Package com.tonic.analysis.cpg.taint

Enum TaintType

    • Enum Constant Summary

      Enum Constants 
      Enum Constant Description
      CUSTOM
      Data from a source the caller registered themselves rather than one of the built-in source definitions.
      DATABASE
      Data read back out of a datastore, which may itself have been stored tainted.
      DESERIALIZATION
      Data reconstructed from a serialized byte stream, so its type and contents are attacker-controlled.
      ENVIRONMENT
      Data taken from environment variables or system properties.
      FILE_INPUT
      Data read off the local filesystem through a stream or reader.
      NETWORK
      Data read from a socket or URL connection.
      REFLECTION
      Data obtained through reflective lookup, where the target member is chosen at run time.
      USER_INPUT
      Data supplied by a person at the boundary - request parameters, headers, cookies, console reads.

    • Enum Constant Detail

      • USER_INPUT

        public static final TaintType USER_INPUT
        Data supplied by a person at the boundary - request parameters, headers, cookies, console reads.

      • FILE_INPUT

        public static final TaintType FILE_INPUT
        Data read off the local filesystem through a stream or reader.

      • NETWORK

        public static final TaintType NETWORK
        Data read from a socket or URL connection.

      • DATABASE

        public static final TaintType DATABASE
        Data read back out of a datastore, which may itself have been stored tainted.

      • ENVIRONMENT

        public static final TaintType ENVIRONMENT
        Data taken from environment variables or system properties.

      • DESERIALIZATION

        public static final TaintType DESERIALIZATION
        Data reconstructed from a serialized byte stream, so its type and contents are attacker-controlled.

      • REFLECTION

        public static final TaintType REFLECTION
        Data obtained through reflective lookup, where the target member is chosen at run time.

      • CUSTOM

        public static final TaintType CUSTOM
        Data from a source the caller registered themselves rather than one of the built-in source definitions.

    • Method Detail

      • values

        public static TaintType[] values()
        Returns an array containing the constants of this enum type, in the order they are declared. This method may be used to iterate over the constants as follows: 
        for (TaintType c : TaintType.values())
    System.out.println(c);
        Returns:
        an array containing the constants of this enum type, in the order they are declared

      • valueOf

        public static TaintType valueOf​(String name)
        Returns the enum constant of this type with the specified name. The string must match exactly an identifier used to declare an enum constant in this type. (Extraneous whitespace characters are not permitted.)
        Parameters:
        name - the name of the enum constant to be returned.
        Returns:
        the enum constant with the specified name
        Throws:
        IllegalArgumentException - if this enum type has no constant with the specified name
        NullPointerException - if the argument is null