Skip to content

Java: CWE-552 Query to detect unsafe request dispatcher usage #7286

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
smowton merged 17 commits into from
Jan 18, 2022
Merged

Java: CWE-552 Query to detect unsafe request dispatcher usage #7286

Changes from 1 commit
Commits
Show all changes
17 commits
Select commit Hold shift + click to select a range
8bcffc2
Query to detect unsafe request dispatcher usage
luchua-bc Dec 2, 2021
29ce0e9
Add sanitizer for virtual method calls
luchua-bc Dec 15, 2021
263dbd3
Optimize the query
luchua-bc Jan 12, 2022
cd9a485
Refactor NullOrEmptyCheckGuard
atorralba Jan 13, 2022
81feaae
Refactor PathMatchGuard
atorralba Jan 13, 2022
b6886b8
Move code to qll file
atorralba Jan 13, 2022
877c529
Remove the deprecated library keyword
luchua-bc Jan 14, 2022
136fefb
Apply suggestions from code review
atorralba Jan 14, 2022
fb1287d
Use dominance instead of getParent
atorralba Jan 14, 2022
eb1806c
Split PathMatchGuard into three guards
atorralba Jan 14, 2022
a2c98ba
Reordering
atorralba Jan 14, 2022
978ef15
Update method names
luchua-bc Jan 16, 2022
4797fce
Update use cases and qldoc
luchua-bc Jan 16, 2022
a3d65a8
Update recommendation in qldoc and make examples more comprehendible
luchua-bc Jan 18, 2022
748008a
Remove dangling reference to UnsafeRequestPath.java
smowton Jan 18, 2022
d744cf9
Clean up guard logic:
smowton Jan 18, 2022
1e32514
Avoid using `this` for a non-extending supertype, and remove needless…
smowton Jan 18, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Apply suggestions from code review 
Co-authored-by: Chris Smowton <smowton@github.com>
  • Loading branch information
@atorralba @smowton
atorralba and smowton authored Jan 14, 2022
commit 136fefbab55fe4ec9f2cec51feeddbf2c37ec9fa
2 changes: 1 addition & 1 deletion java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qll
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -122,7 +122,7 @@ private predicate isDisallowListCheck(MethodAccess ma) {
*/
private class PathMatchGuard extends UnsafeUrlForwardBarrierGuard {
Comment thread
luchua-bc marked this conversation as resolved.
Outdated
PathMatchGuard() {
isExactStringPathMatch(this) or isStringPathMatch(this) or isFilePathMatch(this)
isExactStringPathMatch(this) or isAllowListCheck(this) or isDisallowListCheck(this)
}

override predicate checks(Expr e, boolean branch) {
Expand Down