Conversation

Closed

1 task

…ors.qll
Co-Authored-By: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>

ggolawski deleted the java-spring-boot-actuators branch

Comment on lines +88 to +97

		predicate permitsSpringBootActuators() {
		exists(AuthorizeRequestsCall authorizeRequestsCall \|
		// .requestMatcher(EndpointRequest).authorizeRequests([...]).[...]
		authorizeRequestsCall.getQualifier() instanceof RequestMatcherCall
		or
		// .requestMatchers(matcher -> EndpointRequest).authorizeRequests([...]).[...]
		authorizeRequestsCall.getQualifier() instanceof RequestMatchersCall
		or
		// http.authorizeRequests([...]).[...]
		authorizeRequestsCall.getQualifier() instanceof VarAccess

Merged