Fix Micronaut ql-for-ql alerts

nicolaswill · nicolaswill · commit 3869abebea44 · 2026-02-27T17:24:02.000+01:00
diff --git a/java/ql/lib/semmle/code/java/frameworks/micronaut/MicronautController.qll b/java/ql/lib/semmle/code/java/frameworks/micronaut/MicronautController.qll
@@ -87,7 +87,7 @@ class MicronautRequestMappingParameter extends Parameter {
   }
 
   private predicate isExplicitlyTaintedInput() {
-    // The MicronautHttpInputAnnotations allow access to the URI path,
+    // The MicronautHttpInputAnnotation allows access to the URI path,
     // request parameters, cookie values, headers, and the body of the request.
     this.getAnAnnotation() instanceof MicronautHttpInputAnnotation
     or
diff --git a/java/ql/test/library-tests/frameworks/micronaut/flow.ql b/java/ql/test/library-tests/frameworks/micronaut/flow.ql
@@ -1,6 +1,4 @@
 import java
-import semmle.code.java.dataflow.TaintTracking
-import semmle.code.java.dataflow.FlowSources
 import semmle.code.java.security.RequestForgery
 import semmle.code.java.security.UrlRedirect
 import semmle.code.java.security.ResponseSplitting

Original file line number	Diff line number	Diff line change
`@@ -87,7 +87,7 @@ class MicronautRequestMappingParameter extends Parameter {`
`87`	`87`	`}`
`88`	`88`
`89`	`89`	`private predicate isExplicitlyTaintedInput() {`
`90`		`- // The MicronautHttpInputAnnotations allow access to the URI path,`
	`90`	`+ // The MicronautHttpInputAnnotation allows access to the URI path,`
`91`	`91`	`// request parameters, cookie values, headers, and the body of the request.`
`92`	`92`	`this.getAnAnnotation() instanceof MicronautHttpInputAnnotation`
`93`	`93`	`or`