CodeQL library for Java/Kotlin
codeql/java-all 7.1.3-dev (changelog, source)
Search

Predicate isHardcodedCredentialsComparison

Holds if sink compares password p against a hardcoded expression source.

Import path

import semmle.code.java.security.HardcodedCredentialsComparison
predicate isHardcodedCredentialsComparison(EqualsCall sink, HardcodedExpr source, PasswordVariable p)