From a4402769f596194d1c19a0fd7757898acbdc92fe Mon Sep 17 00:00:00 2001 From: Alberto Fernandez Date: Sat, 18 Jan 2025 01:03:16 +0100 Subject: [PATCH] Release 2.36.0 --- pom.xml | 2 +- .../java/com/gdssecurity/pmd/rules/dfa/DfaSecurityRule.java | 4 +++- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/pom.xml b/pom.xml index bffd310..37c077e 100644 --- a/pom.xml +++ b/pom.xml @@ -4,7 +4,7 @@ 4.0.0 com.github.albfernandez pmd-gds - 2.36.0-SNAPSHOT + 2.36.0 https://github.com/albfernandez/GDS-PMD-Security-Rules jar PMD-Security-Rules diff --git a/src/main/java/com/gdssecurity/pmd/rules/dfa/DfaSecurityRule.java b/src/main/java/com/gdssecurity/pmd/rules/dfa/DfaSecurityRule.java index fa1bb3c..2374b93 100644 --- a/src/main/java/com/gdssecurity/pmd/rules/dfa/DfaSecurityRule.java +++ b/src/main/java/com/gdssecurity/pmd/rules/dfa/DfaSecurityRule.java @@ -253,7 +253,9 @@ private void clearTaintedAndVariablesList() { } protected boolean isSanitizerMethod(String type, String method) { - return this.sanitizers.contains(type + "." + method) || this.sanitizers.contains("*." + method); + return this.sanitizers.contains(type + "." + method) || + this.sanitizers.contains("*." + method) || + this.sanitizers.contains(type + ".*"); } private boolean isSink(String objectTypeAndMethod) {