Skip to content

Commit 1567168

Browse files
committed
remove unused flowLable, update path query alert message
1 parent 00b6e1f commit 1567168

File tree

1 file changed

+1
-5
lines changed

1 file changed

+1
-5
lines changed

javascript/ql/src/experimental/Security/CWE-094-dataURL/CodeInjection.ql

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -57,10 +57,6 @@ class URLConstructorLabel extends FlowLabel {
5757
URLConstructorLabel() { this = "URLConstructorLabel" }
5858
}
5959

60-
class DynamicImportLabel extends FlowLabel {
61-
DynamicImportLabel() { this = "DynamicImport" }
62-
}
63-
6460
/**
6561
* A taint-tracking configuration for reasoning about code injection vulnerabilities.
6662
*/
@@ -91,5 +87,5 @@ class Configuration extends TaintTracking::Configuration {
9187

9288
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
9389
where cfg.hasFlowPath(source, sink)
94-
select sink.getNode(), source, sink, sink.getNode() + " depends on a $@.", source.getNode(),
90+
select sink.getNode(), source, sink, sink.getNode() + "This command line depends on a $@.", source.getNode(),
9591
"user-provided value"

0 commit comments

Comments
 (0)