Update python/ql/lib/semmle/python/security/dataflow/ReflectedXSSCustomizations.qll

GeekMasher · yoff · web-flow · commit 6ef55aa14fcf · 2023-07-17T15:44:38.000+01:00
Co-authored-by: yoff &lt;lerchedahl@gmail.com&gt;
diff --git a/python/ql/lib/semmle/python/security/dataflow/ReflectedXSSCustomizations.qll b/python/ql/lib/semmle/python/security/dataflow/ReflectedXSSCustomizations.qll
@@ -47,9 +47,9 @@ module ReflectedXss {
   /**
    * A data flow sink for "reflected cross-site scripting" vulnerabilities.
    */
-  private class DefaultReflectedXss extends Sink {
-    DefaultReflectedXss() {
-      this = ModelOutput::getASourceNode(["html-injection", "js-injection"]).asSource()
+  private class SinkFromModel extends Sink {
+    SinkFromModel() {
+      this = ModelOutput::getASinkNode(["html-injection", "js-injection"]).asSink()
     }
   }
 

Original file line number	Diff line number	Diff line change
`@@ -47,9 +47,9 @@ module ReflectedXss {`
`47`	`47`	`/**`
`48`	`48`	`* A data flow sink for "reflected cross-site scripting" vulnerabilities.`
`49`	`49`	`*/`
`50`		`- private class DefaultReflectedXss extends Sink {`
`51`		`- DefaultReflectedXss() {`
`52`		`- this = ModelOutput::getASourceNode(["html-injection", "js-injection"]).asSource()`
	`50`	`+ private class SinkFromModel extends Sink {`
	`51`	`+ SinkFromModel() {`
	`52`	`+ this = ModelOutput::getASinkNode(["html-injection", "js-injection"]).asSink()`
`53`	`53`	`}`
`54`	`54`	`}`
`55`	`55`