diff --git a/javascript/ql/experimental/adaptivethreatmodeling/src/StoredXssATM.ql b/javascript/ql/experimental/adaptivethreatmodeling/src/StoredXssATM.ql index 5941191d4cd..c3a328facd3 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/src/StoredXssATM.ql +++ b/javascript/ql/experimental/adaptivethreatmodeling/src/StoredXssATM.ql @@ -1,14 +1,14 @@ /** * For internal use only. * - * @name Stored cross-site scripting (boosted) + * @name Stored cross-site scripting (experimental) * @description Using uncontrolled stored values in HTML allows for a stored cross-site scripting vulnerability. * @kind path-problem * @scored * @problem.severity error * @security-severity 6.1 * @id adaptive-threat-modeling/js/stored-xss - * @tags experimental experimental/atm security external/cwe/cwe-079 external/cwe/cwe-116 + * @tags experimental security external/cwe/cwe-079 external/cwe/cwe-116 */ import experimental.adaptivethreatmodeling.StoredXssATM @@ -24,6 +24,6 @@ where score = getScoreForFlow(source.getNode(), sink.getNode()) and scoreString = getScoreStringForFlow(source.getNode(), sink.getNode()) select sink.getNode(), source, sink, - "[Score = " + scoreString + "] This may be a js/stored-xss result depending on $@ " + + "(Experimental) This may be a js/stored-xss result due to $@ " + getAdditionalAlertInfo(source.getNode(), sink.getNode()), source.getNode(), - "a user-provided value", score + " Identified using machine learning" diff --git a/javascript/ql/experimental/adaptivethreatmodeling/src/XssThroughDomATM.ql b/javascript/ql/experimental/adaptivethreatmodeling/src/XssThroughDomATM.ql index 8ccf78bcd07..326bd8bc507 100644 --- a/javascript/ql/experimental/adaptivethreatmodeling/src/XssThroughDomATM.ql +++ b/javascript/ql/experimental/adaptivethreatmodeling/src/XssThroughDomATM.ql @@ -1,14 +1,14 @@ /** * For internal use only. * - * @name DOM text reinterpreted as HTML (boosted) + * @name DOM text reinterpreted as HTML (experimental) * @description Reinterpreting text from the DOM as HTML can lead to a cross-site scripting vulnerability. * @kind path-problem * @scored * @problem.severity warning * @security-severity 6.1 * @id adaptive-threat-modeling/js/xss-through-dom - * @tags experimental experimental/atm security external/cwe/cwe-079 external/cwe/cwe-116 + * @tags experimental security external/cwe/cwe-079 external/cwe/cwe-116 */ import experimental.adaptivethreatmodeling.XssThroughDomATM @@ -24,6 +24,6 @@ where score = getScoreForFlow(source.getNode(), sink.getNode()) and scoreString = getScoreStringForFlow(source.getNode(), sink.getNode()) select sink.getNode(), source, sink, - "[Score = " + scoreString + "] This may be a js/xss-through-dom result depending on $@ " + + "(Experimental) This may be a js/xss-through-dom result due to $@ " + getAdditionalAlertInfo(source.getNode(), sink.getNode()), source.getNode(), - "a user-provided value", score + " Identified using machine learning."