mirror of
https://github.com/github/codeql.git
synced 2026-04-25 00:35:20 +02:00
Fix alert message to match style guide
This commit is contained in:
@@ -28,9 +28,7 @@ abstract class Dependency extends Locatable {
|
||||
*/
|
||||
abstract predicate relevantForFile(File file);
|
||||
|
||||
/**
|
||||
* An import of this dependency.
|
||||
*/
|
||||
/** Gets an import of this dependency. */
|
||||
ImportSpec getAnImport() {
|
||||
result.getPath().regexpMatch("\\Q" + this.getDepPath() + "\\E(/.*)?") and
|
||||
this.relevantForFile(result.getFile())
|
||||
|
||||
@@ -24,5 +24,5 @@ where
|
||||
// this excludes flow from safe parts of request URLs, for example the full URL when the
|
||||
// doing a redirect from `http://<path>` to `https://<path>`
|
||||
not scfg.hasFlow(_, sink.getNode())
|
||||
select sink.getNode(), source, sink, "Untrusted URL redirection depends on a $@.", source.getNode(),
|
||||
"user-provided value"
|
||||
select sink.getNode(), source, sink, "This path to an untrusted URL redirection depends on a $@.",
|
||||
source.getNode(), "user-provided value"
|
||||
|
||||
Reference in New Issue
Block a user