diff --git a/javascript/ql/src/Security/CWE-200/PrivateFileExposure.ql b/javascript/ql/src/Security/CWE-200/PrivateFileExposure.ql index 30fbeb4dbe1..981d6210715 100644 --- a/javascript/ql/src/Security/CWE-200/PrivateFileExposure.ql +++ b/javascript/ql/src/Security/CWE-200/PrivateFileExposure.ql @@ -83,7 +83,7 @@ DataFlow::Node getALeakingFolder(string description) { ( if result.getFile().getParentContainer().getRelativePath().trim() != "" then description = "the folder " + result.getFile().getParentContainer().getRelativePath() - else description = "a folder" + else description = "the source root folder" ) or result = DataFlow::moduleImport("os").getAMemberCall("homedir") and