Java: update set-hostname-verifier sink kind to hostname-verification

Author: Jami Cogswell

java/ql/lib/ext/javax.net.ssl.model.yml

@@ -3,5 +3,5 @@ extensions:
       pack: codeql/java-all
       extensible: sinkModel
     data:
-      - ["javax.net.ssl", "HttpsURLConnection", True, "setDefaultHostnameVerifier", "", "", "Argument[0]", "set-hostname-verifier", "manual"]
-      - ["javax.net.ssl", "HttpsURLConnection", True, "setHostnameVerifier", "", "", "Argument[0]", "set-hostname-verifier", "manual"]
+      - ["javax.net.ssl", "HttpsURLConnection", True, "setDefaultHostnameVerifier", "", "", "Argument[0]", "hostname-verification", "manual"]
+      - ["javax.net.ssl", "HttpsURLConnection", True, "setHostnameVerifier", "", "", "Argument[0]", "hostname-verification", "manual"]

java/ql/lib/semmle/code/java/dataflow/ExternalFlow.qll

@@ -275,7 +275,7 @@ module ModelValidation {
           "open-url", "jndi-injection", "ldap-injection", "sql-injection", "jdbc-url",
           "log-injection", "mvel-injection", "xpath-injection", "groovy-injection", "xss",
           "ognl-injection", "intent-redirection", "pending-intents", "url-open-stream",
-          "url-redirection", "create-file", "read-file", "write-file", "set-hostname-verifier",
+          "url-redirection", "create-file", "read-file", "write-file", "hostname-verification",
           "header-splitting", "information-leak", "xslt-injection", "jexl-injection",
           "bean-validation", "template-injection", "fragment-injection", "command-injection"
         ] and

java/ql/src/Security/CWE/CWE-297/UnsafeHostnameVerification.ql

@@ -85,7 +85,7 @@ import TrustAllHostnameVerifierFlow::PathGraph
  * A sink that sets the `HostnameVerifier` on `HttpsURLConnection`.
  */
 private class HostnameVerifierSink extends DataFlow::Node {
-  HostnameVerifierSink() { sinkNode(this, "set-hostname-verifier") }
+  HostnameVerifierSink() { sinkNode(this, "hostname-verification") }
 }
 
 /**