hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 17:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

Minor qldoc changes

Browse Source
This commit is contained in:
luchua-bc
2021-03-10 12:18:55 +00:00
parent 72f28513eb
commit f0ddfc9283
1 changed files with 5 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
java/ql/src/experimental/Security/CWE/CWE-1004/SensitiveCookieNotHttpOnly.ql
View File

@@ -79,7 +79,10 @@ class CookieResponseSink extends DataFlow::ExprNode {
}
}
/** Holds if `cie` is an invocation of a JAX-RS `NewCookie` constructor that sets `HttpOnly` to true. */
/**
* Holds if `ClassInstanceExpr` cie is an invocation of a JAX-RS `NewCookie` constructor
* that sets `HttpOnly` to true.
*/
predicate setHttpOnlyInNewCookie(ClassInstanceExpr cie) {
cie.getConstructedType().hasQualifiedName(["javax.ws.rs.core", "jakarta.ws.rs.core"], "NewCookie") and
(
@@ -111,7 +114,7 @@ class CookieInstanceExpr extends TaintPreservingCallable {
}
/**
* Holds if the node is a test method indicated by:
* Holds if the MethodAccess `ma` is a test method call indicated by:
* a) in a test directory such as `src/test/java`
* b) in a test package whose name has the word `test`
* c) in a test class whose name has the word `test`