Skip to content

Commit bfbd3d9

Browse files
committed
Swift: Clean up the result message.
1 parent e17c059 commit bfbd3d9

File tree

2 files changed

+35
-31
lines changed

2 files changed

+35
-31
lines changed

swift/ql/src/queries/Security/CWE-311/CleartextStorageDatabase.ql

Lines changed: 8 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -26,9 +26,13 @@ DataFlow::Node cleanupNode(DataFlow::Node n) {
2626
result = n
2727
}
2828

29-
from CleartextStorageConfig config, DataFlow::PathNode sourceNode, DataFlow::PathNode sinkNode
30-
where config.hasFlowPath(sourceNode, sinkNode)
31-
select cleanupNode(sinkNode.getNode()), sourceNode, sinkNode,
32-
"This operation stores '" + sinkNode.getNode().toString() +
29+
from
30+
CleartextStorageConfig config, DataFlow::PathNode sourceNode, DataFlow::PathNode sinkNode,
31+
DataFlow::Node cleanSink
32+
where
33+
config.hasFlowPath(sourceNode, sinkNode) and
34+
cleanSink = cleanupNode(sinkNode.getNode())
35+
select cleanSink, sourceNode, sinkNode,
36+
"This operation stores '" + cleanSink.toString() +
3337
"' in a database. It may contain unencrypted sensitive data from $@.", sourceNode,
3438
sourceNode.getNode().toString()

0 commit comments

Comments
 (0)