diff --git a/python/ql/src/Security/CWE-327/InsecureProtocol.ql b/python/ql/src/Security/CWE-327/InsecureProtocol.ql index 755cf0d43ab..b4984c8c764 100644 --- a/python/ql/src/Security/CWE-327/InsecureProtocol.ql +++ b/python/ql/src/Security/CWE-327/InsecureProtocol.ql @@ -51,8 +51,7 @@ string callName(Nameable call) { } string configName(ProtocolConfiguration protocolConfiguration) { - result = - "call to " + callName(protocolConfiguration.(DataFlow::CallCfgNode).getFunction()) + result = "call to " + callName(protocolConfiguration.(DataFlow::CallCfgNode).getFunction()) or not protocolConfiguration instanceof DataFlow::CallCfgNode and not protocolConfiguration instanceof ContextCreation and diff --git a/python/ql/src/semmle/python/frameworks/PEP249.qll b/python/ql/src/semmle/python/frameworks/PEP249.qll index 6f4613b428e..ef58ef1fbdb 100644 --- a/python/ql/src/semmle/python/frameworks/PEP249.qll +++ b/python/ql/src/semmle/python/frameworks/PEP249.qll @@ -122,7 +122,5 @@ DataFlow::Node execute() { execute(DataFlow::TypeTracker::end()).flowsTo(result) private class ExecuteCall extends SqlExecution::Range, DataFlow::CallCfgNode { ExecuteCall() { this.getFunction() = execute() } - override DataFlow::Node getSql() { - result in [this.getArg(0), this.getArgByName("sql")] - } + override DataFlow::Node getSql() { result in [this.getArg(0), this.getArgByName("sql")] } }