Tainting the freemarker dataModel isn't exploitable

Author: atorralba

java/ql/lib/semmle/code/java/security/TemplateInjection.qll

@@ -74,7 +74,6 @@ private class TemplateInjectionSinkModels extends SinkModelCsv {
   override predicate row(string row) {
     row =
       [
-        "freemarker.template;Template;true;process;;;Argument[0];ssti;manual",
         "freemarker.template;Template;true;Template;(String,Reader);;Argument[1];ssti;manual",
         "freemarker.template;Template;true;Template;(String,Reader,Configuration);;Argument[1];ssti;manual",
         "freemarker.template;Template;true;Template;(String,Reader,Configuration,String);;Argument[1];ssti;manual",

java/ql/test/query-tests/security/CWE-094/FreemarkerSSTI.java

@@ -104,14 +104,14 @@ public void bad9(HttpServletRequest request) {
 		stringLoader.putTemplate("myTemplate", code, 0); // $hasTemplateInjection
 	}
 
-	@GetMapping(value = "bad10")
-	public void bad10(HttpServletRequest request) {
+	@GetMapping(value = "good1")
+	public void good1(HttpServletRequest request) {
 		HashMap<Object, Object> root = new HashMap();
 		String code = request.getParameter("code");
 		root.put("code", code);
 		Configuration cfg = new Configuration();
 		Template temp = cfg.getTemplate("test.ftlh");
 		OutputStreamWriter out = new OutputStreamWriter(System.out);
-		temp.process(root, out); // $hasTemplateInjection
+		temp.process(root, out); // Safe
 	}
 }