Predicate getCommonSensitiveInfoFPRegex
Gets a regular expression for matching common names of variables that
indicate the value being held does not contains sensitive information,
but is a false positive for getCommonSensitiveInfoRegex.
- “tokenizer” is often used for java.util.StringTokenizer.
- “tokenImage” appears in parser code generated by JavaCC.
Import path
import semmle.code.java.security.SensitiveActions