diff --git a/ql/src/experimental/CWE-090/LDAPinjection.ql b/ql/src/experimental/CWE-090/LDAPinjection.ql index 14b0d5cc6ce..f726514b49f 100644 --- a/ql/src/experimental/CWE-090/LDAPinjection.ql +++ b/ql/src/experimental/CWE-090/LDAPinjection.ql @@ -9,12 +9,10 @@ * external/cwe/cwe-90 */ -// Determine precision above import go import LDAPinjection import DataFlow::PathGraph from LdapVul config, DataFlow::PathNode source, DataFlow::PathNode sink where config.hasFlowPath(source, sink) -select sink.getNode(), source, sink, "$@ LDAP query parameter comes from $@.", sink.getNode(), - "This", source.getNode(), "a user-provided value" \ No newline at end of file +select sink.getNode(), source, sink, "LDAP query parameter is derived from $@.", source.getNode(), "a user-provided value"