Skip to content

Commit c3b52fa

Browse files
committed
add missing qldoc
1 parent 09d969a commit c3b52fa

File tree

1 file changed

+8
-2
lines changed

1 file changed

+8
-2
lines changed

javascript/ql/src/semmle/javascript/security/dataflow/InsecureDownloadCustomizations.qll

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,6 +40,9 @@ module InsecureDownload {
4040
*/
4141
abstract class Sanitizer extends DataFlow::Node { }
4242

43+
/**
44+
* Flow-labels for reasoning about download of sensitive file through insecure connection.
45+
*/
4346
module Label {
4447
/**
4548
* A flow-label for file URLs that are both sensitive and downloaded over an insecure connection.
@@ -48,6 +51,9 @@ module InsecureDownload {
4851
SensitiveInsecureURL() { this = "sensitiveInsecure" }
4952
}
5053

54+
/**
55+
* A flow-label for a URL that is downloaded over an insecure connection.
56+
*/
5157
class InsecureURL extends DataFlow::FlowLabel {
5258
InsecureURL() { this = "insecure" }
5359
}
@@ -114,7 +120,7 @@ module InsecureDownload {
114120
}
115121

116122
/**
117-
* Gets a node for the response from `request`, type-tracked using `t`.
123+
* Gets a node for the response from `request`, type-tracked using `t`.
118124
*/
119125
DataFlow::SourceNode clientRequestResponse(DataFlow::TypeTracker t, ClientRequest request) {
120126
t.start() and
@@ -132,7 +138,7 @@ module InsecureDownload {
132138

133139
FileWriteSink() {
134140
this = request.getUrl() and
135-
clientRequestResponse(DataFlow::TypeTracker::end(), request).flowsTo(write.getADataNode()) and
141+
clientRequestResponse(DataFlow::TypeTracker::end(), request).flowsTo(write.getADataNode()) and
136142
hasUnsafeExtension(write.getAPathArgument().getStringValue())
137143
}
138144

0 commit comments

Comments
 (0)