Skip to content

Commit 270bcc3

Browse files
fix qhelp and remove commented out code
1 parent 8fdec4f commit 270bcc3

File tree

2 files changed

+1
-2
lines changed

2 files changed

+1
-2
lines changed

csharp/ql/lib/semmle/code/csharp/security/auth/MissingFunctionLevelAccessControlQuery.qll

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -83,7 +83,6 @@ private predicate virtualRouteMapping(string virtualRoute, string physicalRoute)
8383
physicalLit = mapPageRouteCall.getArgument(2) and
8484
virtualLit.getValue() = virtualRoute and
8585
physicalLit.getValue() = physicalRoute
86-
// physicalRouteMatches(physicalLit.getValue(), physicalRoute)
8786
)
8887
}
8988

csharp/ql/src/Security Features/CWE-285/MissingAccessControl.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ case marked GOOD uses <code>User.IsInRole</code> to check for the user's role.
3333

3434
<p>
3535
The following <code>Web.config</code> file uses the <code>authorization</code> tag to deny access to anonymous users,
36-
in a <location> tag to have it apply to a specific path.
36+
in a <code>location</code>> tag to have it apply to a specific path.
3737
</p>
3838

3939
<sample src="Web.config" />

0 commit comments

Comments
 (0)