codeql
codeql copied to clipboard
Java: Diff-informed CleartextStorageCookie.ql
trafficstars
I picked this commit out of #17846 because it doesn't rely on any of the controversial API changes that are holding back that PR. It appears there are no tests for CleartextStorageCookie.ql.
This query shares implementation with several other queries about cleartext storage, but it's the only one of them that's in the code-scanning suite. The sharing mechanism remains the same as before, but now each query has to override
getASelectedLocationto become diff-informed.Two other data-flow configurations are used in this query, but they can't easily be made diff-informed.