Update java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll

haby0 · smowton · web-flow · commit 046aeaa38cd5 · 2021-04-10T09:37:29.000+08:00
Co-authored-by: Chris Smowton &lt;smowton@github.com&gt;
diff --git a/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll b/java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll
@@ -98,7 +98,7 @@ class SpringControllerRequestMappingGetMethod extends SpringControllerGetMethod
 }
 
 /** A concatenate expression using `(` and `)` or `);`. */
-class JsonpInjectionExpr extends AddExpr {
+class JsonpBuilderExpr extends AddExpr {
   JsonpInjectionExpr() {
     getRightOperand().toString().regexpMatch("\"\\)\"|\"\\);\"") and
     getLeftOperand()

Original file line number	Diff line number	Diff line change
`@@ -98,7 +98,7 @@ class SpringControllerRequestMappingGetMethod extends SpringControllerGetMethod`
`98`	`98`	`}`
`99`	`99`
`100`	`100`	/** A concatenate expression using `(` and `)` or `);`. */
`101`		`-class JsonpInjectionExpr extends AddExpr {`
	`101`	`+class JsonpBuilderExpr extends AddExpr {`
`102`	`102`	`JsonpInjectionExpr() {`
`103`	`103`	`getRightOperand().toString().regexpMatch("\"\\)\"\|\"\\);\"") and`
`104`	`104`	`getLeftOperand()`