Improve query style

No need to highlight the sink again in the message when the sink is the alert location to begin with
This commit is contained in:
Chris Smowton
2021-11-09 10:08:02 +00:00
committed by GitHub
parent f7c19dea71
commit dda425ca8d

View File

@@ -9,12 +9,10 @@
* external/cwe/cwe-90
*/
// Determine precision above
import go
import LDAPinjection
import DataFlow::PathGraph
from LdapVul config, DataFlow::PathNode source, DataFlow::PathNode sink
where config.hasFlowPath(source, sink)
select sink.getNode(), source, sink, "$@ LDAP query parameter comes from $@.", sink.getNode(),
"This", source.getNode(), "a user-provided value"
select sink.getNode(), source, sink, "LDAP query parameter is derived from $@.", source.getNode(), "a user-provided value"