File tree Expand file tree Collapse file tree 1 file changed +2
-3
lines changed
java/ql/src/experimental/Security/CWE/CWE-1004 Expand file tree Collapse file tree 1 file changed +2
-3
lines changed Original file line number Diff line number Diff line change @@ -126,7 +126,7 @@ predicate isTestMethod(MethodAccess ma) {
126
126
* A taint configuration tracking flow of a method that sets the `HttpOnly` flag,
127
127
* or one that removes a cookie, to a `ServletResponse.addCookie` call.
128
128
*/
129
- module SetHttpOnlyOrRemovesCookieConfiguration implements DataFlow:: ConfigSig {
129
+ module SetHttpOnlyOrRemovesCookieConfig implements DataFlow:: ConfigSig {
130
130
predicate isSource ( DataFlow:: Node source ) {
131
131
source .asExpr ( ) =
132
132
any ( MethodAccess ma | setsCookieHttpOnly ( ma ) or removesCookie ( ma ) ) .getQualifier ( )
@@ -138,8 +138,7 @@ module SetHttpOnlyOrRemovesCookieConfiguration implements DataFlow::ConfigSig {
138
138
}
139
139
}
140
140
141
- module SetHttpOnlyOrRemovesCookieFlow =
142
- TaintTracking:: Global< SetHttpOnlyOrRemovesCookieConfiguration > ;
141
+ module SetHttpOnlyOrRemovesCookieFlow = TaintTracking:: Global< SetHttpOnlyOrRemovesCookieConfig > ;
143
142
144
143
/**
145
144
* A cookie that is added to an HTTP response and which doesn't have `httpOnly` set, used as a sink
You can’t perform that action at this time.
0 commit comments