Skip to content

Commit f613823

Browse files
committed
add explicit QLDoc that any method named "contains" is matched
1 parent 35aae0a commit f613823

File tree

1 file changed

+3
-1
lines changed

1 file changed

+3
-1
lines changed

java/ql/lib/semmle/code/java/security/RequestForgery.qll

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,9 @@ private class HostnameSantizer extends RequestForgerySanitizer {
8686
}
8787

8888
/**
89-
* An argument to a call to `List.contains()` that is a sanitizer for URL redirects.
89+
* An argument to a call to a `.contains()` method that is a sanitizer for URL redirects.
90+
*
91+
* Matches any method call where the method is named `contains`.
9092
*/
9193
private predicate isContainsUrlSanitizer(Guard guard, Expr e, boolean branch) {
9294
guard =

0 commit comments

Comments
 (0)