File tree Expand file tree Collapse file tree 2 files changed +3
-3
lines changed
python/ql/src/semmle/python/web/django Expand file tree Collapse file tree 2 files changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -9,7 +9,7 @@ private class DjangoResponseKind extends TaintKind {
9
9
DjangoResponseKind ( ) { this = "django.response.HttpResponse" }
10
10
}
11
11
12
- /** INTENRAL taint-source used for tracking a django response. */
12
+ /** INTERNAL taint-source used for tracking a django response object . */
13
13
private class DjangoResponseSource extends TaintSource {
14
14
DjangoResponseSource ( ) {
15
15
exists ( DjangoContentResponseClass cls |
Original file line number Diff line number Diff line change @@ -34,7 +34,7 @@ class DjangoContentResponseClass extends ClassValue {
34
34
this .getASuperType ( ) = base
35
35
}
36
36
37
- // The reason these two method are defined in this class (and not in the Sink
37
+ // The reason these two methods are defined in this class (and not in the Sink
38
38
// definition that uses this class), is that if we were to add support for
39
39
// `django.http.response.HttpResponseNotAllowed` it would make much more sense to add
40
40
// the custom logic in this class (or subclass), than to handle all of it in the sink
@@ -47,7 +47,7 @@ class DjangoContentResponseClass extends ClassValue {
47
47
ControlFlowNode getContentTypeArg ( CallNode call ) { none ( ) }
48
48
}
49
49
50
- /** A Class that is a Django Response, and is vulnerable to XSS. */
50
+ /** A class that is a Django Response, and is vulnerable to XSS. */
51
51
class DjangoXSSVulnerableResponseClass extends DjangoContentResponseClass {
52
52
DjangoXSSVulnerableResponseClass ( ) {
53
53
// We want to avoid FPs on subclasses that are not exposed to XSS, for example `JsonResponse`.
You can’t perform that action at this time.
0 commit comments