@@ -88,8 +88,8 @@ private predicate expressionCompilationStep(DataFlow::Node node1, DataFlow::Node
8888}
8989
9090/**
91- * Holds if `node1` to `node2` is a dataflow step creates `ExpressionCompiler`,
92- * i.e. `new ExpressionCompiler(tainted)`.
91+ * Holds if `node1` to `node2` is a dataflow step that creates `ExpressionCompiler`
92+ * by calling `new ExpressionCompiler(tainted)`.
9393 */
9494private predicate createExpressionCompilerStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
9595 exists ( ConstructorCall cc |
@@ -100,8 +100,8 @@ private predicate createExpressionCompilerStep(DataFlow::Node node1, DataFlow::N
100100}
101101
102102/**
103- * Holds if `node1` to `node2` is a dataflow step creates `CompiledAccExpression`,
104- * i.e. `new CompiledAccExpression(tainted, ...)`.
103+ * Holds if `node1` to `node2` is a dataflow step creates `CompiledAccExpression`
104+ * by calling `new CompiledAccExpression(tainted, ...)`.
105105 */
106106private predicate createCompiledAccExpressionStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
107107 exists ( ConstructorCall cc |
@@ -125,8 +125,8 @@ private predicate expressionCompilerCompileStep(DataFlow::Node node1, DataFlow::
125125}
126126
127127/**
128- * Holds if `node1` to `node2` is a dataflow step that compiles a script via `MvelScriptEngine`,
129- * i.e. `engine.compile(tainted)` or `engine.compiledScript(tainted)`.
128+ * Holds if `node1` to `node2` is a dataflow step that compiles a script via `MvelScriptEngine`
129+ * by calling `engine.compile(tainted)` or `engine.compiledScript(tainted)`.
130130 */
131131private predicate scriptCompileStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
132132 exists ( MethodAccess ma , Method m | ma .getMethod ( ) = m |
@@ -137,8 +137,8 @@ private predicate scriptCompileStep(DataFlow::Node node1, DataFlow::Node node2)
137137}
138138
139139/**
140- * Holds if `node1` to `node2` is a dataflow step creates `MvelCompiledScript`,
141- * i.e. `new MvelCompiledScript(engine, tainted)`.
140+ * Holds if `node1` to `node2` is a dataflow step that creates `MvelCompiledScript`
141+ * by calling `new MvelCompiledScript(engine, tainted)`.
142142 */
143143private predicate createMvelCompiledScriptStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
144144 exists ( ConstructorCall cc |
@@ -149,8 +149,8 @@ private predicate createMvelCompiledScriptStep(DataFlow::Node node1, DataFlow::N
149149}
150150
151151/**
152- * Holds if `node1` to `node2` is a dataflow step creates `TemplateCompiler`,
153- * i.e. `new TemplateCompiler(tainted)`.
152+ * Holds if `node1` to `node2` is a dataflow step creates `TemplateCompiler`
153+ * by calling `new TemplateCompiler(tainted)`.
154154 */
155155private predicate createTemplateCompilerStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
156156 exists ( ConstructorCall cc |
@@ -161,8 +161,8 @@ private predicate createTemplateCompilerStep(DataFlow::Node node1, DataFlow::Nod
161161}
162162
163163/**
164- * Holds if `node1` to `node2` is a dataflow step that compiles a script via `TemplateCompiler`,
165- * i.e. `compiler.compile()` or `TemplateCompiler.compileTemplate(tainted)`.
164+ * Holds if `node1` to `node2` is a dataflow step that compiles a script via `TemplateCompiler`
165+ * by calling `compiler.compile()` or `TemplateCompiler.compileTemplate(tainted)`.
166166 */
167167private predicate templateCompileStep ( DataFlow:: Node node1 , DataFlow:: Node node2 ) {
168168 exists ( MethodAccess ma , Method m | ma .getMethod ( ) = m |
0 commit comments