Update java/ql/src/Security/CWE/CWE-652/XQueryInjectionLib.qll

haby0 · smowton · web-flow · commit 14a23eed4f09 · 2021-01-25T19:15:59.000+08:00
Co-authored-by: Chris Smowton &lt;smowton@github.com&gt;
diff --git a/java/ql/src/Security/CWE/CWE-652/XQueryInjectionLib.qll b/java/ql/src/Security/CWE/CWE-652/XQueryInjectionLib.qll
@@ -14,8 +14,8 @@ class XQueryParserCall extends MethodAccess {
       m.hasName("prepareExpression")
     )
   }
-  // return the first parameter of the `bindString` method and use it as a sink
-  Expr getSink() { result = this.getArgument(0) }
+  /** Returns the first parameter of the `bindString` method. */
+  Expr getInput() { result = this.getArgument(0) }
 }
 
 /** A call to `XQDynamicContext.bindString`. */

Original file line number	Diff line number	Diff line change
`@@ -14,8 +14,8 @@ class XQueryParserCall extends MethodAccess {`
`14`	`14`	`m.hasName("prepareExpression")`
`15`	`15`	`)`
`16`	`16`	`}`
`17`		- // return the first parameter of the `bindString` method and use it as a sink
`18`		`- Expr getSink() { result = this.getArgument(0) }`
	`17`	+ /** Returns the first parameter of the `bindString` method. */
	`18`	`+ Expr getInput() { result = this.getArgument(0) }`
`19`	`19`	`}`
`20`	`20`
`21`	`21`	/** A call to `XQDynamicContext.bindString`. */