Skip to content

fix(model): Add third-party + stdlib taint passThrough propagators #154

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Saloed merged 3 commits into from
Jul 2, 2026
Merged

fix(model): Add third-party + stdlib taint passThrough propagators #154

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
252162e
feat(analyzer): Add third-party taint passThrough propagators
misonijnik Jul 2, 2026
a89ecc4
feat(analyzer): Add stdlib taint passThrough propagators
misonijnik Jul 2, 2026
1d7ca53
feat(analyzer): Reconcile spring-web passThrough with main (best of b…
misonijnik Jul 2, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions model/java/config/ant-1.10.14.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
passThrough:
- function: org.apache.tools.ant.types.FileSet#setDir
copy:
- from: arg(0)
to:
- this
- .org.apache.tools.ant.types.FileSet#path#java.lang.Object
- function: org.apache.tools.ant.types.FileSet#setFile
copy:
- from: arg(0)
to:
- this
- .org.apache.tools.ant.types.FileSet#path#java.lang.Object
17 changes: 17 additions & 0 deletions model/java/config/commons-codec-commons-codec-1.16.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
passThrough:
- function: org.apache.commons.codec.binary.Base64#encodeBase64String
copy:
- from: arg(0)
to: result
- function: org.apache.commons.codec.binary.Base64#encodeBase64URLSafeString
copy:
- from: arg(0)
to: result
- function: org.apache.commons.codec.binary.Base64#encodeBase64URLSafe
copy:
- from: arg(0)
to: result
- function: org.apache.commons.codec.binary.Base64#encodeBase64Chunked
copy:
- from: arg(0)
to: result
17 changes: 17 additions & 0 deletions model/java/config/commons-io-commons-io-2.15.1.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
passThrough:
- function: org.apache.commons.io.IOUtils#toString
copy:
- from: arg(0)
to: result
- function: org.apache.commons.io.IOUtils#toByteArray
copy:
- from: arg(0)
to: result
- function: org.apache.commons.io.IOUtils#toCharArray
copy:
- from: arg(0)
to: result
- function: org.apache.commons.io.IOUtils#readLines
copy:
- from: arg(0)
to: result
36 changes: 36 additions & 0 deletions model/java/config/groovy-3.0.21.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,36 @@
passThrough:
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (java.io.File) *
copy:
- from: arg(0)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (java.net.URL) *
copy:
- from: arg(0)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (java.lang.String, java.io.InputStream) *
copy:
- from: arg(1)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (java.lang.String, java.lang.String) *
copy:
- from: arg(1)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
- function: org.codehaus.groovy.control.CompilationUnit#addSource
signature: (org.codehaus.groovy.control.SourceUnit) *
copy:
- from: arg(0)
to:
- this
- .org.codehaus.groovy.control.CompilationUnit#source#java.lang.Object
22 changes: 22 additions & 0 deletions model/java/config/jenkins-core-2.426.3.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,22 @@
passThrough:
- function: hudson.FilePath#<init>
signature: (hudson.remoting.VirtualChannel, java.lang.String) *
copy:
- from: arg(1)
to:
- this
- .hudson.FilePath#path#java.lang.Object
- function: hudson.FilePath#<init>
signature: (java.io.File) *
copy:
- from: arg(0)
to:
- this
- .hudson.FilePath#path#java.lang.Object
- function: hudson.FilePath#<init>
signature: (hudson.FilePath, java.lang.String) *
copy:
- from: arg(1)
to:
- this
- .hudson.FilePath#path#java.lang.Object
21 changes: 21 additions & 0 deletions model/java/config/mvel2-2.5.2.Final.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
passThrough:
- function: org.mvel2.MVEL#compileExpression
copy:
- from: arg(0)
to: result
- function: org.mvel2.MVEL#compileSetExpression
copy:
- from: arg(0)
to: result
- function: org.mvel2.MVEL#compileGetExpression
copy:
- from: arg(0)
to: result
- function: org.mvel2.jsr223.MvelScriptEngine#compile
copy:
- from: arg(0)
to: result
- function: org.mvel2.jsr223.MvelScriptEngine#compiledScript
copy:
- from: arg(0)
to: result
166 changes: 166 additions & 0 deletions model/java/config/okhttp-4.12.0.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,166 @@
passThrough:
- function: okhttp3.Request$Builder#url
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#header
signature: (java.lang.String, java.lang.String) *
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#addHeader
signature: (java.lang.String, java.lang.String) *
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#headers
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#post
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#put
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#patch
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#delete
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#method
signature: (java.lang.String, okhttp3.RequestBody) *
copy:
- from: arg(0)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- result
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(0)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: arg(1)
to:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
- from: this
to: result
- function: okhttp3.Request$Builder#get
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#head
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#removeHeader
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#cacheControl
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#tag
copy:
- from: this
to: result
- function: okhttp3.Request$Builder#build
copy:
- from: this
to: result
- from:
- this
- .okhttp3.Request$Builder#url#java.lang.Object
to:
- result
- .okhttp3.Request#url#java.lang.Object
43 changes: 43 additions & 0 deletions model/java/config/org.apache.httpcomponents.core5-httpcore5-5.2.4.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
passThrough:
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, org.apache.hc.core5.http.ContentType) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, java.nio.charset.Charset) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, org.apache.hc.core5.http.ContentType, boolean) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, java.nio.charset.Charset, boolean) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
- function: org.apache.hc.core5.http.io.entity.StringEntity#<init>
signature: (java.lang.String, org.apache.hc.core5.http.ContentType, java.lang.String, boolean) *
copy:
- from: arg(0)
to:
- this
- .org.apache.hc.core5.http.io.entity.StringEntity#content#java.lang.Object
19 changes: 19 additions & 0 deletions model/java/config/org.apache.velocity-velocity-engine-core-2.3.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
passThrough:
- function: org.apache.velocity.context.Context#put
copy:
- from: arg(1)
to:
- this
- .org.apache.velocity.context.Context#value#java.lang.Object
- function: org.apache.velocity.VelocityContext#put
copy:
- from: arg(1)
to:
- this
- .org.apache.velocity.context.Context#value#java.lang.Object
- function: org.apache.velocity.context.AbstractContext#put
copy:
- from: arg(1)
to:
- this
- .org.apache.velocity.context.Context#value#java.lang.Object
Loading
Loading