Query to detect LDAP injections in Java

ggolawski · ggolawski · commit bed6a9886f08 · 2020-01-22T21:42:47.000+01:00
Autoformat
diff --git a/java/ql/src/Security/CWE/CWE-90/LdapInjection.ql b/java/ql/src/Security/CWE/CWE-90/LdapInjection.ql
@@ -15,8 +15,7 @@ import semmle.code.java.dataflow.FlowSources
 import LdapInjectionLib
 import DataFlow::PathGraph
 
-from
-  DataFlow::PathNode source, DataFlow::PathNode sink, LdapInjectionFlowConfig conf
+from DataFlow::PathNode source, DataFlow::PathNode sink, LdapInjectionFlowConfig conf
 where conf.hasFlowPath(source, sink)
 select sink.getNode(), source, sink, "LDAP query might include code from $@.", source.getNode(),
   "this user input"
