Update java/ql/src/experimental/Security/CWE/CWE-348/UseOfLessTrustedSource.ql

Co-authored-by: Chris Smowton <smowton@github.com>
This commit is contained in:
haby0
2021-04-20 19:36:16 +08:00
committed by GitHub
parent b1ee864ad9
commit 3e376f95c4

View File

@@ -16,7 +16,7 @@ import semmle.code.java.dataflow.FlowSources
import DataFlow::PathGraph
/**
* Taint-tracking configuration tracing flow from obtain client ip to use the client ip.
* Taint-tracking configuration tracing flow from obtaining a client ip from an HTTP header to a sensitive use.
*/
class UseOfLessTrustedSourceConfig extends TaintTracking::Configuration {
UseOfLessTrustedSourceConfig() { this = "UseOfLessTrustedSourceConfig" }