Update java/ql/src/semmle/code/java/security/JWT.qll

aschackmull · web-flow · commit 78998d0ca1e4 · 2021-08-04T16:22:56.000+02:00
diff --git a/java/ql/src/semmle/code/java/security/JWT.qll b/java/ql/src/semmle/code/java/security/JWT.qll
@@ -48,7 +48,7 @@ class JwtParserWithInsecureParseSink extends DataFlow::Node {
 /**
  * A unit class for adding additional flow steps.
  *
- * Extend this class to add additional flow steps that should apply to the `SigningToInsecureMethodAccessDataFlow`.
+ * Extend this class to add additional flow steps that should apply to the `MissingJwtSignatureCheckConf `.
  */
 class JwtParserWithInsecureParseAdditionalFlowStep extends Unit {
   abstract predicate step(DataFlow::Node node1, DataFlow::Node node2);

Original file line number	Diff line number	Diff line change
`@@ -48,7 +48,7 @@ class JwtParserWithInsecureParseSink extends DataFlow::Node {`
`48`	`48`	`/**`
`49`	`49`	`* A unit class for adding additional flow steps.`
`50`	`50`	`*`
`51`		- * Extend this class to add additional flow steps that should apply to the `SigningToInsecureMethodAccessDataFlow`.
	`51`	+ * Extend this class to add additional flow steps that should apply to the `MissingJwtSignatureCheckConf `.
`52`	`52`	`*/`
`53`	`53`	`class JwtParserWithInsecureParseAdditionalFlowStep extends Unit {`
`54`	`54`	`abstract predicate step(DataFlow::Node node1, DataFlow::Node node2);`