Java: Improve QL-Doc

intrigus · intrigus · commit a62a2e58dd35 · 2021-01-11T13:42:07.000+01:00
diff --git a/java/ql/src/Security/CWE/CWE-297/UnsafeHostnameVerification.ql b/java/ql/src/Security/CWE/CWE-297/UnsafeHostnameVerification.ql
@@ -29,7 +29,7 @@ private predicate alwaysReturnsTrue(HostnameVerifierVerify m) {
 }
 
 /**
- * A class that overrides the `javax.net.ssl.HostnameVerifier.verify` method and **always** returns `true`, thus
+ * A class that overrides the `javax.net.ssl.HostnameVerifier.verify` method and **always** returns `true` (ignoring exceptional flow), thus
  * accepting any certificate despite a hostname mismatch.
  */
 class TrustAllHostnameVerifier extends RefType {

Original file line number	Diff line number	Diff line change
`@@ -29,7 +29,7 @@ private predicate alwaysReturnsTrue(HostnameVerifierVerify m) {`
`29`	`29`	`}`
`30`	`30`
`31`	`31`	`/**`
`32`		- * A class that overrides the `javax.net.ssl.HostnameVerifier.verify` method and always returns `true`, thus
	`32`	+ * A class that overrides the `javax.net.ssl.HostnameVerifier.verify` method and always returns `true` (ignoring exceptional flow), thus
`33`	`33`	`* accepting any certificate despite a hostname mismatch.`
`34`	`34`	`*/`
`35`	`35`	`class TrustAllHostnameVerifier extends RefType {`