Update java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll

haby0 · smowton · web-flow · commit 8a7d28a2ed8f · 2021-04-10T04:29:49.000+08:00
Co-authored-by: Chris Smowton &lt;smowton@github.com&gt;
diff --git a/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll b/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll
@@ -130,7 +130,7 @@ class RemoteFlowConfig extends DataFlow2::Configuration {
   }
 }
 
-/** A data flow configuration tracing flow from json data to splicing jsonp data. */
+/** A data flow configuration tracing flow from json data into the argument `json` of JSONP-like string `someFunctionName + "(" + json + ")"`. */
 class JsonDataFlowConfig extends DataFlow2::Configuration {
   JsonDataFlowConfig() { this = "JsonDataFlowConfig" }
 

Original file line number	Diff line number	Diff line change
`@@ -130,7 +130,7 @@ class RemoteFlowConfig extends DataFlow2::Configuration {`
`130`	`130`	`}`
`131`	`131`	`}`
`132`	`132`
`133`		`-/** A data flow configuration tracing flow from json data to splicing jsonp data. */`
	`133`	+/** A data flow configuration tracing flow from json data into the argument `json` of JSONP-like string `someFunctionName + "(" + json + ")"`. */
`134`	`134`	`class JsonDataFlowConfig extends DataFlow2::Configuration {`
`135`	`135`	`JsonDataFlowConfig() { this = "JsonDataFlowConfig" }`
`136`	`136`