codeql/java/ql/test/library-tests/dataflow/taintsources/FileUpload.java at bf79b8a792ab9b91912e904add1dc60e7f20481c · Kwstubbs/codeql · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.HttpServletResponse;
import org.apache.commons.fileupload.FileItem;
import org.apache.commons.fileupload.FileItemStream;
import org.apache.commons.fileupload.servlet.ServletFileUpload;

public class FileUpload {

    private HttpServletRequest request;
    private HttpServletResponse response;
    private javax.servlet.http.Part filePart;
    private FileItem fileItem;
    private FileItemStream fileItemStream;
    private jakarta.servlet.http.Part jakartaPart;
    private ServletFileUpload servletFileUpload;

    private static void sink(Object o) {}

    public void test() throws Exception {
        sink(filePart.getContentType());  // $ hasRemoteValueFlow
        sink(filePart.getHeader("test")); // $ hasRemoteValueFlow
        sink(filePart.getHeaderNames()); // $ hasRemoteValueFlow
        sink(filePart.getHeaders("test")); // $ hasRemoteValueFlow
        sink(filePart.getInputStream()); // $ hasRemoteValueFlow
        sink(filePart.getName()); // $ hasRemoteValueFlow
        sink(filePart.getSubmittedFileName()); // $ hasRemoteValueFlow

        sink(fileItem.get());            // $ hasRemoteValueFlow
        sink(fileItem.getContentType()); // $ hasRemoteValueFlow
        sink(fileItem.getFieldName());        // $ hasRemoteValueFlow
        sink(fileItem.getInputStream());        // $ hasRemoteValueFlow
        sink(fileItem.getName());        // $ hasRemoteValueFlow
        sink(fileItem.getName());        // $ hasRemoteValueFlow
        sink(fileItem.getString());      // $ hasRemoteValueFlow

        sink(fileItemStream.getContentType()); // $ hasRemoteValueFlow
        sink(fileItemStream.getFieldName()); // $ hasRemoteValueFlow
        sink(fileItemStream.getName()); // $ hasRemoteValueFlow
        sink(fileItemStream.openStream()); // $ hasRemoteValueFlow

        sink(jakartaPart.getContentType());  // $ hasRemoteValueFlow
        sink(jakartaPart.getHeader("test")); // $ hasRemoteValueFlow
        sink(jakartaPart.getHeaderNames()); // $ hasRemoteValueFlow
        sink(jakartaPart.getHeaders("test")); // $ hasRemoteValueFlow
        sink(jakartaPart.getInputStream()); // $ hasRemoteValueFlow
        sink(jakartaPart.getName()); // $ hasRemoteValueFlow
        sink(jakartaPart.getSubmittedFileName()); // $ hasRemoteValueFlow

        FileItem item = servletFileUpload.parseRequest(request).get(0);
        sink(item.getName()); // $ hasRemoteValueFlow
    }
}