Skip to content

Java: Promote experimental XXE sinks#12932

Merged
atorralba merged 7 commits intogithub:mainfrom
atorralba:atorralba/java/promote-xxe-experimental-sinks
May 17, 2023
Merged

Java: Promote experimental XXE sinks#12932
atorralba merged 7 commits intogithub:mainfrom
atorralba:atorralba/java/promote-xxe-experimental-sinks

Conversation

@atorralba
Copy link
Copy Markdown
Contributor

Promotes the experimental XXE sinks submitted in #6564. Also refactors the XXE tests to use InlineFlowTest.

@aschackmull: In the first commit, I moved a class ConstantStringExpr that was present in XmlParsers.qll to RangeUtils.qll because I needed to use it in other files. I think it makes sense for it to be there, but please let me know if you disagree or if you foresee any performance issues.

@github-actions
Copy link
Copy Markdown
Contributor

QHelp previews:

@aschackmull
Copy link
Copy Markdown
Contributor

In the first commit, I moved a class ConstantStringExpr that was present in XmlParsers.qll to RangeUtils.qll because I needed to use it in other files

LGTM

@atorralba
Copy link
Copy Markdown
Contributor Author

DCA is uneventful.

Copy link
Copy Markdown
Contributor

@egregius313 egregius313 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@atorralba atorralba merged commit 1b06bf1 into github:main May 17, 2023
@atorralba atorralba deleted the atorralba/java/promote-xxe-experimental-sinks branch May 17, 2023 15:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants