Documentation for ExternalAPIs

egregius313 · egregius313 · commit 96cf4f16faed · 2023-03-29T22:33:10.000-04:00
diff --git a/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll b/java/ql/lib/semmle/code/java/security/ExternalAPIs.qll
@@ -111,6 +111,9 @@ deprecated class UntrustedDataToExternalApiConfig extends TaintTracking::Configu
   override predicate isSink(DataFlow::Node sink) { sink instanceof ExternalApiDataNode }
 }
 
+/**
+ * Taint tracking configuration for flow from `RemoteFlowSource`s to `ExternalApiDataNode`s.
+ */
 module UntrustedDataToExternalApiConfig implements DataFlow::ConfigSig {
   predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource }
 

Original file line number	Diff line number	Diff line change
`@@ -111,6 +111,9 @@ deprecated class UntrustedDataToExternalApiConfig extends TaintTracking::Configu`
`111`	`111`	`override predicate isSink(DataFlow::Node sink) { sink instanceof ExternalApiDataNode }`
`112`	`112`	`}`
`113`	`113`
	`114`	`+/**`
	`115`	+ * Taint tracking configuration for flow from `RemoteFlowSource`s to `ExternalApiDataNode`s.
	`116`	`+ */`
`114`	`117`	`module UntrustedDataToExternalApiConfig implements DataFlow::ConfigSig {`
`115`	`118`	`predicate isSource(DataFlow::Node source) { source instanceof RemoteFlowSource }`
`116`	`119`