File tree Expand file tree Collapse file tree 1 file changed +7
-6
lines changed
go/ql/lib/semmle/go/frameworks Expand file tree Collapse file tree 1 file changed +7
-6
lines changed Original file line number Diff line number Diff line change @@ -101,7 +101,8 @@ module Fasthttp {
101
101
this = call .getArgument ( 0 )
102
102
or
103
103
m .hasQualifiedName ( packagePath ( ) , "RequestCtx" , [ "Success" , "SuccessString" ] ) and
104
- this = m .getACall ( ) .getArgument ( 1 )
104
+ call = m .getACall ( ) and
105
+ this = call .getArgument ( 1 )
105
106
) and
106
107
methodName =
107
108
[
@@ -149,19 +150,19 @@ module Fasthttp {
149
150
* A function that can be used as a sanitizer for XSS.
150
151
*/
151
152
class HtmlQuoteSanitizer extends EscapeFunction:: Range {
152
- boolean isHTMLEscape ;
153
+ boolean isHtmlEscape ;
153
154
154
155
HtmlQuoteSanitizer ( ) {
155
156
this .hasQualifiedName ( packagePath ( ) , [ "AppendHTMLEscape" , "AppendHTMLEscapeBytes" ] ) and
156
- isHTMLEscape = true
157
+ isHtmlEscape = true
157
158
or
158
- this .hasQualifiedName ( packagePath ( ) , "AppendQuotedArg" ) and isHTMLEscape = false
159
+ this .hasQualifiedName ( packagePath ( ) , "AppendQuotedArg" ) and isHtmlEscape = false
159
160
}
160
161
161
162
override string kind ( ) {
162
- isHTMLEscape = true and result = "html"
163
+ isHtmlEscape = true and result = "html"
163
164
or
164
- isHTMLEscape = false and result = "url"
165
+ isHtmlEscape = false and result = "url"
165
166
}
166
167
}
167
168
You can’t perform that action at this time.
0 commit comments