hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 12:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

update alert-messages of the sensitive data queries to match #10314

Browse Source
This commit is contained in:
erik-krogh
2022-09-06 12:25:36 +02:00
parent aa56ca37ae
commit 24f2e3cc07
4 changed files with 53 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/src/Security/CWE-312/CleartextLogging.ql
View File

@@ -38,5 +38,5 @@ where
cfg.hasFlowPath(source, sink) and
// ignore logging to the browser console (even though it is not a good practice)
not inBrowserEnvironment(sink.getNode().asExpr().getTopLevel())
select sink.getNode(), source, sink, "Log entry depends on $@.", source.getNode(),
"sensitive data returned by " + source.getNode().(Source).describe()
select sink.getNode(), source, sink, "$@ is logged here.", source.getNode(),
"Sensitive data returned by " + source.getNode().(Source).describe()

4
javascript/ql/src/Security/CWE-312/CleartextStorage.ql
View File

@@ -19,5 +19,5 @@ import DataFlow::PathGraph
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
where cfg.hasFlowPath(source, sink)
select sink.getNode(), source, sink, "This data storage depends on $@.", source.getNode(),
"sensitive data returned by " + source.getNode().(Source).describe()
select sink.getNode(), source, sink, "$@ is stored here.", source.getNode(),
"Sensitive data returned by " + source.getNode().(Source).describe()