Skip to content

Commit 157a155

Browse files
committed
Fix Micronaut local threat model value flow test
1 parent 3869abe commit 157a155

File tree

2 files changed

+31
-1
lines changed

2 files changed

+31
-1
lines changed
Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
import io.micronaut.context.annotation.Value;
2+
import io.micronaut.context.annotation.Property;
3+
import io.micronaut.http.annotation.*;
4+
5+
@Controller("/config")
6+
class MicronautConfig {
7+
8+
private static void sink(Object o) {}
9+
10+
@Value("${app.secret}")
11+
String secretValue;
12+
13+
@Property(name = "app.api-key")
14+
String apiKey;
15+
16+
@Get("/secret")
17+
void testValueField() {
18+
sink(secretValue); // $hasLocalValueFlow
19+
}
20+
21+
@Get("/key")
22+
void testPropertyField() {
23+
sink(apiKey); // $hasLocalValueFlow
24+
}
25+
26+
@Get("/param")
27+
void testValueParam(@Value("${app.name}") String appName) {
28+
sink(appName); // $hasLocalValueFlow
29+
}
30+
}
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/jakarta.servlet-api-6.0.0:${testdir}/../../../stubs/apache-commons-fileupload-1.4:${testdir}/../../../stubs/javax-servlet-2.5:${testdir}/../../../stubs/servlet-api-2.4:${testdir}/../../../stubs/springframework-5.8.x:${testdir}/../../../stubs/google-android-9.0.0:${testdir}/../../../stubs/playframework-2.6.x:${testdir}/../../../stubs/jackson-databind-2.12:${testdir}/../../../stubs/jackson-core-2.12:${testdir}/../../../stubs/akka-2.6.x:${testdir}/../../../stubs/jwtk-jjwt-0.11.2:${testdir}/../../../stubs/jenkins:${testdir}/../../../stubs/stapler-1.263
1+
//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/jakarta.servlet-api-6.0.0:${testdir}/../../../stubs/apache-commons-fileupload-1.4:${testdir}/../../../stubs/javax-servlet-2.5:${testdir}/../../../stubs/servlet-api-2.4:${testdir}/../../../stubs/springframework-5.8.x:${testdir}/../../../stubs/google-android-9.0.0:${testdir}/../../../stubs/playframework-2.6.x:${testdir}/../../../stubs/jackson-databind-2.12:${testdir}/../../../stubs/jackson-core-2.12:${testdir}/../../../stubs/akka-2.6.x:${testdir}/../../../stubs/jwtk-jjwt-0.11.2:${testdir}/../../../stubs/jenkins:${testdir}/../../../stubs/stapler-1.263:${testdir}/../../../stubs/micronaut-4.x

0 commit comments

Comments
 (0)