Replace servlet source node with RemoteFlowSource

egregius313 · egregius313 · commit a3a4c31911b5 · 2023-08-17T13:05:37.000-04:00
diff --git a/java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qll b/java/ql/lib/semmle/code/java/security/TrustBoundaryViolationQuery.qll
@@ -12,11 +12,8 @@ private import semmle.code.java.frameworks.owasp.Esapi
  */
 abstract class TrustBoundaryViolationSource extends DataFlow::Node { }
 
-/**
- * A node representing a servlet request.
- */
-private class ServletRequestSource extends TrustBoundaryViolationSource {
-  ServletRequestSource() { this.asExpr().getType() instanceof HttpServletRequest }
+private class RemoteSource extends TrustBoundaryViolationSource {
+  RemoteSource() { this instanceof RemoteFlowSource }
 }
 
 /**
