We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 046aeaa commit eeae91eCopy full SHA for eeae91e
java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll
@@ -100,7 +100,7 @@ class SpringControllerRequestMappingGetMethod extends SpringControllerGetMethod
100
/** A concatenate expression using `(` and `)` or `);`. */
101
class JsonpBuilderExpr extends AddExpr {
102
JsonpInjectionExpr() {
103
- getRightOperand().toString().regexpMatch("\"\\)\"|\"\\);\"") and
+ getRightOperand().toString().regexpMatch("\"\\);?\"") and
104
getLeftOperand()
105
.(AddExpr)
106
.getLeftOperand()
0 commit comments