We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent fdefcd6 commit 74f1344Copy full SHA for 74f1344
go/ql/src/experimental/CWE-525/WebCacheDeception.ql
@@ -18,7 +18,7 @@ from
18
where
19
httpHandleFuncCall.getTarget().hasQualifiedName("net/http", "HandleFunc") and
20
httpHandleFuncCall.getNumArgument() > 1 and
21
- httpHandleFuncCall.getArgument(0).getType().toString() = "string" and
+ httpHandleFuncCall.getArgument(0).getType().getUnderlyingType() = StringType and
22
httpHandleFuncCall.getArgument(0).toString().matches("%/\"") and
23
// Trace the second argument's data flow to its predecessor
24
predecessor = httpHandleFuncCall.getArgument(1).getAPredecessor() and
0 commit comments