Skip to content

Commit 24f2e3c

Browse files
committed
update alert-messages of the sensitive data queries to match github#10314
1 parent aa56ca3 commit 24f2e3c

File tree

4 files changed

+53
-53
lines changed

4 files changed

+53
-53
lines changed

javascript/ql/src/Security/CWE-312/CleartextLogging.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,5 +38,5 @@ where
3838
cfg.hasFlowPath(source, sink) and
3939
// ignore logging to the browser console (even though it is not a good practice)
4040
not inBrowserEnvironment(sink.getNode().asExpr().getTopLevel())
41-
select sink.getNode(), source, sink, "Log entry depends on $@.", source.getNode(),
42-
"sensitive data returned by " + source.getNode().(Source).describe()
41+
select sink.getNode(), source, sink, "$@ is logged here.", source.getNode(),
42+
"Sensitive data returned by " + source.getNode().(Source).describe()

javascript/ql/src/Security/CWE-312/CleartextStorage.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,5 +19,5 @@ import DataFlow::PathGraph
1919

2020
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
2121
where cfg.hasFlowPath(source, sink)
22-
select sink.getNode(), source, sink, "This data storage depends on $@.", source.getNode(),
23-
"sensitive data returned by " + source.getNode().(Source).describe()
22+
select sink.getNode(), source, sink, "$@ is stored here.", source.getNode(),
23+
"Sensitive data returned by " + source.getNode().(Source).describe()

0 commit comments

Comments
 (0)