File tree Expand file tree Collapse file tree 2 files changed +6
-8
lines changed
python/ql/src/experimental/semmle/python/security/dataflow Expand file tree Collapse file tree 2 files changed +6
-8
lines changed Original file line number Diff line number Diff line change @@ -35,11 +35,10 @@ module XmlBomb {
35
35
}
36
36
37
37
/**
38
- * A call to an XML parser that performs internal entity expansion, viewed
39
- * as a data flow sink for XML-bomb vulnerabilities.
38
+ * A call to an XML parser that is vulnerable to XML bombs.
40
39
*/
41
- class XmlParsingWithEntityResolution extends Sink {
42
- XmlParsingWithEntityResolution ( ) {
40
+ class XmlParsingVulnerableToXmlBomb extends Sink {
41
+ XmlParsingVulnerableToXmlBomb ( ) {
43
42
exists ( XML:: XmlParsing parsing , XML:: XmlParsingVulnerabilityKind kind |
44
43
kind .isXmlBomb ( ) and
45
44
parsing .vulnerableTo ( kind ) and
Original file line number Diff line number Diff line change @@ -35,11 +35,10 @@ module Xxe {
35
35
}
36
36
37
37
/**
38
- * A call to an XML parser that performs external entity expansion, viewed
39
- * as a data flow sink for XXE vulnerabilities.
38
+ * A call to an XML parser that is vulnerable to XXE.
40
39
*/
41
- class XmlParsingWithExternalEntityResolution extends Sink {
42
- XmlParsingWithExternalEntityResolution ( ) {
40
+ class XmlParsingVulnerableToXxe extends Sink {
41
+ XmlParsingVulnerableToXxe ( ) {
43
42
exists ( XML:: XmlParsing parsing , XML:: XmlParsingVulnerabilityKind kind |
44
43
kind .isXxe ( ) and
45
44
parsing .vulnerableTo ( kind ) and
You can’t perform that action at this time.
0 commit comments