Files
Mikhail Pyltsin ee4b8fa0ef [uast-inspections] IDEA-331248 Non-safe string: allow static inter-analysis for taint inference
- added new inner option to check static methods
- configurations for methods and fields are separated
- clarify some comments

GitOrigin-RevId: 9a4287b3b5045d43c88f8d2fb515056fecbc3768
2023-09-01 17:38:36 +00:00

15 lines
506 B
Java

package com.example.sqlinjection;
import com.example.sqlinjection.utils.Utils;
import org.checkerframework.checker.tainting.qual.Tainted;
import org.checkerframework.checker.tainting.qual.Untainted;
public class StaticPropagation {
public void invokeSink(@Tainted String param) {
sink(<warning descr="Unsafe string is used as safe parameter">param</warning>);
sink(Utils.safe(param));
sink(Utils.encodeForHTML(param));
}
public static void sink(@Untainted String string) {}
}