Skip to content

Commit 7788799

Browse files
committed
update rb/code-injection to match python
1 parent 60908de commit 7788799

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

ruby/ql/src/queries/security/cwe-094/CodeInjection.ql

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,5 +22,5 @@ from Configuration config, DataFlow::PathNode source, DataFlow::PathNode sink, S
2222
where
2323
config.hasFlowPath(source, sink) and
2424
sourceNode = source.getNode()
25-
select sink.getNode(), source, sink, "This code execution depends on $@.", sourceNode,
26-
"a user-provided value"
25+
select sink.getNode(), source, sink, "$@ flows to here and is interpreted as code.",
26+
source.getNode(), "User-provided value"

0 commit comments

Comments
 (0)