File tree Expand file tree Collapse file tree 2 files changed +12
-12
lines changed
go/ql/src/experimental/CWE-525 Expand file tree Collapse file tree 2 files changed +12
-12
lines changed Original file line number Diff line number Diff line change 5
5
* @problem.severity error
6
6
* @security-severity 9
7
7
* @precision high
8
- * @id go/web-cache-deception
8
+ * @id go/web-cache-deception-fiber
9
9
* @tags security
10
10
* external/cwe/cwe-525
11
11
*/
Original file line number Diff line number Diff line change 5
5
* @problem.severity error
6
6
* @security-severity 9
7
7
* @precision high
8
- * @id go/web-cache-deception
8
+ * @id go/web-cache-deception-go-chi
9
9
* @tags security
10
10
* external/cwe/cwe-525
11
11
*/
12
12
13
- import go
13
+ import go
14
14
15
- from DataFlow:: CallNode httpHandleFuncCall , ImportSpec importSpec
16
- where
17
- importSpec .getPath ( ) = "github.com/go-chi/chi/v5" and
18
- httpHandleFuncCall .getCall ( ) .getArgument ( 0 ) .toString ( ) .matches ( "%/*%" ) and
19
- not httpHandleFuncCall .getCall ( ) .getArgument ( 0 ) .toString ( ) .matches ( "%$%" ) and
20
- importSpec .getFile ( ) = httpHandleFuncCall .getFile ( )
21
- select httpHandleFuncCall .getCall ( ) .getArgument ( 0 ) ,
22
- "Wildcard Endpoint used with " + httpHandleFuncCall .getCall ( ) .getArgument ( 0 ) + " in file: " +
23
- importSpec .getFile ( ) .getBaseName ( )
15
+ from DataFlow:: CallNode httpHandleFuncCall , ImportSpec importSpec
16
+ where
17
+ importSpec .getPath ( ) = "github.com/go-chi/chi/v5" and
18
+ httpHandleFuncCall .getCall ( ) .getArgument ( 0 ) .toString ( ) .matches ( "%/*%" ) and
19
+ not httpHandleFuncCall .getCall ( ) .getArgument ( 0 ) .toString ( ) .matches ( "%$%" ) and
20
+ importSpec .getFile ( ) = httpHandleFuncCall .getFile ( )
21
+ select httpHandleFuncCall .getCall ( ) .getArgument ( 0 ) ,
22
+ "Wildcard Endpoint used with " + httpHandleFuncCall .getCall ( ) .getArgument ( 0 ) + " in file: " +
23
+ importSpec .getFile ( ) .getBaseName ( )
You can’t perform that action at this time.
0 commit comments