Ruby: move rb/clear-text-storage-sensitive-data location from sink to source

alexrford · alexrford · commit fda2b56e2091 · 2022-03-10T17:38:52.000Z
diff --git a/ruby/ql/src/queries/security/cwe-312/CleartextStorage.ql b/ruby/ql/src/queries/security/cwe-312/CleartextStorage.ql
@@ -21,5 +21,5 @@ import DataFlow::PathGraph
 
 from Configuration config, DataFlow::PathNode source, DataFlow::PathNode sink
 where config.hasFlowPath(source, sink)
-select sink.getNode(), source, sink, "Sensitive data returned by $@ is stored here.",
+select source.getNode(), source, sink, "Sensitive data returned by $@ is stored here.",
   source.getNode(), source.getNode().(Source).describe()
