Skip to content

Commit

Permalink
Update checks comments
Browse files Browse the repository at this point in the history
  • Loading branch information
LTe committed Jun 12, 2012
1 parent e24fccf commit 202caee
Show file tree
Hide file tree
Showing 4 changed files with 10 additions and 10 deletions.
6 changes: 3 additions & 3 deletions lib/scanny/checks/xss/xss_flash_check.rb
@@ -1,8 +1,8 @@
module Scanny
module Checks
# Check for flash method that are called with params or
# dynamic string. This allows us to avoid showing the user
# dangerous HTML code.
# Check for flash methods that are called with request params or
# dynamic a string. This allows us to avoid showing dangerous
# HTML code to users
class XssFlashCheck < Check
def pattern
[
Expand Down
4 changes: 2 additions & 2 deletions lib/scanny/checks/xss/xss_logger_check.rb
@@ -1,7 +1,7 @@
module Scanny
module Checks
# Check for logger method that are called with params or
# dynamic string. This allows us to avoid executing dangerous code.
# Check for logger methods that are called with request params or
# a dynamic string. This allows us to avoid executing dangerous code.
class XssLoggerCheck < Check
def pattern
[
Expand Down
6 changes: 3 additions & 3 deletions lib/scanny/checks/xss/xss_render_api_check.rb
@@ -1,8 +1,8 @@
module Scanny
module Checks
# Check for render_api_error method that are called with params or
# dynamic string. This allows us to avoid executing dangerous
# code on exception handler UI.
# Check for render_api_error methods that are called with params or
# a dynamic string. This allows us to avoid executing dangerous
# code in the exception handler UI.
class XssRenderApiCheck < Check
def pattern
[
Expand Down
4 changes: 2 additions & 2 deletions lib/scanny/checks/xss/xss_send_check.rb
@@ -1,7 +1,7 @@
module Scanny
module Checks
# Checks for send_ methods that are called with :disposition => 'inline'.
# This can lead to download private file from server or to XSS issue.
# Checks for send_* methods that are called with :disposition => 'inline'.
# This can lead to download of private files from a server or to a XSS issue.
class XssSendCheck < Check
def pattern
pattern_send
Expand Down

0 comments on commit 202caee

Please sign in to comment.