Skip to content

Commit 44d8656

Browse files
author
Stephan Brandauer
committed
remove illegal chars from comments
1 parent fd77e27 commit 44d8656

1 file changed

Lines changed: 2 additions & 2 deletions

File tree

javascript/ql/src/Security/CWE-830/FunctionalityFromUntrustedSource.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ module StaticCreation {
6666
)
6767
}
6868

69-
/** A path that needs an integrity check even with https. */
69+
/** A path that needs an integrity check - even with https. */
7070
bindingset[url]
7171
predicate isCdnUrlWithCheckingRequired(string url) {
7272
// Some CDN URLs are required to have an integrity attribute. We only add CDNs to that list
@@ -129,7 +129,7 @@ module DynamicCreation {
129129
// when the result may have a string value starting with https,
130130
// we're most likely with an assignment like:
131131
// e.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js'
132-
// these assignments, we don't want to fix once the browser is using http,
132+
// these assignments, we don't want to fix - once the browser is using http,
133133
// MITM attacks are possible anyway.
134134
result.mayHaveStringValue(httpsUrl)
135135
) and

0 commit comments

Comments
 (0)