hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Adjust id tag and fix ending line error

Browse Source
This commit is contained in:
luchua-bc
2020-06-23 12:10:07 +00:00
parent 3d4a5a337d
commit 7642b43990
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
java/ql/src/experimental/Security/CWE/CWE-548/InsecureDirectoryConfig.ql
View File

@@ -1,8 +1,8 @@
/**
* @id java/j2ee-server-directory-listing
* @name Inappropriately exposed directories and files yielding sensitive information like source code and credentials to attackers.
* @description A directory listing provides an attacker with the complete index of all the resources located inside of the complete web directory.
* @kind problem
* @id java/dir-listing
* @tags security
* external/cwe-548
*/
@@ -39,4 +39,5 @@ class DirectoryListingInitParam extends WebXMLElement {
from DirectoryListingInitParam initp
where initp.isListingEnabled()
select initp, "Directory listing should be disabled to mitigate filename and path disclosure"
select initp, "Directory listing should be disabled to mitigate filename and path disclosure"