Java: Data Flow Tracking for Stream/Promise based data flow
未關閉
question
- 主要語言
- CodeQL
- 星號
- 10.1k
- 分支
- 2.1k
- 平均合併
- 2 天 15 小時
- 30 天內合併 PR
- 141
描述
**Description of the issue**
Data flow tracking doesn't currently work when the flow source uses non-procedural based data flow and instead uses stream or asynchronous paradigms.
A few examples:
- [x] Java 8 Streams APIs
- [ ] Java 8 `CompletableFuture`
- [ ] RX Java
- [ ] Third party library implementations of `Proimise`
- [x] Ratpack [Promise](https://ratpack.io/manual/current/api/ratpack/exec/Promise.html)
Javascript has support for this library.
https://github.com/github/codeql/blob/main/javascript/ql/src/semmle/javascript/Promises.qll
Having a similar generic & extendable API would be appreciated.
貢獻指南
評估
這個 Issue 還沒有評估資料。