@@ -7,31 +7,29 @@ private import semmle.code.java.dataflow.DataFlow
7
7
private import semmle.code.java.dataflow.ExternalFlow
8
8
9
9
/**
10
- * A node representing a password being passed to a method .
10
+ * A node which represents the use of a credential .
11
11
*/
12
- class PasswordParameter extends DataFlow:: Node {
13
- PasswordParameter ( ) { sinkNode ( this , "credential-password" ) }
14
- }
12
+ abstract class CredentialSinkNode extends DataFlow:: Node { }
15
13
16
14
/**
17
- * A node representing a username being passed to a method.
15
+ * A node representing a password being passed to a method.
18
16
*/
19
- class UsernameParameter extends DataFlow :: Node {
20
- UsernameParameter ( ) { sinkNode ( this , "credential-username " ) }
17
+ class PasswordSink extends CredentialSinkNode {
18
+ PasswordSink ( ) { sinkNode ( this , "credential-password " ) }
21
19
}
22
20
23
21
/**
24
- * A node representing a cryptographic key being passed to a method.
22
+ * A node representing a username being passed to a method.
25
23
*/
26
- class CryptoKeyParameter extends DataFlow :: Node {
27
- CryptoKeyParameter ( ) { sinkNode ( this , "crypto-parameter " ) }
24
+ class UsernameSink extends CredentialSinkNode {
25
+ UsernameSink ( ) { sinkNode ( this , "credential-username " ) }
28
26
}
29
27
30
28
/**
31
- * A node representing a credential being passed to a method.
29
+ * A node representing a cryptographic key being passed to a method.
32
30
*/
33
- class CredentialParameter extends DataFlow :: Node {
34
- CredentialParameter ( ) { sinkNode ( this , "credential-other " ) }
31
+ class CryptoKeySink extends CredentialSinkNode {
32
+ CryptoKeySink ( ) { sinkNode ( this , "crypto-parameter " ) }
35
33
}
36
34
37
35
/**
0 commit comments