Skip to content

Commit eeae91e

Browse files
haby0smowton
andauthored
Update java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll
Co-authored-by: Chris Smowton <[email protected]>
1 parent 046aeaa commit eeae91e

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -100,7 +100,7 @@ class SpringControllerRequestMappingGetMethod extends SpringControllerGetMethod
100100
/** A concatenate expression using `(` and `)` or `);`. */
101101
class JsonpBuilderExpr extends AddExpr {
102102
JsonpInjectionExpr() {
103-
getRightOperand().toString().regexpMatch("\"\\)\"|\"\\);\"") and
103+
getRightOperand().toString().regexpMatch("\"\\);?\"") and
104104
getLeftOperand()
105105
.(AddExpr)
106106
.getLeftOperand()

0 commit comments

Comments
 (0)