Skip to content

Commit a6b092d

Browse files
committed
Update rules ids
1 parent 4d97c42 commit a6b092d

File tree

2 files changed

+12
-12
lines changed

2 files changed

+12
-12
lines changed

go/ql/src/experimental/CWE-525/WebCacheDeceptionFiber.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55
* @problem.severity error
66
* @security-severity 9
77
* @precision high
8-
* @id go/web-cache-deception
8+
* @id go/web-cache-deception-fiber
99
* @tags security
1010
* external/cwe/cwe-525
1111
*/

go/ql/src/experimental/CWE-525/WebCacheDeceptionGoChi.ql

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -5,19 +5,19 @@
55
* @problem.severity error
66
* @security-severity 9
77
* @precision high
8-
* @id go/web-cache-deception
8+
* @id go/web-cache-deception-go-chi
99
* @tags security
1010
* external/cwe/cwe-525
1111
*/
1212

13-
import go
13+
import go
1414

15-
from DataFlow::CallNode httpHandleFuncCall, ImportSpec importSpec
16-
where
17-
importSpec.getPath() = "github.com/go-chi/chi/v5" and
18-
httpHandleFuncCall.getCall().getArgument(0).toString().matches("%/*%") and
19-
not httpHandleFuncCall.getCall().getArgument(0).toString().matches("%$%") and
20-
importSpec.getFile() = httpHandleFuncCall.getFile()
21-
select httpHandleFuncCall.getCall().getArgument(0),
22-
"Wildcard Endpoint used with " + httpHandleFuncCall.getCall().getArgument(0) + " in file: " +
23-
importSpec.getFile().getBaseName()
15+
from DataFlow::CallNode httpHandleFuncCall, ImportSpec importSpec
16+
where
17+
importSpec.getPath() = "github.com/go-chi/chi/v5" and
18+
httpHandleFuncCall.getCall().getArgument(0).toString().matches("%/*%") and
19+
not httpHandleFuncCall.getCall().getArgument(0).toString().matches("%$%") and
20+
importSpec.getFile() = httpHandleFuncCall.getFile()
21+
select httpHandleFuncCall.getCall().getArgument(0),
22+
"Wildcard Endpoint used with " + httpHandleFuncCall.getCall().getArgument(0) + " in file: " +
23+
importSpec.getFile().getBaseName()

0 commit comments

Comments
 (0)