Merge pull request #13359 from jorgectf/jorgectf/unsafe-deserialization-name-convention

RasmusWL · web-flow · commit a1f20f84d4e5 · 2023-06-06T11:28:41.000+02:00
Python: Make `py/unsafe-deserialization` `@name` consistent with other languages
diff --git a/python/ql/src/Security/CWE-502/UnsafeDeserialization.ql b/python/ql/src/Security/CWE-502/UnsafeDeserialization.ql
@@ -1,5 +1,5 @@
 /**
- * @name Deserializing untrusted input
+ * @name Deserialization of user-controlled data
  * @description Deserializing user-controlled data may allow attackers to execute arbitrary code.
  * @kind path-problem
  * @id py/unsafe-deserialization
diff --git a/python/ql/src/change-notes/2023-06-02-unsafe-deserialization-name-update.md b/python/ql/src/change-notes/2023-06-02-unsafe-deserialization-name-update.md
@@ -0,0 +1,4 @@
+---
+category: fix
+---
+* The display name (`@name`) of the `py/unsafe-deserialization` query has been updated in favor of consistency with other languages.

-Original file line number
+Diff line change
@@ @@ -0,0 +1,4 @@ @@
 +---
 +category: fix
 +---
 +* The display name (`@name`) of the `py/unsafe-deserialization` query has been updated in favor of consistency with other languages.