Improve TempDirHijackingVulnerability message

github · Jan 20, 2022 · d4739a2 · d4739a2
1 parent 3a21e6a
commit d4739a2
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.ql b/java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.ql
@@ -123,4 +123,4 @@ where
   isUnsafeUseUnconstrainedByIfCheck(sink, unsafe) and
   isNonThrowingDirectoryCreationExpression(sink.asExpr(), creationCall)
 select deleteCheckpoint.getNode(), source, deleteCheckpoint,
-  "Local temporary directory hijacking race condition $@ file $@ may have been hijacked", creationCall, "here", unsafe, "here"
+  "Local temporary directory hijacking race condition $@, file $@ may have been hijacked", creationCall, "here", unsafe, "here"