Python: Minor adjustments to XPath Injection

Author: RasmusWL

python/ql/src/experimental/Security/CWE-643-new/Xpath.ql renamed to python/ql/src/experimental/Security/CWE-643-new/XpathInjection.ql

@@ -18,19 +18,16 @@ private import semmle.python.ApiGraphs
 private import semmle.python.dataflow.new.RemoteFlowSources
 private import semmle.python.dataflow.new.BarrierGuards
 import XpathInjection::XpathInjection
+import DataFlow::PathGraph
 
 class XpathInjectionConfiguration extends TaintTracking::Configuration {
   XpathInjectionConfiguration() { this = "PathNotNormalizedConfiguration" }
 
   override predicate isSource(DataFlow::Node source) { source instanceof Source }
 
   override predicate isSink(DataFlow::Node sink) { sink instanceof Sink }
-  // override predicate isAdditionalTaintStep(DataFlow::Node node1, DataFlow::Node node2) {
-  //   exists(AdditionalFlowStep af | af.isAdditionalTaintStep(node1, node2))
-  // }
 }
 
 from XpathInjectionConfiguration config, DataFlow::PathNode source, DataFlow::PathNode sink
 where config.hasFlowPath(source, sink)
-select sink, source, sink, "This Xpath query depends on $@.", source,
-  "a user-provided value"
+select sink, source, sink, "This Xpath query depends on $@.", source, "a user-provided value"