move source to FlowSources.qll

pwntester · pwntester · commit a274a1516a0d · 2020-10-27T15:47:54.000+01:00
diff --git a/java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.ql b/java/ql/src/Security/CWE/CWE-094/InsecureBeanValidation.ql
@@ -14,23 +14,6 @@ import semmle.code.java.dataflow.TaintTracking
 import semmle.code.java.dataflow.FlowSources
 import DataFlow::PathGraph
 
-class BeanValidationSource extends RemoteFlowSource {
-  BeanValidationSource() {
-    exists(Method m, Parameter v |
-      this.asParameter() = v and
-      m.getParameter(0) = v and
-      m
-          .getDeclaringType()
-          .getASourceSupertype+()
-          .hasQualifiedName("javax.validation", "ConstraintValidator") and
-      m.hasName("isValid") and
-      m.fromSource()
-    )
-  }
-
-  override string getSourceType() { result = "BeanValidation source" }
-}
-
 class BuildConstraintViolationWithTemplateMethod extends Method {
   BuildConstraintViolationWithTemplateMethod() {
     this.getDeclaringType()
