diff --git a/ruby/ql/src/experimental/ldap-improper-auth/ImproperLdapAuth.ql b/ruby/ql/src/experimental/ldap-improper-auth/ImproperLdapAuth.ql index f155f4ae2eca..e82ff1d1e30f 100644 --- a/ruby/ql/src/experimental/ldap-improper-auth/ImproperLdapAuth.ql +++ b/ruby/ql/src/experimental/ldap-improper-auth/ImproperLdapAuth.ql @@ -16,5 +16,5 @@ import ImproperLdapAuthFlow::PathGraph from ImproperLdapAuthFlow::PathNode source, ImproperLdapAuthFlow::PathNode sink where ImproperLdapAuthFlow::flowPath(source, sink) -select sink.getNode(), source, sink, "This LDAP authencation depends on a $@.", source.getNode(), +select sink.getNode(), source, sink, "This LDAP authentication depends on a $@.", source.getNode(), "user-provided value" diff --git a/ruby/ql/test/query-tests/experimental/ImproperLdapAuth/ImproperLdapAuth.expected b/ruby/ql/test/query-tests/experimental/ImproperLdapAuth/ImproperLdapAuth.expected index 1b0e8d4fbb38..635cfcd4b3e7 100644 --- a/ruby/ql/test/query-tests/experimental/ImproperLdapAuth/ImproperLdapAuth.expected +++ b/ruby/ql/test/query-tests/experimental/ImproperLdapAuth/ImproperLdapAuth.expected @@ -16,5 +16,5 @@ nodes | ImproperLdapAuth.rb:31:24:31:27 | pass | semmle.label | pass | subpaths #select -| ImproperLdapAuth.rb:15:23:15:26 | pass | ImproperLdapAuth.rb:5:12:5:17 | call to params | ImproperLdapAuth.rb:15:23:15:26 | pass | This LDAP authencation depends on a $@. | ImproperLdapAuth.rb:5:12:5:17 | call to params | user-provided value | -| ImproperLdapAuth.rb:31:24:31:27 | pass | ImproperLdapAuth.rb:24:12:24:17 | call to params | ImproperLdapAuth.rb:31:24:31:27 | pass | This LDAP authencation depends on a $@. | ImproperLdapAuth.rb:24:12:24:17 | call to params | user-provided value | +| ImproperLdapAuth.rb:15:23:15:26 | pass | ImproperLdapAuth.rb:5:12:5:17 | call to params | ImproperLdapAuth.rb:15:23:15:26 | pass | This LDAP authentication depends on a $@. | ImproperLdapAuth.rb:5:12:5:17 | call to params | user-provided value | +| ImproperLdapAuth.rb:31:24:31:27 | pass | ImproperLdapAuth.rb:24:12:24:17 | call to params | ImproperLdapAuth.rb:31:24:31:27 | pass | This LDAP authentication depends on a $@. | ImproperLdapAuth.rb:24:12:24:17 | call to params | user-provided value |