search

github / codeql

CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security
https://codeql.github.com
MIT License
7.35k stars 1.47k forks source link

Java: Data Flow Tracking for Stream/Promise based data flow #4988

Open JLLeitschuh opened 3 years ago

JLLeitschuh commented 3 years ago

Description of the issue

Data flow tracking doesn't currently work when the flow source uses non-procedural based data flow and instead uses stream or asynchronous paradigms.

A few examples:

Javascript has support for this library. https://github.com/github/codeql/blob/main/javascript/ql/src/semmle/javascript/Promises.qll

Having a similar generic & extendable API would be appreciated.

github-actions[bot] commented 3 years ago

This issue is stale because it has been open 14 days with no activity. Comment or remove the stale label in order to avoid having this issue closed in 7 days.