File tree Expand file tree Collapse file tree 2 files changed +4
-4
lines changed
ruby/ql/lib/codeql/ruby/security Expand file tree Collapse file tree 2 files changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -71,7 +71,7 @@ module InsecureDownload {
71
71
}
72
72
73
73
/**
74
- * A HTTP or FTP url .
74
+ * A HTTP or FTP URL .
75
75
*/
76
76
class InsecureUrl extends DataFlow:: Node {
77
77
string str ;
@@ -99,8 +99,8 @@ module InsecureDownload {
99
99
* A string containing a sensitive file extension,
100
100
* seen as a source for downloads of sensitive files through an insecure connection.
101
101
*/
102
- class SensitiveFileUrl extends Source {
103
- SensitiveFileUrl ( ) { hasUnsafeExtension ( this .asExpr ( ) .getConstantValue ( ) .getString ( ) ) }
102
+ class SensitiveFileName extends Source {
103
+ SensitiveFileName ( ) { hasUnsafeExtension ( this .asExpr ( ) .getConstantValue ( ) .getString ( ) ) }
104
104
105
105
override DataFlow:: FlowState getALabel ( ) { result instanceof Label:: Sensitive }
106
106
}
Original file line number Diff line number Diff line change 1
1
/**
2
- * Provides a taint tracking configuration for reasoning about download of sensitive file through insecure connection.
2
+ * Provides a dataflow configuration for reasoning about the download of sensitive file through insecure connection.
3
3
*
4
4
* Note, for performance reasons: only import this file if
5
5
* `InsecureDownload::Configuration` is needed, otherwise
You can’t perform that action at this time.
0 commit comments