File tree Expand file tree Collapse file tree 1 file changed +9
-6
lines changed
javascript/ql/experimental/adaptivethreatmodeling/lib/experimental/adaptivethreatmodeling Expand file tree Collapse file tree 1 file changed +9
-6
lines changed Original file line number Diff line number Diff line change @@ -9,19 +9,22 @@ private import semmle.javascript.security.dataflow.NosqlInjectionCustomizations
9
9
private import semmle.javascript.security.dataflow.TaintedPathCustomizations
10
10
11
11
/**
12
- * Defines a set of characteristics that a particular endpoint might have. This set of characteristics is used to make
13
- * decisions about whether to include the endpoint in the training set and with what label, as well as whether to score
14
- * the endpoint at inference time.
12
+ * A set of characteristics that a particular endpoint might have. This set of characteristics is used to make decisions
13
+ * about whether to include the endpoint in the training set and with what label, as well as whether to score the
14
+ * endpoint at inference time.
15
15
*/
16
16
abstract class EndpointCharacteristic extends string {
17
17
/**
18
- * The name of the characteristic, which should describe some characteristic of the endpoint that is meaningful for
19
- * determining whether it's a sink and if so of which type
18
+ * Holds when the string matches the name of the characteristic, which should describe some characteristic of the
19
+ * endpoint that is meaningful for determining whether it's a sink and if so of which type
20
20
*/
21
21
bindingset [ this ]
22
22
EndpointCharacteristic ( ) { any ( ) }
23
23
24
- /** The logic to identify which endpoints have this characteristic. */
24
+ /**
25
+ * Holds for endpoints that have this characteristic. This predicate contains the logic that applies characteristics
26
+ * to the appropriate set of dataflow nodes.
27
+ */
25
28
abstract predicate getEndpoints ( DataFlow:: Node n ) ;
26
29
27
30
/**
You can’t perform that action at this time.
0 commit comments