We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 74f1344 commit fa1fa0dCopy full SHA for fa1fa0d
go/ql/src/experimental/CWE-525/WebCacheDeception.ql
@@ -19,7 +19,7 @@ where
19
httpHandleFuncCall.getTarget().hasQualifiedName("net/http", "HandleFunc") and
20
httpHandleFuncCall.getNumArgument() > 1 and
21
httpHandleFuncCall.getArgument(0).getType().getUnderlyingType() = StringType and
22
- httpHandleFuncCall.getArgument(0).toString().matches("%/\"") and
+ httpHandleFuncCall.getArgument(0).getStringValue().matches("%/\"") and
23
// Trace the second argument's data flow to its predecessor
24
predecessor = httpHandleFuncCall.getArgument(1).getAPredecessor() and
25
// Find the corresponding expression for the predecessor
0 commit comments