hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update class qldocs

Browse Source 
Change the ql docs to meet the style-guide points 1 and 3 for
classes.
This commit is contained in:
Remco Vermeulen
2020-07-09 17:31:37 +02:00
parent b3bb4cbf54
commit c739c733fe
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
java/ql/src/semmle/code/java/security/ResponseSplitting.qll
View File

@@ -6,15 +6,15 @@ import semmle.code.java.dataflow.FlowSources
import semmle.code.java.frameworks.Servlets
import semmle.code.java.frameworks.JaxWS
/** Header-splitting sinks. Expressions that end up in an HTTP header. */
/** A sink that is vulnerable to a HTTP header splitting attack. */
abstract class HeaderSplittingSink extends DataFlow::Node { }
/** Sources that cannot be used to perform a header splitting attack. */
/** A source that introduces data considered safe to use by a header splitting source. */
abstract class SafeHeaderSplittingSource extends DataFlow::Node {
SafeHeaderSplittingSource() { this instanceof RemoteFlowSource }
}
/** Servlet and JaxWS sinks susceptible to header splitting. */
/** A sink that identifies a Java Servlet or JaxWs method that is vulnerable to a HTTP header splitting attack. */
private class ServletHeaderSplittingSink extends HeaderSplittingSink {
ServletHeaderSplittingSink() {
exists(ResponseAddCookieMethod m, MethodAccess ma |
@@ -40,7 +40,7 @@ private class ServletHeaderSplittingSink extends HeaderSplittingSink {
}
}
/** Sources of data considered safe to use by header splitting sinks. */
/** A default source that introduces data considered safe to use by a header splitting source. */
private class DefaultSafeHeaderSplittingSource extends SafeHeaderSplittingSource {
DefaultSafeHeaderSplittingSource() {
this.asExpr().(MethodAccess).getMethod() instanceof HttpServletRequestGetHeaderMethod or