Merge pull request #2143 from esben-semmle/js/fix-all-sanitisers

semmle-qlci · web-flow · commit eb9d90dff6f4 · 2019-10-22T07:16:27.000+01:00
Approved by xiemaisi
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/BrokenCryptoAlgorithmCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/BrokenCryptoAlgorithmCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * sensitive information in broken or weak cryptographic algorithms,
  * as well as extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/CleartextLoggingCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/CleartextLoggingCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * clear-text logging of sensitive information, as well as extension
  * points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/CleartextStorageCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/CleartextStorageCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * cleartext storage of sensitive information, as well as extension
  * points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/ClientSideUrlRedirectCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/ClientSideUrlRedirectCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * unvalidated URL redirection problems on the client side, as well as
  * extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/CodeInjectionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/CodeInjectionCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * code injection vulnerabilities, as well as extension points for
  * adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/CommandInjectionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/CommandInjectionCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * command-injection vulnerabilities, as well as extension points for
  * adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/ConditionalBypassCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/ConditionalBypassCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * bypass of sensitive action guards, as well as extension points for
  * adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/CorsMisconfigurationForCredentialsCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * CORS misconfiguration for credentials transfer, as well as
  * extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/DifferentKindsComparisonBypassCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/DifferentKindsComparisonBypassCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * comparisons that relies on different kinds of HTTP request data, as
  * well as extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/FileAccessToHttpCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/FileAccessToHttpCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * file data in outbound network requests, as well as extension points
  * for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/HardcodedCredentialsCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/HardcodedCredentialsCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * hardcoded credentials, as well as extension points for adding your
  * own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/HardcodedDataInterpretedAsCodeCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/HardcodedDataInterpretedAsCodeCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * hard-coded data being interpreted as code, as well as extension
  * points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/HttpToFileAccessCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/HttpToFileAccessCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * writing user-controlled data to files, as well as extension points
  * for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/IndirectCommandInjectionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/IndirectCommandInjectionCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * command-injection vulnerabilities, as well as extension points for
  * adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/InsecureRandomnessCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/InsecureRandomnessCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * random values that are not cryptographically secure, as well as
  * extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/InsufficientPasswordHashCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/InsufficientPasswordHashCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * password hashing with insufficient computational effort, as well as
  * extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/NosqlInjectionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/NosqlInjectionCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * NoSQL injection vulnerabilities, as well as extension points for
  * adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/PostMessageStarCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/PostMessageStarCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * cross-window communication with unrestricted origin, as well as
  * extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/PrototypePollutionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/PrototypePollutionCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * user-controlled objects flowing into a vulnerable `extends` call,
  * as well as extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/RegExpInjectionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/RegExpInjectionCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * untrusted user input used to construct regular expressions, as well
  * as extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/RemotePropertyInjectionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/RemotePropertyInjectionCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * injections in property names, used either for writing into a
  * property, into a header or for calling an object's method, as well
  * as extension points for adding your own.
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/RequestForgeryCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/RequestForgeryCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * request forgery, as well as extension points for adding your own.
  */
 
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/ServerSideUrlRedirectCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/ServerSideUrlRedirectCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * unvalidated URL redirection problems on the server side, as well as
  * extension points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/SqlInjectionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/SqlInjectionCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * SQL injection vulnerabilities, as well as extension points for
  * adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/StackTraceExposureCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/StackTraceExposureCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * stack trace exposure vulnerabilities, as well as extension points
  * for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/TaintedFormatStringCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/TaintedFormatStringCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * format injections, as well as extension points for adding your own.
  */
 
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/TaintedPathCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/TaintedPathCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * tainted-path vulnerabilities, as well as extension points for
  * adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/TypeConfusionThroughParameterTamperingCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/TypeConfusionThroughParameterTamperingCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * type confusion for HTTP request inputs, as well as extension points
  * for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/UnsafeDeserializationCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/UnsafeDeserializationCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * unsafe deserialization, as well as extension points for
  * adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/UnsafeDynamicMethodAccessCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/UnsafeDynamicMethodAccessCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * method invocations with a user-controlled method name on objects
  * with unsafe methods, as well as extension points for adding your
  * own.
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/UnvalidatedDynamicMethodCallCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/UnvalidatedDynamicMethodCallCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * unvalidated dynamic method calls, as well as extension points for
  * adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/XmlBombCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/XmlBombCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * XML-bomb vulnerabilities, as well as extension points for adding
  * your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/XpathInjectionCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/XpathInjectionCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * untrusted user input used in XPath expression, as well as extension
  * points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/XxeCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/XxeCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * XML External Entity (XXE) vulnerabilities, as well as extension
  * points for adding your own.
  */
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/ZipSlipCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/ZipSlipCustomizations.qll
@@ -1,5 +1,5 @@
 /**
- * Provides default sources, sinks and sanitisers for reasoning about
+ * Provides default sources, sinks and sanitizers for reasoning about
  * unsafe zip and tar archive extraction, as well as extension points
  * for adding your own.
  */
