Java: Consider some support for backwards flow through writer wrappers
Đang mở
enhancement
Java
- Ngôn ngữ chính
- CodeQL
- Star
- 10.1k
- Fork
- 2.1k
- Merge trung bình
- 2 ngày 15 giờ
- Pull request đã merge (30 ngày)
- 141
Mô tả
Consider supporting source to sink flow in the following snippet:
```java
void f(Appendable sink, String source) {
JSONWriter w = new JSONWriter(sink);
w.write(source);
```
Through the model row `"org.json;JSONWriter;true;JSONWriter;;;Argument[-1];Argument[0];taint"`.
Context: https://github.com/github/codeql/pull/6325#discussion_r680984746
Go already has some support for this in https://github.com/github/codeql-go/blob/main/ql/src/semmle/go/dataflow/FunctionInputsAndOutputs.qll#L124.
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.