We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 40f4e71 commit 2baf2aaCopy full SHA for 2baf2aa
java/ql/src/Security/CWE/CWE-346/UnvalidatedCors.ql
@@ -33,6 +33,9 @@ class CorsProbableCheckAccess extends MethodAccess {
33
getMethod().hasName("contains") and
34
getMethod().getDeclaringType().getASourceSupertype*() instanceof CollectionType
35
or
36
+ getMethod().hasName("containsKey") and
37
+ getMethod().getDeclaringType().getASourceSupertype*() instanceof MapType
38
+ or
39
getMethod().hasName("equals") and
40
getQualifier().getType() instanceof TypeString
41
}
0 commit comments