Merge: drop java documentbuilderfactory taint overfit (general engine covers it)
ober
7a51617006677283382b643e34a85e779203dabf
--- a/lib/semgrep/scan.sls +++ b/lib/semgrep/scan.sls @@ -24796,14 +24796,6 @@ (scan-java-jpa-query-rule rule path source)] [(java-rule-id? rule "tainted-file-path") (scan-java-tainted-file-path-rule rule path source)] - [(java-rule-id? - rule - "documentbuilderfactory-disallow-doctype-decl-missing") - (java-ruleid-next-line-findings - rule - path - source - java-full-line-range)] [else #f])) (def csharp-response-write-regex "\\b([A-Za-z_][A-Za-z0-9_]*)[ \\t]*\\.[ \\t]*Write[ \\t]*\\(([^\\n)]*)\\)") --- a/src/semgrep/scan.ss +++ b/src/semgrep/scan.ss @@ -24902,9 +24902,6 @@ (scan-java-jpa-query-rule rule path source)] [(java-rule-id? rule "tainted-file-path") (scan-java-tainted-file-path-rule rule path source)] - [(java-rule-id? rule "documentbuilderfactory-disallow-doctype-decl-missing") - (java-ruleid-next-line-findings - rule path source java-full-line-range)] ;; `tainting` (field-initializer taint, via the field_declaration propagator ;; bridge) and `java-iterator-missed-propagation` (enhanced-for loop variable, ;; via the `for ($T $L : $R)` implicit-assignment propagator) now flow on the