File tree Expand file tree Collapse file tree 1 file changed +3
-4
lines changed
java/ql/src/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +3
-4
lines changed Original file line number Diff line number Diff line change @@ -11,15 +11,14 @@ import semmle.code.java.dataflow.TaintTracking
11
11
private import semmle.code.java.StringFormat
12
12
13
13
/**
14
- * A unit class for adding additional taint steps that are specific to Server-side
15
- * Request Forgery (SSRF) attacks.
14
+ * A unit class for adding additional taint steps that are specific to server-side request forgery (SSRF) attacks.
16
15
*
17
16
* Extend this class to add additional taint steps to the SSRF query.
18
17
*/
19
18
class RequestForgeryAdditionalTaintStep extends Unit {
20
19
/**
21
20
* Holds if the step from `pred` to `succ` should be considered a taint
22
- * step for Server -side Request Forgery .
21
+ * step for server -side request forgery .
23
22
*/
24
23
abstract predicate propagatesTaint ( DataFlow:: Node pred , DataFlow:: Node succ ) ;
25
24
}
@@ -119,7 +118,7 @@ private class ApacheHttpRequestBuilderArgument extends RequestForgerySink {
119
118
}
120
119
121
120
/**
122
- * An argument to any `java.net.http.HttpRequest` Instantiation taken as a
121
+ * An argument to any `java.net.http.HttpRequest` instantiation taken as a
123
122
* sink for request forgery vulnerabilities.
124
123
*/
125
124
private class HttpRequestNewBuilder extends RequestForgerySink {
You can’t perform that action at this time.
0 commit comments