JS: Fix promiseStep documentation

asgerf · asgerf · commit 8542c7172e89 · 2021-03-17T13:29:16.000Z
diff --git a/javascript/ql/src/semmle/javascript/dataflow/TaintTracking.qll b/javascript/ql/src/semmle/javascript/dataflow/TaintTracking.qll
@@ -423,7 +423,7 @@ module TaintTracking {
 
       /**
       * Holds if `pred` &rarr; `succ` should be considered a taint-propagating
-      * data flow edge through data deserialization, such as `JSON.parse`.
+      * data flow edge through a promise.
       *
       * These steps consider a promise object to tainted if it can resolve to
       * a tainted value.

Original file line number	Diff line number	Diff line change
`@@ -423,7 +423,7 @@ module TaintTracking {`
`423`	`423`
`424`	`424`	`/**`
`425`	`425`	* Holds if `pred` → `succ` should be considered a taint-propagating
`426`		- * data flow edge through data deserialization, such as `JSON.parse`.
	`426`	`+ * data flow edge through a promise.`
`427`	`427`	`*`
`428`	`428`	`* These steps consider a promise object to tainted if it can resolve to`
`429`	`429`	`* a tainted value.`