hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-23 15:55:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

Ruby: doc fixes

Browse Source
This commit is contained in:
Harry Maclean
2024-02-26 12:57:21 +00:00
parent 8a670fe9a2
commit b86643fab2
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
ruby/ql/src/experimental/cwe-502/UnsafeYamlDeserialization.qll
View File

@@ -29,10 +29,12 @@ private module UnsafeYamlDeserializationConfig implements DataFlow::StateConfigS
predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }
/**
* A taint step related to the result of `YAML.parse` calls, or similar.
* Holds if taint with state `stateFrom` can flow from `pred` to `succ` with state `stateTo`.
*
* This is a taint step related to the result of `YAML.parse` calls, or similar.
* In the following example, this step will propagate taint from
* `source` to `sink`:
* this contains two seperate steps:
* this contains two separate steps:
* ```rb
* x = source
* sink = YAML.parse(x)