File tree Expand file tree Collapse file tree
javascript/ql/src/Security/CWE-094 Expand file tree Collapse file tree Original file line number Diff line number Diff line change 11/**
22 * @name Improper code sanitization
3- * @description Escaping code as HTML does not provide protection against code- injection.
3+ * @description Escaping code as HTML does not provide protection against code injection.
44 * @kind path-problem
55 * @problem.severity error
66 * @precision high
@@ -38,7 +38,7 @@ private DataFlow::Node remoteFlow(DataFlow::TypeTracker t) {
3838private DataFlow:: Node remoteFlow ( ) { result = remoteFlow ( DataFlow:: TypeTracker:: end ( ) ) }
3939
4040/**
41- * Gets a type-back-tracked instance of a code- injection sink using type-tracker `t`.
41+ * Gets a type-back-tracked instance of a code injection sink using type-tracker `t`.
4242 */
4343private DataFlow:: Node endsInCodeInjectionSink ( DataFlow:: TypeBackTracker t ) {
4444 t .start ( ) and
@@ -53,7 +53,7 @@ private DataFlow::Node endsInCodeInjectionSink(DataFlow::TypeBackTracker t) {
5353}
5454
5555/**
56- * Gets a reference to to a data-flow node that ends in a code- injection sink.
56+ * Gets a reference to to a data-flow node that ends in a code injection sink.
5757 */
5858private DataFlow:: Node endsInCodeInjectionSink ( ) {
5959 result = endsInCodeInjectionSink ( DataFlow:: TypeBackTracker:: end ( ) )
You can’t perform that action at this time.
0 commit comments