File tree Expand file tree Collapse file tree 2 files changed +3
-3
lines changed
python/ql/src/semmle/python/web/django Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -9,7 +9,7 @@ private class DjangoResponseKind extends TaintKind {
99 DjangoResponseKind ( ) { this = "django.response.HttpResponse" }
1010}
1111
12- /** INTENRAL taint-source used for tracking a django response. */
12+ /** INTERNAL taint-source used for tracking a django response object . */
1313private class DjangoResponseSource extends TaintSource {
1414 DjangoResponseSource ( ) {
1515 exists ( DjangoContentResponseClass cls |
Original file line number Diff line number Diff line change @@ -34,7 +34,7 @@ class DjangoContentResponseClass extends ClassValue {
3434 this .getASuperType ( ) = base
3535 }
3636
37- // The reason these two method are defined in this class (and not in the Sink
37+ // The reason these two methods are defined in this class (and not in the Sink
3838 // definition that uses this class), is that if we were to add support for
3939 // `django.http.response.HttpResponseNotAllowed` it would make much more sense to add
4040 // the custom logic in this class (or subclass), than to handle all of it in the sink
@@ -47,7 +47,7 @@ class DjangoContentResponseClass extends ClassValue {
4747 ControlFlowNode getContentTypeArg ( CallNode call ) { none ( ) }
4848}
4949
50- /** A Class that is a Django Response, and is vulnerable to XSS. */
50+ /** A class that is a Django Response, and is vulnerable to XSS. */
5151class DjangoXSSVulnerableResponseClass extends DjangoContentResponseClass {
5252 DjangoXSSVulnerableResponseClass ( ) {
5353 // We want to avoid FPs on subclasses that are not exposed to XSS, for example `JsonResponse`.
You can’t perform that action at this time.
0 commit comments