File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed
java/ql/src/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -6,15 +6,15 @@ import semmle.code.java.dataflow.FlowSources
6
6
import semmle.code.java.frameworks.Servlets
7
7
import semmle.code.java.frameworks.JaxWS
8
8
9
- /** Header-splitting sinks. Expressions that end up in an HTTP header. */
9
+ /** A sink that is vulnerable to a HTTP header splitting attack . */
10
10
abstract class HeaderSplittingSink extends DataFlow:: Node { }
11
11
12
- /** Sources that cannot be used to perform a header splitting attack . */
12
+ /** A source that introduces data considered safe to use by a header splitting source . */
13
13
abstract class SafeHeaderSplittingSource extends DataFlow:: Node {
14
14
SafeHeaderSplittingSource ( ) { this instanceof RemoteFlowSource }
15
15
}
16
16
17
- /** Servlet and JaxWS sinks susceptible to header splitting. */
17
+ /** A sink that identifies a Java Servlet or JaxWs method that is vulnerable to a HTTP header splitting attack . */
18
18
private class ServletHeaderSplittingSink extends HeaderSplittingSink {
19
19
ServletHeaderSplittingSink ( ) {
20
20
exists ( ResponseAddCookieMethod m , MethodAccess ma |
@@ -40,7 +40,7 @@ private class ServletHeaderSplittingSink extends HeaderSplittingSink {
40
40
}
41
41
}
42
42
43
- /** Sources of data considered safe to use by header splitting sinks . */
43
+ /** A default source that introduces data considered safe to use by a header splitting source . */
44
44
private class DefaultSafeHeaderSplittingSource extends SafeHeaderSplittingSource {
45
45
DefaultSafeHeaderSplittingSource ( ) {
46
46
this .asExpr ( ) .( MethodAccess ) .getMethod ( ) instanceof HttpServletRequestGetHeaderMethod or
You can’t perform that action at this time.
0 commit comments