Java: try performance fix

github · Dec 16, 2024 · e112226 · e112226
1 parent 73a3a0d
commit e112226
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/java/ql/lib/semmle/code/java/security/CsrfUnprotectedRequestTypeQuery.qll b/java/ql/lib/semmle/code/java/security/CsrfUnprotectedRequestTypeQuery.qll
@@ -179,8 +179,8 @@ predicate unprotectedDatabaseUpdate(CallPathNode sourceMethod, CallPathNode sink
   sourceMethod.asMethod() instanceof CsrfUnprotectedMethod and
   exists(CallPathNode sinkMethod |
     sinkMethod.asMethod() instanceof DatabaseUpdateMethod and
-    sinkMethodCall.getASuccessor() = sinkMethod and
-    sourceMethod.getASuccessor+() = sinkMethodCall and
+    sinkMethodCall.getASuccessor() = pragma[only_bind_into](sinkMethod) and
+    sourceMethod.getASuccessor+() = pragma[only_bind_into](sinkMethodCall) and
     if
       sinkMethod.asMethod() instanceof SqlInjectionMethod and
       sinkMethod.asMethod().hasName("execute")