Add credentials sinks from SensitiveApi

egregius313 · egregius313 · commit 646254c9b2fe · 2023-12-11T11:18:39.000-05:00
diff --git a/java/ql/lib/semmle/code/java/security/WeakRandomnessQuery.qll b/java/ql/lib/semmle/code/java/security/WeakRandomnessQuery.qll
@@ -3,6 +3,7 @@
 import java
 private import semmle.code.java.frameworks.Servlets
 private import semmle.code.java.security.SensitiveActions
+private import semmle.code.java.security.SensitiveApi
 private import semmle.code.java.dataflow.TaintTracking
 private import semmle.code.java.dataflow.ExternalFlow
 private import semmle.code.java.security.RandomQuery
@@ -66,6 +67,8 @@ private class CryptographicSink extends WeakRandomnessSink {
   CryptographicSink() { sinkNode(this, "crypto-parameter") }
 }
 
+private class CredentialsSink extends WeakRandomnessSink instanceof CredentialsSinkNode { }
+
 /**
  * Holds if there is a method access which converts `bytes` to the string `str`.
  */
