From ca4fa0aaae0599848eb07d77ea242fcaa741c8b8 Mon Sep 17 00:00:00 2001 From: Ahmed Farid Date: Wed, 27 Jul 2022 00:06:28 +0100 Subject: [PATCH] Update TimingAttack.qll --- python/ql/src/experimental/Security/CWE-208/TimingAttack.qll | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/python/ql/src/experimental/Security/CWE-208/TimingAttack.qll b/python/ql/src/experimental/Security/CWE-208/TimingAttack.qll index 239aeeced9a..4d6e316ff1e 100644 --- a/python/ql/src/experimental/Security/CWE-208/TimingAttack.qll +++ b/python/ql/src/experimental/Security/CWE-208/TimingAttack.qll @@ -71,7 +71,7 @@ class SecretSource extends DataFlow::Node { SecretSource() { secret = this.asExpr() } - /** Holds if the source of secret was remote user input. */ + /** Holds if the secret was deliverd by remote user. */ predicate includesUserInput() { exists(UserInputSecretConfig config | config.hasFlowTo(DataFlow2::exprNode(secret))