We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 774baea commit 43966ebCopy full SHA for 43966eb
java/ql/lib/semmle/code/java/security/RequestForgery.qll
@@ -79,10 +79,7 @@ private class HostnameSanitizingPrefix extends InterestingPrefix {
79
// the host or entity addressed: for example, anything containing `?` or `#`, or a slash that
80
// doesn't appear to be a protocol specifier (e.g. `http://` is not sanitizing), or specifically
81
// the string "/".
82
- exists(
83
- this.getStringValue()
84
- .regexpFind(".*([?#]|[^?#:/\\\\][/\\\\]).*|[/\\\\][^/\\\\].*|^/$", 0, offset)
85
- )
+ exists(this.getStringValue().regexpFind("([?#]|[^?#:/\\\\][/\\\\])|^/$", 0, offset))
86
}
87
88
override int getOffset() { result = offset }
0 commit comments