Skip to content

Commit 58bbfe6

Browse files
committed
Java: Deprecate the content of ExecTaintedLocalQuery as this is unused.
1 parent d9c7401 commit 58bbfe6

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

java/ql/lib/semmle/code/java/security/ExecTaintedLocalQuery.qll

+4-2
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ private import semmle.code.java.security.CommandArguments
77
private import semmle.code.java.security.Sanitizers
88

99
/** A taint-tracking configuration to reason about use of externally controlled strings to make command line commands. */
10-
module ExecTaintedLocalConfig implements DataFlow::ConfigSig {
10+
deprecated module ExecTaintedLocalConfig implements DataFlow::ConfigSig {
1111
predicate isSource(DataFlow::Node src) { src instanceof LocalUserInput }
1212

1313
predicate isSink(DataFlow::Node sink) { sink.asExpr() instanceof ArgumentToExec }
@@ -20,6 +20,8 @@ module ExecTaintedLocalConfig implements DataFlow::ConfigSig {
2020
}
2121

2222
/**
23+
* DEPRCATED: Unused.
24+
*
2325
* Taint-tracking flow for use of externally controlled strings to make command line commands.
2426
*/
25-
module ExecTaintedLocalFlow = TaintTracking::Global<ExecTaintedLocalConfig>;
27+
deprecated module ExecTaintedLocalFlow = TaintTracking::Global<ExecTaintedLocalConfig>;

0 commit comments

Comments
 (0)