File tree Expand file tree Collapse file tree 2 files changed +4
-4
lines changed
ruby/ql/lib/codeql/ruby/security Expand file tree Collapse file tree 2 files changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -71,7 +71,7 @@ module InsecureDownload {
7171 }
7272
7373 /**
74- * A HTTP or FTP url .
74+ * A HTTP or FTP URL .
7575 */
7676 class InsecureUrl extends DataFlow:: Node {
7777 string str ;
@@ -99,8 +99,8 @@ module InsecureDownload {
9999 * A string containing a sensitive file extension,
100100 * seen as a source for downloads of sensitive files through an insecure connection.
101101 */
102- class SensitiveFileUrl extends Source {
103- SensitiveFileUrl ( ) { hasUnsafeExtension ( this .asExpr ( ) .getConstantValue ( ) .getString ( ) ) }
102+ class SensitiveFileName extends Source {
103+ SensitiveFileName ( ) { hasUnsafeExtension ( this .asExpr ( ) .getConstantValue ( ) .getString ( ) ) }
104104
105105 override DataFlow:: FlowState getALabel ( ) { result instanceof Label:: Sensitive }
106106 }
Original file line number Diff line number Diff line change 11/**
2- * Provides a taint tracking configuration for reasoning about download of sensitive file through insecure connection.
2+ * Provides a dataflow configuration for reasoning about the download of sensitive file through insecure connection.
33 *
44 * Note, for performance reasons: only import this file if
55 * `InsecureDownload::Configuration` is needed, otherwise
You can’t perform that action at this time.
0 commit comments