File tree Expand file tree Collapse file tree 1 file changed +3
-3
lines changed
go/ql/src/Security/CWE-079 Expand file tree Collapse file tree 1 file changed +3
-3
lines changed Original file line number Diff line number Diff line change @@ -26,8 +26,8 @@ class UnescapedType extends Type {
26
26
/**
27
27
* Holds if the sink is a data value argument of a template execution call.
28
28
*/
29
- predicate isSinkToTemplateExec ( DataFlow:: Node sink , DataFlow :: CallNode call ) {
30
- exists ( Method fn , string methodName |
29
+ predicate isSinkToTemplateExec ( DataFlow:: Node sink ) {
30
+ exists ( Method fn , string methodName , DataFlow :: CallNode call |
31
31
fn .hasQualifiedName ( "html/template" , "Template" , methodName ) and
32
32
call = fn .getACall ( )
33
33
|
@@ -69,7 +69,7 @@ module UntrustedToTemplateExecWithConversionConfig implements DataFlow::StateCon
69
69
}
70
70
71
71
predicate isSink ( DataFlow:: Node sink , FlowState state ) {
72
- state .isAfterConversion ( _) and isSinkToTemplateExec ( sink , _ )
72
+ state .isAfterConversion ( _) and isSinkToTemplateExec ( sink )
73
73
}
74
74
75
75
predicate isBarrier ( DataFlow:: Node node ) {
You can’t perform that action at this time.
0 commit comments