Skip to content

Commit 6378c5e

Browse files
author
Yunus AYDIN
committed
Update Fiber Rule for checking files
1 parent 63123f3 commit 6378c5e

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

go/ql/src/experimental/CWE-525/WebCacheDeceptionFiber.ql

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ from DataFlow::CallNode httpHandleFuncCall, ImportSpec importSpec
1616
where
1717
importSpec.getPath() = "github.com/gofiber/fiber/v2" and
1818
httpHandleFuncCall.getCall().getArgument(0).toString().matches("%/*%") and
19-
not httpHandleFuncCall.getCall().getArgument(0).toString().matches("%$%")
19+
not httpHandleFuncCall.getCall().getArgument(0).toString().matches("%$%") and
20+
importSpec.getFile() = httpHandleFuncCall.getFile()
2021
select httpHandleFuncCall.getCall().getArgument(0),
2122
"Wildcard Endpoint used with " + httpHandleFuncCall.getCall().getArgument(0)

0 commit comments

Comments
 (0)