Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 2154b7d commit 89be8d8Copy full SHA for 89be8d8
1 file changed
ql/src/queries/security/cwe-732/WeakFilePermissions.ql
@@ -52,8 +52,8 @@ class PermissivePermissionsExpr extends Expr {
52
(acc = access(world_permission(perm)) or acc = access(group_permission(perm)))
53
)
54
or
55
- // adding/setting read or write permissions for all/group/owner
56
- this.(StringLiteral).getValueText().regexpMatch(".*[ago][^-=+]*[+=]*[xXst]*[rw].*")
+ // adding/setting read or write permissions for all/group/other
+ this.(StringLiteral).getValueText().regexpMatch(".*[ago][^-=+]*[+=][xXst]*[rw].*")
57
}
58
59
0 commit comments