org.sonar.java.checks

Class AbstractInjectionChecker

java.lang.Object

org.sonar.java.ast.visitors.SubscriptionVisitor

org.sonar.plugins.java.api.IssuableSubscriptionVisitor

org.sonar.java.checks.SubscriptionBaseVisitor

org.sonar.java.checks.AbstractInjectionChecker

All Implemented Interfaces:

JavaCheck, JavaFileScanner, org.sonar.squidbridge.api.CodeVisitor

Direct Known Subclasses:

LDAPInjectionCheck, OSCommandInjectionCheck, SQLInjectionCheck

public abstract class AbstractInjectionChecker
extends SubscriptionBaseVisitor

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected class	AbstractInjectionChecker.LocalVariableDynamicStringVisitor

Field Summary

Fields

Modifier and Type	Field and Description
protected String	parameterName

Fields inherited from class org.sonar.java.ast.visitors.SubscriptionVisitor

context

Constructor Summary

Constructors

Constructor and Description
AbstractInjectionChecker()

Method Summary

Methods

Modifier and Type	Method and Description
boolean	isConstant(Symbol symbol)
protected boolean	isDynamicString(Tree methodTree, ExpressionTree arg, Symbol currentlyChecking)
protected boolean	isDynamicString(Tree methodTree, ExpressionTree arg, Symbol currentlyChecking, boolean firstLevel)
protected boolean	isIdentifierDynamicString(Tree methodTree, IdentifierTree arg, Symbol currentlyChecking, boolean firstLevel)
List<Tree.Kind>	nodesToVisit()
protected void	setParameterNameFromArgument(ExpressionTree arg)

Methods inherited from class org.sonar.java.checks.SubscriptionBaseVisitor

getSemanticModel, scanFile

Methods inherited from class org.sonar.plugins.java.api.IssuableSubscriptionVisitor

addIssue, addIssue, addIssue, addIssueOnFile, reportIssue, reportIssue

Methods inherited from class org.sonar.java.ast.visitors.SubscriptionVisitor

hasSemantic, leaveNode, scanTree, visitNode, visitToken, visitTrivia

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Detail

parameterName

protected String parameterName

Constructor Detail

AbstractInjectionChecker

public AbstractInjectionChecker()

Method Detail

nodesToVisit

public List<Tree.Kind> nodesToVisit()

Specified by:

nodesToVisit in class SubscriptionVisitor

isDynamicString

protected boolean isDynamicString(Tree methodTree,
                      ExpressionTree arg,
                      @Nullable
                      Symbol currentlyChecking)

isDynamicString

protected boolean isDynamicString(Tree methodTree,
                      ExpressionTree arg,
                      @Nullable
                      Symbol currentlyChecking,
                      boolean firstLevel)

isIdentifierDynamicString

protected boolean isIdentifierDynamicString(Tree methodTree,
                                IdentifierTree arg,
                                @Nullable
                                Symbol currentlyChecking,
                                boolean firstLevel)

isConstant

public boolean isConstant(Symbol symbol)

setParameterNameFromArgument

protected void setParameterNameFromArgument(ExpressionTree arg)