@@ -88,8 +88,8 @@ private predicate expressionCompilationStep(DataFlow::Node node1, DataFlow::Node
88
88
}
89
89
90
90
/**
91
- * Holds if `node1` to `node2` is a dataflow step creates `ExpressionCompiler`,
92
- * i.e. `new ExpressionCompiler(tainted)`.
91
+ * Holds if `node1` to `node2` is a dataflow step that creates `ExpressionCompiler`
92
+ * by calling `new ExpressionCompiler(tainted)`.
93
93
*/
94
94
private predicate createExpressionCompilerStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
95
95
exists ( ConstructorCall cc |
@@ -100,8 +100,8 @@ private predicate createExpressionCompilerStep(DataFlow::Node node1, DataFlow::N
100
100
}
101
101
102
102
/**
103
- * Holds if `node1` to `node2` is a dataflow step creates `CompiledAccExpression`,
104
- * i.e. `new CompiledAccExpression(tainted, ...)`.
103
+ * Holds if `node1` to `node2` is a dataflow step creates `CompiledAccExpression`
104
+ * by calling `new CompiledAccExpression(tainted, ...)`.
105
105
*/
106
106
private predicate createCompiledAccExpressionStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
107
107
exists ( ConstructorCall cc |
@@ -125,8 +125,8 @@ private predicate expressionCompilerCompileStep(DataFlow::Node node1, DataFlow::
125
125
}
126
126
127
127
/**
128
- * Holds if `node1` to `node2` is a dataflow step that compiles a script via `MvelScriptEngine`,
129
- * i.e. `engine.compile(tainted)` or `engine.compiledScript(tainted)`.
128
+ * Holds if `node1` to `node2` is a dataflow step that compiles a script via `MvelScriptEngine`
129
+ * by calling `engine.compile(tainted)` or `engine.compiledScript(tainted)`.
130
130
*/
131
131
private predicate scriptCompileStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
132
132
exists ( MethodAccess ma , Method m | ma .getMethod ( ) = m |
@@ -137,8 +137,8 @@ private predicate scriptCompileStep(DataFlow::Node node1, DataFlow::Node node2)
137
137
}
138
138
139
139
/**
140
- * Holds if `node1` to `node2` is a dataflow step creates `MvelCompiledScript`,
141
- * i.e. `new MvelCompiledScript(engine, tainted)`.
140
+ * Holds if `node1` to `node2` is a dataflow step that creates `MvelCompiledScript`
141
+ * by calling `new MvelCompiledScript(engine, tainted)`.
142
142
*/
143
143
private predicate createMvelCompiledScriptStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
144
144
exists ( ConstructorCall cc |
@@ -149,8 +149,8 @@ private predicate createMvelCompiledScriptStep(DataFlow::Node node1, DataFlow::N
149
149
}
150
150
151
151
/**
152
- * Holds if `node1` to `node2` is a dataflow step creates `TemplateCompiler`,
153
- * i.e. `new TemplateCompiler(tainted)`.
152
+ * Holds if `node1` to `node2` is a dataflow step creates `TemplateCompiler`
153
+ * by calling `new TemplateCompiler(tainted)`.
154
154
*/
155
155
private predicate createTemplateCompilerStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
156
156
exists ( ConstructorCall cc |
@@ -161,8 +161,8 @@ private predicate createTemplateCompilerStep(DataFlow::Node node1, DataFlow::Nod
161
161
}
162
162
163
163
/**
164
- * Holds if `node1` to `node2` is a dataflow step that compiles a script via `TemplateCompiler`,
165
- * i.e. `compiler.compile()` or `TemplateCompiler.compileTemplate(tainted)`.
164
+ * Holds if `node1` to `node2` is a dataflow step that compiles a script via `TemplateCompiler`
165
+ * by calling `compiler.compile()` or `TemplateCompiler.compileTemplate(tainted)`.
166
166
*/
167
167
private predicate templateCompileStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
168
168
exists ( MethodAccess ma , Method m | ma .getMethod ( ) = m |
0 commit comments