mirror of
https://github.com/github/codeql.git
synced 2026-05-03 12:45:27 +02:00
fix an instance of ql/acronyms-should-be-pascal-case
This commit is contained in:
@@ -116,10 +116,13 @@ module DomBasedXss {
|
||||
/**
|
||||
* A write to a URL which may execute JavaScript code.
|
||||
*/
|
||||
class WriteURLSink extends Sink instanceof ClientSideUrlRedirect::Sink {
|
||||
WriteURLSink() { super.isXssSink() }
|
||||
class WriteUrlSink extends Sink instanceof ClientSideUrlRedirect::Sink {
|
||||
WriteUrlSink() { super.isXssSink() }
|
||||
}
|
||||
|
||||
/** DEPRECATED: Alias for `WriteUrlSink`. */
|
||||
deprecated class WriteURLSink = WriteUrlSink;
|
||||
|
||||
/**
|
||||
* An expression whose value is interpreted as HTML or CSS
|
||||
* and may be inserted into the DOM.
|
||||
|
||||
@@ -25,7 +25,7 @@ deprecated class JQueryHtmlOrSelectorInjectionConfiguration = Configuration;
|
||||
*/
|
||||
class HTMLSink extends DataFlow::Node instanceof Sink {
|
||||
HTMLSink() {
|
||||
not this instanceof WriteURLSink and
|
||||
not this instanceof WriteUrlSink and
|
||||
not this instanceof JQueryHtmlOrSelectorSink
|
||||
}
|
||||
}
|
||||
@@ -61,7 +61,7 @@ class Configuration extends TaintTracking::Configuration {
|
||||
sink instanceof JQueryHtmlOrSelectorSink and
|
||||
label = [DataFlow::FlowLabel::taint(), prefixLabel()]
|
||||
or
|
||||
sink instanceof WriteURLSink and
|
||||
sink instanceof WriteUrlSink and
|
||||
label = prefixLabel()
|
||||
}
|
||||
|
||||
|
||||
@@ -46,7 +46,7 @@ class Configuration extends TaintTracking::Configuration {
|
||||
super.hasFlowPath(src, sink) and
|
||||
// filtering away readings of `src` that end in a URL sink.
|
||||
not (
|
||||
sink.getNode() instanceof DomBasedXss::WriteURLSink and
|
||||
sink.getNode() instanceof DomBasedXss::WriteUrlSink and
|
||||
src.getNode().(DomPropertySource).getPropertyName() = "src"
|
||||
)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user