Skip to content

Commit 9f2f022

Browse files
committed
add missing qldoc
1 parent 804f908 commit 9f2f022

File tree

2 files changed

+9
-0
lines changed

2 files changed

+9
-0
lines changed

javascript/ql/src/semmle/javascript/security/dataflow/UnsafeCodeConstruction.qll

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,9 @@
99

1010
import javascript
1111

12+
/**
13+
* Classes and predicates for the code constructed from library input query.
14+
*/
1215
module UnsafeCodeConstruction {
1316
private import semmle.javascript.security.dataflow.CodeInjectionCustomizations::CodeInjection as CodeInjection
1417
import UnsafeCodeConstructionCustomizations::UnsafeCodeConstruction

javascript/ql/src/semmle/javascript/security/dataflow/UnsafeCodeConstructionCustomizations.qll

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,9 @@
66

77
import javascript
88

9+
/**
10+
* Module containing sources, sinks, and sanitizers for code constructed from library input.
11+
*/
912
module UnsafeCodeConstruction {
1013
private import semmle.javascript.security.dataflow.CodeInjectionCustomizations::CodeInjection as CodeInjection
1114
private import semmle.javascript.PackageExports as Exports
@@ -26,6 +29,9 @@ module UnsafeCodeConstruction {
2629
* A sink for unsafe code constructed from library input vulnerabilities.
2730
*/
2831
abstract class Sink extends DataFlow::Node {
32+
/**
33+
* Gets the node where the unsafe code is executed.
34+
*/
2935
abstract DataFlow::Node getCodeSink();
3036
}
3137

0 commit comments

Comments
 (0)