From 276193e76c086f9d83c89fbd31d7a4ccef88b9c3 Mon Sep 17 00:00:00 2001 From: Mathew Payne Date: Wed, 27 Jul 2022 19:28:59 +0100 Subject: [PATCH] Update XXELocal source to SafeSaxSource --- java/CWE-611/XXELocal.ql | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/java/CWE-611/XXELocal.ql b/java/CWE-611/XXELocal.ql index 173ad7a0c3..38550cf92f 100644 --- a/java/CWE-611/XXELocal.ql +++ b/java/CWE-611/XXELocal.ql @@ -23,7 +23,7 @@ import github.LocalSources class SafeSAXSourceFlowConfig extends TaintTracking2::Configuration { SafeSAXSourceFlowConfig() { this = "XmlParsers::SafeSAXSourceFlowConfig" } - override predicate isSource(DataFlow::Node src) { src.asExpr() instanceof SafeSAXSource } + override predicate isSource(DataFlow::Node src) { src.asExpr() instanceof SafeSaxSource } override predicate isSink(DataFlow::Node sink) { sink.asExpr() = any(XmlParserCall parse).getSink()