From dda425ca8dee33461497d22c1825d892cd003f3f Mon Sep 17 00:00:00 2001 From: Chris Smowton Date: Tue, 9 Nov 2021 10:08:02 +0000 Subject: [PATCH] Improve query style No need to highlight the sink again in the message when the sink is the alert location to begin with --- ql/src/experimental/CWE-090/LDAPinjection.ql | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/ql/src/experimental/CWE-090/LDAPinjection.ql b/ql/src/experimental/CWE-090/LDAPinjection.ql index 14b0d5cc6ce..f726514b49f 100644 --- a/ql/src/experimental/CWE-090/LDAPinjection.ql +++ b/ql/src/experimental/CWE-090/LDAPinjection.ql @@ -9,12 +9,10 @@ * external/cwe/cwe-90 */ -// Determine precision above import go import LDAPinjection import DataFlow::PathGraph from LdapVul config, DataFlow::PathNode source, DataFlow::PathNode sink where config.hasFlowPath(source, sink) -select sink.getNode(), source, sink, "$@ LDAP query parameter comes from $@.", sink.getNode(), - "This", source.getNode(), "a user-provided value" \ No newline at end of file +select sink.getNode(), source, sink, "LDAP query parameter is derived from $@.", source.getNode(), "a user-provided value"