File tree Expand file tree Collapse file tree 1 file changed +2
-2
lines changed
java/ql/src/semmle/code/java/security Expand file tree Collapse file tree 1 file changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -6,15 +6,15 @@ import semmle.code.java.dataflow.FlowSources
66import semmle.code.java.frameworks.Servlets
77import semmle.code.java.frameworks.JaxWS
88
9- /** A sink that is vulnerable to a HTTP header splitting attack. */
9+ /** A sink that is vulnerable to an HTTP header splitting attack. */
1010abstract class HeaderSplittingSink extends DataFlow:: Node { }
1111
1212/** A source that introduces data considered safe to use by a header splitting source. */
1313abstract class SafeHeaderSplittingSource extends DataFlow:: Node {
1414 SafeHeaderSplittingSource ( ) { this instanceof RemoteFlowSource }
1515}
1616
17- /** A sink that identifies a Java Servlet or JaxWs method that is vulnerable to a HTTP header splitting attack. */
17+ /** A sink that identifies a Java Servlet or JaxWs method that is vulnerable to an HTTP header splitting attack. */
1818private class ServletHeaderSplittingSink extends HeaderSplittingSink {
1919 ServletHeaderSplittingSink ( ) {
2020 exists ( ResponseAddCookieMethod m , MethodAccess ma |
You can’t perform that action at this time.
0 commit comments