Apply suggestions from code review

yoff · RasmusWL · web-flow · commit 67b6f215dc0b · 2022-06-28T08:05:53.000+02:00
Co-authored-by: Rasmus Wriedt Larsen &lt;rasmuswriedtlarsen@gmail.com&gt;
diff --git a/python/ql/lib/semmle/python/security/dataflow/TarSlipCustomizations.qll b/python/ql/lib/semmle/python/security/dataflow/TarSlipCustomizations.qll
@@ -112,8 +112,9 @@ module TarSlip {
   /**
    * A sanitizer guard heuristic.
    *
-   * For a "check-like function-name" (matching `"%path"`), `checkPath`,
-   * and a call `checkPath(info.name)`, the variable `info` is considered checked.
+   * The test `if <check_path>(info.name)` should clear taint for `info`,
+   * where `<check_path>` is any function matching `"%path"`.
+   * `info` is assumed to be a `TarInfo` instance.
    */
   class TarFileInfoSanitizer extends SanitizerGuard {
     ControlFlowNode tarInfo;
