hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-18 21:44:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Geoffrey White <40627776+geoffw0@users.noreply.github.com>
This commit is contained in:
Tony Torralba
2022-12-15 12:29:28 +01:00
parent 11c03fb8c9
commit 6837af97bc
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
swift/ql/src/queries/Security/CWE-943/PredicateInjection.qhelp
View File

@@ -11,7 +11,7 @@ be able to change the overall meaning of the predicate.
<p>
When building a predicate from untrusted data, pass it to the appropriate <code>arguments</code> parameter
during initialization, or as an array of substitution variables before evaluation, instead of appending
or concatenating it to the body ofthe predicate.
or concatenating it to the body of the predicate.
</p>
</recommendation>
<example>

2
swift/ql/src/queries/Security/CWE-943/PredicateInjection.ql
View File

@@ -1,6 +1,6 @@
/**
* @name Predicate built from user-controlled sources
* @description Building a NSPredicate from user-controlled sources may lead to attackers
* @description Building an NSPredicate from user-controlled sources may lead to attackers
* changing the predicate's intended logic.
* @kind path-problem
* @problem.severity error