hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>
This commit is contained in:
Tony Torralba
2021-07-26 16:57:12 +02:00
parent 6bf1e87bbe
commit d10dbbdd9d
3 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
java/change-notes/2021-06-08-spel-injection-query.md
View File

@@ -1,2 +1,2 @@
lgtm,codescanning lgtm,codescanning
* The query "Expression language injection (Spring)" (`java/spel-expression-injection`) has been promoted from experimental to the main query pack. Its results will now appear by default. This query was originally [submitted as an experimental query by @artem-smotrakov](https://github.com/github/codeql/pull/3291) * The query "Expression language injection (Spring)" (`java/spel-expression-injection`) has been promoted from experimental to the main query pack. Its results will now appear by default. This query was originally [submitted as an experimental query by @artem-smotrakov](https://github.com/github/codeql/pull/3291).

2
java/ql/src/semmle/code/java/frameworks/spring/SpringExpression.qll
View File

@@ -22,7 +22,7 @@ class ExpressionParser extends RefType {
} }
/** /**
* The class `org.springframework.expression.spel.support."SimpleEvaluationContext$Builder`. * The class `org.springframework.expression.spel.support.SimpleEvaluationContext$Builder`.
*/ */
class SimpleEvaluationContextBuilder extends RefType { class SimpleEvaluationContextBuilder extends RefType {
SimpleEvaluationContextBuilder() { SimpleEvaluationContextBuilder() {

2
java/ql/src/semmle/code/java/security/SpelInjectionQuery.qll
View File

@@ -54,7 +54,7 @@ private class SafeEvaluationContextFlowConfig extends DataFlow2::Configuration {
} }
/** /**
* A `ContextSource` that is safe from SpEL injection * A `ContextSource` that is safe from SpEL injection.
*/ */
private class SafeContextSource extends DataFlow::ExprNode { private class SafeContextSource extends DataFlow::ExprNode {
SafeContextSource() { SafeContextSource() {