Skip to content

Add value support to RIVER#874

Open
MarcMil wants to merge 4 commits intosecure-software-engineering:developfrom
MarcMil:add-valuesupport
Open

Add value support to RIVER#874
MarcMil wants to merge 4 commits intosecure-software-engineering:developfrom
MarcMil:add-valuesupport

Conversation

@MarcMil
Copy link
Copy Markdown
Collaborator

@MarcMil MarcMil commented Mar 26, 2026

No description provided.

import java.util.Set;
import java.util.regex.Pattern;

public class ValueOnPath {
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should have JavaDoc on the constraint classes to ensure that users can understand them even if they don't know the precise cases we discussed.


public class ValueOnPath {

public static class Parameter {
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This class should have a toString implementation for easier debugging.

* @author Steven Arzt
*/
public class SinkPropagationRule extends AbstractTaintPropagationRule {
public class SinkPropagationRule extends AbstractTaintPropagationRule implements IAdditionalFlowSinkPropagationRule {
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please use a dedicated rule in the River package and don't hijack normal sink processing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants