Skip to content

Commit 639c42c

Browse files
Fix qhelp errors and ql-for-ql errors
1 parent f52db7f commit 639c42c

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

java/ql/src/Security/CWE/CWE-927/SensitiveResultReceiver.qhelp

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,11 +13,11 @@
1313
</recommendation>
1414

1515
<example>
16-
In the following (bad) example, sensitive data is sent to an untrusted <code>ResultReceiver</code>.
16+
<p>In the following (bad) example, sensitive data is sent to an untrusted <code>ResultReceiver</code>. </p>
1717
<sample src="SensitiveResultReceiver.java" />
1818
</example>
1919

2020
<references>
21-
<li>Oversecured: <a href=https://oversecured.com/vulnerabilities#Android/Passing_data_to_a_ResultReceiver_under_the_attacker%E2%80%99s_control>Passing data to a ResultReceiver under the attacker's control</a></li>
21+
<li>Oversecured: <a href="https://oversecured.com/vulnerabilities#Android/Passing_data_to_a_ResultReceiver_under_the_attacker%E2%80%99s_control">Passing data to a ResultReceiver under the attacker's control</a></li>
2222
</references>
2323
</qhelp>

java/ql/test/query-tests/security/CWE-927/SensitiveResultReceiver.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -14,8 +14,8 @@ class ResultReceiverTest extends InlineExpectationsTest {
1414
override string getARelevantTag() { result = "hasSensitiveResultReceiver" }
1515

1616
override predicate hasActualResult(Location loc, string element, string tag, string value) {
17-
exists(DataFlow::PathNode src, DataFlow::PathNode sink, DataFlow::Node recSrc |
18-
sensitiveResultReceiver(src, sink, recSrc) and
17+
exists(DataFlow::PathNode sink |
18+
sensitiveResultReceiver(_, sink, _) and
1919
element = sink.toString() and
2020
loc = sink.getNode().getLocation() and
2121
tag = "hasSensitiveResultReceiver" and

0 commit comments

Comments
 (0)