Skip to content

Commit b86643f

Browse files
committed
Ruby: doc fixes
1 parent 8a670fe commit b86643f

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

ruby/ql/src/experimental/cwe-502/UnsafeYamlDeserialization.qll

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,10 +29,12 @@ private module UnsafeYamlDeserializationConfig implements DataFlow::StateConfigS
2929
predicate isBarrier(DataFlow::Node node) { node instanceof Sanitizer }
3030

3131
/**
32-
* A taint step related to the result of `YAML.parse` calls, or similar.
32+
* Holds if taint with state `stateFrom` can flow from `pred` to `succ` with state `stateTo`.
33+
*
34+
* This is a taint step related to the result of `YAML.parse` calls, or similar.
3335
* In the following example, this step will propagate taint from
3436
* `source` to `sink`:
35-
* this contains two seperate steps:
37+
* this contains two separate steps:
3638
* ```rb
3739
* x = source
3840
* sink = YAML.parse(x)

0 commit comments

Comments
 (0)