Skip to content

Commit 7573c61

Browse files
committed
Fix warnings
1 parent 3745ccc commit 7573c61

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

javascript/ql/src/Security/CWE-094/ExpressionInjection.ql

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -104,7 +104,7 @@ private predicate isExternalUserControlledWorkflowRun(string context) {
104104
}
105105

106106
/**
107-
* The env variable name in `${{ env.name }}`
107+
* Holds if the env variable name in `${{ env.name }}`
108108
* is where the external user controlled value was assigned to.
109109
*/
110110
bindingset[injection]
@@ -122,7 +122,7 @@ predicate isRunInjectable(Actions::Run run, string injection, string context) {
122122
(
123123
injection = context
124124
or
125-
exists(Actions::Env env | isEnvTainted(env, injection, context))
125+
isEnvTainted(_, injection, context)
126126
)
127127
}
128128

@@ -139,7 +139,7 @@ predicate isScriptInjectable(Actions::Script script, string injection, string co
139139
(
140140
injection = context
141141
or
142-
exists(Actions::Env env | isEnvTainted(env, injection, context))
142+
isEnvTainted(_, injection, context)
143143
)
144144
)
145145
}

0 commit comments

Comments
 (0)