Skip to content

Commit 1c661fd

Browse files
committed
Add missing QLDocs
1 parent 84fd5f7 commit 1c661fd

File tree

2 files changed

+12
-0
lines changed

2 files changed

+12
-0
lines changed

java/ql/lib/semmle/code/java/security/XxeLocalQuery.qll

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,9 @@ deprecated class XxeLocalConfig extends TaintTracking::Configuration {
2424
}
2525
}
2626

27+
/**
28+
* A taint-tracking configuration for unvalidated local user input that is used in XML external entity expansion.
29+
*/
2730
module XxeLocalConfig implements DataFlow::ConfigSig {
2831
predicate isSource(DataFlow::Node src) { src instanceof LocalUserInput }
2932

@@ -36,4 +39,7 @@ module XxeLocalConfig implements DataFlow::ConfigSig {
3639
}
3740
}
3841

42+
/**
43+
* Detect taint flow of unvalidated local user input that is used in XML external entity expansion.
44+
*/
3945
module XxeLocalFlow = TaintTracking::Make<XxeLocalConfig>;

java/ql/lib/semmle/code/java/security/XxeRemoteQuery.qll

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -24,6 +24,9 @@ deprecated class XxeConfig extends TaintTracking::Configuration {
2424
}
2525
}
2626

27+
/**
28+
* A taint-tracking configuration for unvalidated remote user input that is used in XML external entity expansion.
29+
*/
2730
module XxeConfig implements DataFlow::ConfigSig {
2831
predicate isSource(DataFlow::Node src) { src instanceof RemoteFlowSource }
2932

@@ -36,4 +39,7 @@ module XxeConfig implements DataFlow::ConfigSig {
3639
}
3740
}
3841

42+
/**
43+
* Detect taint flow of unvalidated remote user input that is used in XML external entity expansion.
44+
*/
3945
module XxeFlow = TaintTracking::Make<XxeConfig>;

0 commit comments

Comments
 (0)