Skip to content

Commit 501f617

Browse files
committed
Update qhelp and and go-chi
1 parent 34fb1c4 commit 501f617

File tree

1 file changed

+9
-3
lines changed

1 file changed

+9
-3
lines changed

go/ql/src/experimental/CWE-525/WebCacheDeception.qhelp

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -17,19 +17,25 @@
1717
<p>
1818
Vulnerable code example: A web server is configured to cache all responses ending in '.css'. An attacker requests 'profile.css', and the server processes 'profile', a sensitive page, and caches it.
1919
</p>
20-
<sample src="WebCacheDeceptionBad.go" />
20+
<sample src="examples/WebCacheDeceptionBad.go" />
2121
</example>
2222
<example>
2323
<p>
2424
Secure code example: The server is configured with strict cache controls and URL validation, preventing caching of dynamic or sensitive pages regardless of their URL pattern.
2525
</p>
26-
<sample src="WebCacheDeceptionGood.go" />
26+
<sample src="examples/WebCacheDeceptionGood.go" />
2727
</example>
2828
<example>
2929
<p>
3030
Vulnerable code example: The server is configured with strict cache controls and URL validation, preventing caching of dynamic or sensitive pages regardless of their URL pattern.
3131
</p>
32-
<sample src="WebCacheDeceptionFiber.go" />
32+
<sample src="examples/WebCacheDeceptionFiber.go" />
33+
</example>
34+
<example>
35+
<p>
36+
Vulnerable code example: The server is configured with strict cache controls and URL validation, preventing caching of dynamic or sensitive pages regardless of their URL pattern.
37+
</p>
38+
<sample src="examples/WebCacheDeceptionGoChi.go" />
3339
</example>
3440
<references>
3541
<li>

0 commit comments

Comments
 (0)