Improve TempDirHijackingVulnerability message

github · Feb 14, 2022 · fee9c41 · fee9c41
1 parent d91c999
commit fee9c41
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.ql b/java/ql/src/Security/CWE/CWE-378/TempDirHijackingVulnerability.ql
@@ -123,4 +123,4 @@ where
   isUnsafeUseUnconstrainedByIfCheck(sink, unsafe) and
   isNonThrowingDirectoryCreationExpression(sink.asExpr(), creationCall)
 select deleteCheckpoint.getNode(), source, deleteCheckpoint,
-  "Local temporary directory hijacking race condition $@ file $@ may have been hijacked", creationCall, "here", unsafe, "here"
+  "Local temporary directory hijacking race condition $@, file $@ may have been hijacked", creationCall, "here", unsafe, "here"