */ } |
Check warning
Code scanning / CodeQL
Dead code Warning
| override predicate isSource(DataFlow::Node source) { /* TBD */ } | ||
|
|
||
| override predicate isSink(DataFlow::Node sink) { /* TBD */ } | ||
| predicate isSink(DataFlow::Node sink) { /* TBD */ } |
Check warning
Code scanning / CodeQL
Dead code Warning
This updates the pieces of documentation that I could find to the new data flow API.
I identified the places that needed updates, by grepping for the following list of words: