File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
java/ql/src/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -23,7 +23,7 @@ abstract class XssSanitizer extends DataFlow::Node { }
2323abstract class XssAdditionalTaintStep extends TaintTracking2:: Unit {
2424 /**
2525 * Holds if the step from `node1` to `node2` should be considered a taint
26- * step for all configurations.
26+ * step for XSS taint configurations.
2727 */
2828 abstract predicate step ( DataFlow:: Node node1 , DataFlow:: Node node2 ) ;
2929}
@@ -119,7 +119,7 @@ private class ServletWriterSourceToWritingMethodFlowConfig extends TaintTracking
119119 }
120120}
121121
122- /** A class representing methods that can be used to output data. */
122+ /** A method that can be used to output data to an output stream or writer . */
123123private class WritingMethod extends Method {
124124 WritingMethod ( ) {
125125 getDeclaringType ( ) .getASupertype * ( ) .hasQualifiedName ( "java.io" , _) and
@@ -131,7 +131,7 @@ private class WritingMethod extends Method {
131131 }
132132}
133133
134- /** A class representing methods that provides access to an output stream or writer . */
134+ /** An output stream or writer that writes to a servlet response . */
135135class ServletWriterSource extends MethodAccess {
136136 ServletWriterSource ( ) {
137137 this .getMethod ( ) instanceof ServletResponseGetWriterMethod
You can’t perform that action at this time.
0 commit comments