File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed
java/ql/src/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -6,15 +6,15 @@ import semmle.code.java.dataflow.FlowSources
6
6
import semmle.code.java.frameworks.Servlets
7
7
import semmle.code.java.frameworks.JaxWS
8
8
9
- /** A sink that is vulnerable to a HTTP header splitting attack. */
9
+ /** A sink that is vulnerable to an HTTP header splitting attack. */
10
10
abstract class HeaderSplittingSink extends DataFlow:: Node { }
11
11
12
12
/** A source that introduces data considered safe to use by a header splitting source. */
13
13
abstract class SafeHeaderSplittingSource extends DataFlow:: Node {
14
14
SafeHeaderSplittingSource ( ) { this instanceof RemoteFlowSource }
15
15
}
16
16
17
- /** A sink that identifies a Java Servlet or JaxWs method that is vulnerable to a HTTP header splitting attack. */
17
+ /** A sink that identifies a Java Servlet or JaxWs method that is vulnerable to an HTTP header splitting attack. */
18
18
private class ServletHeaderSplittingSink extends HeaderSplittingSink {
19
19
ServletHeaderSplittingSink ( ) {
20
20
exists ( ResponseAddCookieMethod m , MethodAccess ma |
You can’t perform that action at this time.
0 commit comments