We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 8a670fe commit b86643fCopy full SHA for b86643f
ruby/ql/src/experimental/cwe-502/UnsafeYamlDeserialization.qll
@@ -29,10 +29,12 @@ private module UnsafeYamlDeserializationConfig implements DataFlow::StateConfigS
29
predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }
30
31
/**
32
- * A taint step related to the result of `YAML.parse` calls, or similar.
+ * Holds if taint with state `stateFrom` can flow from `pred` to `succ` with state `stateTo`.
33
+ *
34
+ * This is a taint step related to the result of `YAML.parse` calls, or similar.
35
* In the following example, this step will propagate taint from
36
* `source` to `sink`:
- * this contains two seperate steps:
37
+ * this contains two separate steps:
38
* ```rb
39
* x = source
40
* sink = YAML.parse(x)
0 commit comments