diff --git a/lib/scanny/checks/xss/xss_flash_check.rb b/lib/scanny/checks/xss/xss_flash_check.rb index 019c52b..e203c36 100644 --- a/lib/scanny/checks/xss/xss_flash_check.rb +++ b/lib/scanny/checks/xss/xss_flash_check.rb @@ -1,8 +1,8 @@ module Scanny module Checks - # Check for flash method that are called with params or - # dynamic string. This allows us to avoid showing the user - # dangerous HTML code. + # Check for flash methods that are called with request params or + # dynamic a string. This allows us to avoid showing dangerous + # HTML code to users class XssFlashCheck < Check def pattern [ diff --git a/lib/scanny/checks/xss/xss_logger_check.rb b/lib/scanny/checks/xss/xss_logger_check.rb index bc2ab8d..008f82f 100644 --- a/lib/scanny/checks/xss/xss_logger_check.rb +++ b/lib/scanny/checks/xss/xss_logger_check.rb @@ -1,7 +1,7 @@ module Scanny module Checks - # Check for logger method that are called with params or - # dynamic string. This allows us to avoid executing dangerous code. + # Check for logger methods that are called with request params or + # a dynamic string. This allows us to avoid executing dangerous code. class XssLoggerCheck < Check def pattern [ diff --git a/lib/scanny/checks/xss/xss_render_api_check.rb b/lib/scanny/checks/xss/xss_render_api_check.rb index 6bfde40..c50232b 100644 --- a/lib/scanny/checks/xss/xss_render_api_check.rb +++ b/lib/scanny/checks/xss/xss_render_api_check.rb @@ -1,8 +1,8 @@ module Scanny module Checks - # Check for render_api_error method that are called with params or - # dynamic string. This allows us to avoid executing dangerous - # code on exception handler UI. + # Check for render_api_error methods that are called with params or + # a dynamic string. This allows us to avoid executing dangerous + # code in the exception handler UI. class XssRenderApiCheck < Check def pattern [ diff --git a/lib/scanny/checks/xss/xss_send_check.rb b/lib/scanny/checks/xss/xss_send_check.rb index d6df62f..d4ece35 100644 --- a/lib/scanny/checks/xss/xss_send_check.rb +++ b/lib/scanny/checks/xss/xss_send_check.rb @@ -1,7 +1,7 @@ module Scanny module Checks - # Checks for send_ methods that are called with :disposition => 'inline'. - # This can lead to download private file from server or to XSS issue. + # Checks for send_* methods that are called with :disposition => 'inline'. + # This can lead to download of private files from a server or to a XSS issue. class XssSendCheck < Check def pattern pattern_send