Skip to content

Commit 5e060fa

Browse files
erik-kroghasgerf
andauthored
Apply suggestions from code review
Co-authored-by: Asger F <[email protected]>
1 parent e8db624 commit 5e060fa

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

javascript/ql/src/Security/CWE-829/InsecureDownload.qhelp

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
</overview>
1414
<recommendation>
1515
<p>
16-
Use an transfer protocol that includes encryption when downloading executeables or other sensitive files.
16+
Use a secure transfer protocol when downloading executeables or other sensitive files.
1717
</p>
1818
</recommendation>
1919
<example>

javascript/ql/src/semmle/javascript/security/dataflow/InsecureDownload.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -18,7 +18,7 @@ module InsecureDownload {
1818
* A taint tracking configuration for download of sensitive file through insecure connection.
1919
*/
2020
class Configuration extends DataFlow::Configuration {
21-
Configuration() { this = "HTTP/HTTPS" }
21+
Configuration() { this = "InsecureDownload" }
2222

2323
override predicate isSource(DataFlow::Node source) { source instanceof Source }
2424

0 commit comments

Comments
 (0)