Update go/ql/lib/semmle/go/security/Jwt.qll

atorralba · atorralba · commit 8afaa231eead · 2024-02-14T12:15:20.000+01:00
diff --git a/go/ql/lib/semmle/go/security/Jwt.qll b/go/ql/lib/semmle/go/security/Jwt.qll
@@ -35,7 +35,7 @@ private class GinJwtSign extends HardcodedCredentials::Sink {
 private class SquareJoseKey extends HardcodedCredentials::Sink {
   SquareJoseKey() {
     exists(Field f, string pkg |
-      pkg = ["github.com/square/go-jose/v3", "gopkg.in/square/go-jose.v2"]
+      pkg = [package("github.com/square/go-jose", ""), "gopkg.in/square/go-jose.v2"]
     |
       f.hasQualifiedName(pkg, ["Recipient", "SigningKey"], "Key") and
       f.getAWrite().getRhs() = this

Original file line number	Diff line number	Diff line change
`@@ -35,7 +35,7 @@ private class GinJwtSign extends HardcodedCredentials::Sink {`
`35`	`35`	`private class SquareJoseKey extends HardcodedCredentials::Sink {`
`36`	`36`	`SquareJoseKey() {`
`37`	`37`	`exists(Field f, string pkg \|`
`38`		`- pkg = ["github.com/square/go-jose/v3", "gopkg.in/square/go-jose.v2"]`
	`38`	`+ pkg = [package("github.com/square/go-jose", ""), "gopkg.in/square/go-jose.v2"]`
`39`	`39`	`\|`
`40`	`40`	`f.hasQualifiedName(pkg, ["Recipient", "SigningKey"], "Key") and`
`41`	`41`	`f.getAWrite().getRhs() = this`