hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Fix typos

Browse Source 
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
This commit is contained in:
Edward Minnix III
2023-12-04 23:04:17 -05:00
committed by Ed Minnix
parent 51006aa088
commit 1f37e70d83
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll
View File

@@ -27,7 +27,7 @@ module ExecTaintedEnvironmentConfig implements DataFlow::ConfigSig {
predicate isSink(DataFlow::Node sink) { predicate isSink(DataFlow::Node sink) {
sinkNode(sink, "environment-injection") sinkNode(sink, "environment-injection")
or or
// sink is an added to a `ProcessBuilder::environment` map. // sink is a key or value added to a `ProcessBuilder::environment` map.
exists(MapMutation mm | mm.getAnArgument() = sink.asExpr() | exists(MapMutation mm | mm.getAnArgument() = sink.asExpr() |
ProcessBuilderEnvironmentFlow::flowToExpr(mm.getQualifier()) ProcessBuilderEnvironmentFlow::flowToExpr(mm.getQualifier())
) )

2
java/ql/src/Security/CWE/CWE-078/ExecTaintedEnvironment.ql
View File

@@ -7,7 +7,7 @@
* @precision medium * @precision medium
* @id java/exec-tainted-environment * @id java/exec-tainted-environment
* @tags security * @tags security
* external/cwe/cwe-078 * external/cwe/cwe-078
* external/cwe/cwe-088 * external/cwe/cwe-088
*/ */