hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

small corrections in documentation

Browse Source 
Co-authored-by: Asger F <asgerf@github.com>
This commit is contained in:
Erik Krogh Kristensen
2020-06-15 23:40:27 +02:00
committed by GitHub
parent d2716c532c
commit 315faaffee
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Security/CWE-312/BuildArtifactLeak.qhelp
View File

@@ -26,7 +26,7 @@
should instead insert only the environment variables that are supposed to be public.
</p>
<p>
The issue has been fixed in the below, where only the <code>DEBUG</code> environment variable is inserted into the artifact.
The issue has been fixed below, where only the <code>DEBUG</code> environment variable is inserted into the artifact.
</p>
<sample src="examples/build-leak-fixed.js"/>
</example>

2
javascript/ql/src/semmle/javascript/security/dataflow/BuildArtifactLeak.qll
View File

@@ -20,7 +20,7 @@ module BuildArtifactLeak {
* A taint tracking configuration for storage of sensitive information in build artifact.
*/
class Configuration extends TaintTracking::Configuration {
Configuration() { this = "CleartextLogging" }
Configuration() { this = "BuildArtifactLeak" }
override predicate isSource(DataFlow::Node source, DataFlow::FlowLabel lbl) {
source.(CleartextLogging::Source).getLabel() = lbl

2
javascript/ql/src/semmle/javascript/security/dataflow/BuildArtifactLeakCustomizations.qll
View File

@@ -12,7 +12,7 @@ private import semmle.javascript.security.SensitiveActions::HeuristicNames
*/
module BuildArtifactLeak {
/**
* A data flow sink for clear-text logging of sensitive information.
* A data flow sink for storage of sensitive information in a build artifact.
*/
abstract class Sink extends DataFlow::Node {
/**