Skip to content

Java: Promote experimental XXE sinks - #12932

Merged
atorralba merged 7 commits into
github:mainfrom
atorralba:atorralba/java/promote-xxe-experimental-sinks
May 17, 2023
Merged

Java: Promote experimental XXE sinks#12932
atorralba merged 7 commits into
github:mainfrom
atorralba:atorralba/java/promote-xxe-experimental-sinks

Conversation

@atorralba

Copy link
Copy Markdown
Contributor

Promotes the experimental XXE sinks submitted in #6564. Also refactors the XXE tests to use InlineFlowTest.

@aschackmull: In the first commit, I moved a class ConstantStringExpr that was present in XmlParsers.qll to RangeUtils.qll because I needed to use it in other files. I think it makes sense for it to be there, but please let me know if you disagree or if you foresee any performance issues.

@github-actions

Copy link
Copy Markdown
Contributor

QHelp previews:

@aschackmull

Copy link
Copy Markdown
Contributor

In the first commit, I moved a class ConstantStringExpr that was present in XmlParsers.qll to RangeUtils.qll because I needed to use it in other files

LGTM

@atorralba

Copy link
Copy Markdown
Contributor Author

DCA is uneventful.

@egregius313 egregius313 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@atorralba
atorralba merged commit 1b06bf1 into github:main May 17, 2023
@atorralba
atorralba deleted the atorralba/java/promote-xxe-experimental-sinks branch May 17, 2023 15:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

3 participants