Skip to content

Commit c756bdb

Browse files
committed
Fix naming in SensitiveCookieNotHttpOnly
1 parent c49bf01 commit c756bdb

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

java/ql/src/experimental/Security/CWE/CWE-1004/SensitiveCookieNotHttpOnly.ql

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -126,7 +126,7 @@ predicate isTestMethod(MethodAccess ma) {
126126
* A taint configuration tracking flow of a method that sets the `HttpOnly` flag,
127127
* or one that removes a cookie, to a `ServletResponse.addCookie` call.
128128
*/
129-
module SetHttpOnlyOrRemovesCookieConfiguration implements DataFlow::ConfigSig {
129+
module SetHttpOnlyOrRemovesCookieConfig implements DataFlow::ConfigSig {
130130
predicate isSource(DataFlow::Node source) {
131131
source.asExpr() =
132132
any(MethodAccess ma | setsCookieHttpOnly(ma) or removesCookie(ma)).getQualifier()
@@ -138,8 +138,7 @@ module SetHttpOnlyOrRemovesCookieConfiguration implements DataFlow::ConfigSig {
138138
}
139139
}
140140

141-
module SetHttpOnlyOrRemovesCookieFlow =
142-
TaintTracking::Global<SetHttpOnlyOrRemovesCookieConfiguration>;
141+
module SetHttpOnlyOrRemovesCookieFlow = TaintTracking::Global<SetHttpOnlyOrRemovesCookieConfig>;
143142

144143
/**
145144
* A cookie that is added to an HTTP response and which doesn't have `httpOnly` set, used as a sink

0 commit comments

Comments
 (0)