File tree Expand file tree Collapse file tree 2 files changed +2
-2
lines changed
semmle/javascript/security/dataflow Expand file tree Collapse file tree 2 files changed +2
-2
lines changed Original file line number Diff line number Diff line change 13
13
</overview >
14
14
<recommendation >
15
15
<p >
16
- Use an transfer protocol that includes encryption when downloading executeables or other sensitive files.
16
+ Use a secure transfer protocol when downloading executeables or other sensitive files.
17
17
</p >
18
18
</recommendation >
19
19
<example >
Original file line number Diff line number Diff line change @@ -18,7 +18,7 @@ module InsecureDownload {
18
18
* A taint tracking configuration for download of sensitive file through insecure connection.
19
19
*/
20
20
class Configuration extends DataFlow:: Configuration {
21
- Configuration ( ) { this = "HTTP/HTTPS " }
21
+ Configuration ( ) { this = "InsecureDownload " }
22
22
23
23
override predicate isSource ( DataFlow:: Node source ) { source instanceof Source }
24
24
You can’t perform that action at this time.
0 commit comments