Skip to content

Commit 356eda9

Browse files
fix typo
1 parent 6583002 commit 356eda9

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

detection_rules/rule_validators.py

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -588,6 +588,8 @@ def add_stack_targets(query_text: str, include_endgame: bool) -> None:
588588

589589
def validate(self, data: "QueryRuleData", meta: RuleMeta, max_attempts: int = 10) -> None: # type: ignore[reportIncompatibleMethodOverride]
590590
"""Validate an EQL query using a unified plan of schema combinations."""
591+
# base field declaration
592+
field = None
591593
if meta.query_schema_validation is False or meta.maturity == "deprecated":
592594
return
593595

@@ -662,7 +664,7 @@ def validate_query_text_with_schema( # noqa: PLR0913
662664
# treat this target as non-fatal to honor EQL optional semantics.
663665

664666
# To support EQL sequence and sub query validation we need to return this field to overwrite
665-
# what would have been parsed via auto_add_field as the error message and query may be our of sync
667+
# what would have been parsed via auto_add_field as the error message and query may be out of sync
666668
# depending on how the method is called.
667669
field = extract_error_field(query_text, exc)
668670
if (

0 commit comments

Comments
 (0)