We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 9e154ff commit 67b6f21Copy full SHA for 67b6f21
python/ql/lib/semmle/python/security/dataflow/TarSlipCustomizations.qll
@@ -112,8 +112,9 @@ module TarSlip {
112
/**
113
* A sanitizer guard heuristic.
114
*
115
- * For a "check-like function-name" (matching `"%path"`), `checkPath`,
116
- * and a call `checkPath(info.name)`, the variable `info` is considered checked.
+ * The test `if <check_path>(info.name)` should clear taint for `info`,
+ * where `<check_path>` is any function matching `"%path"`.
117
+ * `info` is assumed to be a `TarInfo` instance.
118
*/
119
class TarFileInfoSanitizer extends SanitizerGuard {
120
ControlFlowNode tarInfo;
0 commit comments