Add EnumType to SimpleTypeSanitizer

smowton · smowton · commit 0a293cf357be · 2025-04-09T12:12:35.000+01:00
diff --git a/java/ql/lib/semmle/code/java/security/Sanitizers.qll b/java/ql/lib/semmle/code/java/security/Sanitizers.qll
@@ -23,6 +23,7 @@ class SimpleTypeSanitizer extends DataFlow::Node {
     this.getType()
         .(RefType)
         .getASourceSupertype*()
-        .hasQualifiedName("java.time.temporal", "TemporalAccessor")
+        .hasQualifiedName("java.time.temporal", "TemporalAccessor") or
+    this.getType() instanceof EnumType
   }
 }

Original file line number	Diff line number	Diff line change
`@@ -23,6 +23,7 @@ class SimpleTypeSanitizer extends DataFlow::Node {`
`23`	`23`	`this.getType()`
`24`	`24`	`.(RefType)`
`25`	`25`	`.getASourceSupertype*()`
`26`		`- .hasQualifiedName("java.time.temporal", "TemporalAccessor")`
	`26`	`+ .hasQualifiedName("java.time.temporal", "TemporalAccessor") or`
	`27`	`+ this.getType() instanceof EnumType`
`27`	`28`	`}`
`28`	`29`	`}`