add a comment

alexrford · alexrford · commit 907bb9b5569c · 2021-06-01T12:22:04.000+01:00
diff --git a/ql/src/queries/security/cwe-798/HardcodedCredentials.ql b/ql/src/queries/security/cwe-798/HardcodedCredentials.ql
@@ -88,6 +88,7 @@ private predicate maybeCredentialName(string name) {
   not name.suffix(name.length() - 4) = "file"
 }
 
+// A parameter that may represent a credential value
 private DataFlow::LocalSourceNode credentialParameter(TypeTracker t) {
   t.start() and
   exists(Method m, NamedParameter p, int idx |

Original file line number	Diff line number	Diff line change
`@@ -88,6 +88,7 @@ private predicate maybeCredentialName(string name) {`
`88`	`88`	`not name.suffix(name.length() - 4) = "file"`
`89`	`89`	`}`
`90`	`90`
	`91`	`+// A parameter that may represent a credential value`
`91`	`92`	`private DataFlow::LocalSourceNode credentialParameter(TypeTracker t) {`
`92`	`93`	`t.start() and`
`93`	`94`	`exists(Method m, NamedParameter p, int idx \|`