Update java/ql/test/query-tests/security/CWE-643/XPathInjectionTest.java

Co-authored-by: Marcono1234 <[email protected]>

Author: atorralba

java/ql/test/query-tests/security/CWE-643/XPathInjectionTest.java

@@ -133,7 +133,7 @@ public void handle(HttpServletRequest request) throws Exception {
 
         new DefaultXPath("/users/user[@name='" + user + "' and @pass='" + pass + "']"); // $hasXPathInjection
         new XPathPattern("/users/user[@name='" + user + "' and @pass='" + pass + "']"); // $hasXPathInjection
-        new XPathPattern(new PatternStub(user)); // Safe
+        new XPathPattern(new PatternStub(user)); // Jaxen is not modeled yet
 
         DocumentFactory docFactory = DocumentFactory.getInstance();
         docFactory.createPattern("/users/user[@name='" + user + "' and @pass='" + pass + "']"); // $hasXPathInjection
@@ -155,4 +155,4 @@ public void handle(HttpServletRequest request) throws Exception {
         namespace.createPattern("/users/user[@name='" + user + "' and @pass='" + pass + "']"); // $hasXPathInjection
         namespace.createXPathFilter("/users/user[@name='" + user + "' and @pass='" + pass + "']"); // $hasXPathInjection
     }
-}
+}