We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 17afab7 commit 2f1bd75Copy full SHA for 2f1bd75
javascript/ql/src/Security/CWE-020/IncorrectSuffixCheck.ql
@@ -58,7 +58,7 @@ class IndexOfCall extends DataFlow::MethodCallNode {
58
// both use the same concatenation of a string and a value
59
exists(Expr origin, StringLiteral str, AddExpr otherAdd |
60
this.getArgument(0).asExpr().(AddExpr).hasOperands(origin, str) and
61
- otherAdd = result.getArgument(0).asExpr().(AddExpr)
+ otherAdd = result.getArgument(0).asExpr()
62
|
63
otherAdd.getAnOperand().(StringLiteral).getStringValue() = str.getStringValue() and
64
otherAdd.getAnOperand().flow().getALocalSource() = origin.flow().getALocalSource()
0 commit comments