Fix typos

egregius313 · atorralba · egregius313 · commit 1f37e70d83e7 · 2024-01-08T09:38:51.000-05:00
Co-authored-by: Tony Torralba &lt;atorralba@users.noreply.github.com&gt;
diff --git a/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll b/java/ql/lib/semmle/code/java/security/TaintedEnvironmentVariableQuery.qll
@@ -27,7 +27,7 @@ module ExecTaintedEnvironmentConfig implements DataFlow::ConfigSig {
   predicate isSink(DataFlow::Node sink) {
     sinkNode(sink, "environment-injection")
     or
-    // sink is an added to a `ProcessBuilder::environment` map.
+    // sink is a key or value added to a `ProcessBuilder::environment` map.
     exists(MapMutation mm | mm.getAnArgument() = sink.asExpr() |
       ProcessBuilderEnvironmentFlow::flowToExpr(mm.getQualifier())
     )
diff --git a/java/ql/src/Security/CWE/CWE-078/ExecTaintedEnvironment.ql b/java/ql/src/Security/CWE/CWE-078/ExecTaintedEnvironment.ql
@@ -7,7 +7,7 @@
  * @precision medium
  * @id java/exec-tainted-environment
  * @tags security
- *     external/cwe/cwe-078
+ *    external/cwe/cwe-078
  *    external/cwe/cwe-088
  */
 

Original file line number	Diff line number	Diff line change
`@@ -27,7 +27,7 @@ module ExecTaintedEnvironmentConfig implements DataFlow::ConfigSig {`
`27`	`27`	`predicate isSink(DataFlow::Node sink) {`
`28`	`28`	`sinkNode(sink, "environment-injection")`
`29`	`29`	`or`
`30`		- // sink is an added to a `ProcessBuilder::environment` map.
	`30`	+ // sink is a key or value added to a `ProcessBuilder::environment` map.
`31`	`31`	`exists(MapMutation mm \| mm.getAnArgument() = sink.asExpr() \|`
`32`	`32`	`ProcessBuilderEnvironmentFlow::flowToExpr(mm.getQualifier())`
`33`	`33`	`)`