small corrections in documentation

erik-krogh · asgerf · web-flow · commit 315faaffee72 · 2020-06-15T23:40:27.000+02:00
Co-authored-by: Asger F &lt;asgerf@github.com&gt;
diff --git a/javascript/ql/src/Security/CWE-312/BuildArtifactLeak.qhelp b/javascript/ql/src/Security/CWE-312/BuildArtifactLeak.qhelp
@@ -26,7 +26,7 @@
       should instead insert only the environment variables that are supposed to be public. 
     </p>
     <p>
-      The issue has been fixed in the below, where only the <code>DEBUG</code> environment variable is inserted into the artifact.
+      The issue has been fixed below, where only the <code>DEBUG</code> environment variable is inserted into the artifact.
     </p>
     <sample src="examples/build-leak-fixed.js"/>
   </example>
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/BuildArtifactLeak.qll b/javascript/ql/src/semmle/javascript/security/dataflow/BuildArtifactLeak.qll
@@ -20,7 +20,7 @@ module BuildArtifactLeak {
    * A taint tracking configuration for storage of sensitive information in build artifact.
    */
   class Configuration extends TaintTracking::Configuration {
-    Configuration() { this = "CleartextLogging" }
+    Configuration() { this = "BuildArtifactLeak" }
 
     override predicate isSource(DataFlow::Node source, DataFlow::FlowLabel lbl) {
       source.(CleartextLogging::Source).getLabel() = lbl
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/BuildArtifactLeakCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/BuildArtifactLeakCustomizations.qll
@@ -12,7 +12,7 @@ private import semmle.javascript.security.SensitiveActions::HeuristicNames
  */
 module BuildArtifactLeak {
   /**
-   * A data flow sink for clear-text logging of sensitive information.
+   * A data flow sink for storage of sensitive information in a build artifact.
    */
   abstract class Sink extends DataFlow::Node {
     /**
