From f4bc4df8c172b592aa9cbad29fce241061963a4a Mon Sep 17 00:00:00 2001 From: Tony Torralba Date: Wed, 4 Aug 2021 12:08:08 +0200 Subject: [PATCH] Renamed JWTQuery so that it's named after the actual query name --- java/ql/src/Security/CWE/CWE-347/MissingJWTSignatureCheck.ql | 2 +- .../{JWTQuery.qll => MissingJWTSignatureCheckQuery.qll} | 2 +- .../security/CWE-347/MissingJWTSignatureCheckTest.ql | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) rename java/ql/src/semmle/code/java/security/{JWTQuery.qll => MissingJWTSignatureCheckQuery.qll} (95%) diff --git a/java/ql/src/Security/CWE/CWE-347/MissingJWTSignatureCheck.ql b/java/ql/src/Security/CWE/CWE-347/MissingJWTSignatureCheck.ql index 00d0503b6f7..ad6e41320ee 100644 --- a/java/ql/src/Security/CWE/CWE-347/MissingJWTSignatureCheck.ql +++ b/java/ql/src/Security/CWE/CWE-347/MissingJWTSignatureCheck.ql @@ -10,7 +10,7 @@ */ import java -import semmle.code.java.security.JWTQuery +import semmle.code.java.security.MissingJWTSignatureCheckQuery from JwtParserWithInsecureParseSink sink, JwtParserWithSigningKeyExpr parserExpr where sink.asExpr() = parserExpr diff --git a/java/ql/src/semmle/code/java/security/JWTQuery.qll b/java/ql/src/semmle/code/java/security/MissingJWTSignatureCheckQuery.qll similarity index 95% rename from java/ql/src/semmle/code/java/security/JWTQuery.qll rename to java/ql/src/semmle/code/java/security/MissingJWTSignatureCheckQuery.qll index a55f0058b37..7432eaac85d 100644 --- a/java/ql/src/semmle/code/java/security/JWTQuery.qll +++ b/java/ql/src/semmle/code/java/security/MissingJWTSignatureCheckQuery.qll @@ -1,4 +1,4 @@ -/** Provides classes to be used in queries related to JWT vulnerabilities. */ +/** Provides classes to be used in queries related to JWT signature vulnerabilities. */ import java import semmle.code.java.dataflow.DataFlow diff --git a/java/ql/test/query-tests/security/CWE-347/MissingJWTSignatureCheckTest.ql b/java/ql/test/query-tests/security/CWE-347/MissingJWTSignatureCheckTest.ql index 35afd69d339..d9d4be1e4d5 100644 --- a/java/ql/test/query-tests/security/CWE-347/MissingJWTSignatureCheckTest.ql +++ b/java/ql/test/query-tests/security/CWE-347/MissingJWTSignatureCheckTest.ql @@ -1,5 +1,5 @@ import java -import semmle.code.java.security.JWTQuery +import semmle.code.java.security.MissingJWTSignatureCheckQuery import TestUtilities.InlineExpectationsTest class HasMissingJwtSignatureCheckTest extends InlineExpectationsTest {