From 7b3f1a098204388cc7915f7ed35d13fbecbbf804 Mon Sep 17 00:00:00 2001 From: Harry Maclean Date: Fri, 23 Feb 2024 11:14:52 +0000 Subject: [PATCH] Ruby: fix comment --- ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll b/ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll index adeaf79fe17..6fde1705018 100644 --- a/ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll +++ b/ruby/ql/lib/codeql/ruby/frameworks/ActionController.qll @@ -67,6 +67,8 @@ module ActionController { */ class ActionControllerClass extends DataFlow::ClassNode { ActionControllerClass() { + // In Rails applications `ApplicationController` typically extends `ActionController::Base`, but we + // treat it separately in case the `ApplicationController` definition is not in the database. this = DataFlow::getConstant("ApplicationController").getADescendentModule() or this = actionControllerBaseClass().getADescendentModule() and @@ -97,8 +99,6 @@ class ActionControllerClass extends DataFlow::ClassNode { private DataFlow::ConstRef actionControllerBaseClass() { result = [ - // In Rails applications `ApplicationController` typically extends `ActionController::Base`, but we - // treat it separately in case the `ApplicationController` definition is not in the database. DataFlow::getConstant("ActionController").getConstant("Base"), // ActionController::Metal and ActionController::API technically don't contain all of the // methods available in Base, such as those for rendering views.