From c2733ad22e04d6af507a99e86f232d33f754fa25 Mon Sep 17 00:00:00 2001 From: Remco Vermeulen Date: Mon, 20 Jul 2020 14:55:00 +0200 Subject: [PATCH] Apply grammar suggestions Co-authored-by: Anders Schack-Mulligen --- java/ql/src/semmle/code/java/security/ResponseSplitting.qll | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/java/ql/src/semmle/code/java/security/ResponseSplitting.qll b/java/ql/src/semmle/code/java/security/ResponseSplitting.qll index ce7d221159d..d09e6567b15 100644 --- a/java/ql/src/semmle/code/java/security/ResponseSplitting.qll +++ b/java/ql/src/semmle/code/java/security/ResponseSplitting.qll @@ -6,7 +6,7 @@ import semmle.code.java.dataflow.FlowSources import semmle.code.java.frameworks.Servlets import semmle.code.java.frameworks.JaxWS -/** A sink that is vulnerable to a HTTP header splitting attack. */ +/** A sink that is vulnerable to an HTTP header splitting attack. */ abstract class HeaderSplittingSink extends DataFlow::Node { } /** A source that introduces data considered safe to use by a header splitting source. */ @@ -14,7 +14,7 @@ abstract class SafeHeaderSplittingSource extends DataFlow::Node { SafeHeaderSplittingSource() { this instanceof RemoteFlowSource } } -/** A sink that identifies a Java Servlet or JaxWs method that is vulnerable to a HTTP header splitting attack. */ +/** A sink that identifies a Java Servlet or JaxWs method that is vulnerable to an HTTP header splitting attack. */ private class ServletHeaderSplittingSink extends HeaderSplittingSink { ServletHeaderSplittingSink() { exists(ResponseAddCookieMethod m, MethodAccess ma |