Skip to content

Commit fa1fa0d

Browse files
aydinnyunusowen-mc
andauthored
Update go/ql/src/experimental/CWE-525/WebCacheDeception.ql
Co-authored-by: Owen Mansel-Chan <[email protected]>
1 parent 74f1344 commit fa1fa0d

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

go/ql/src/experimental/CWE-525/WebCacheDeception.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ where
1919
httpHandleFuncCall.getTarget().hasQualifiedName("net/http", "HandleFunc") and
2020
httpHandleFuncCall.getNumArgument() > 1 and
2121
httpHandleFuncCall.getArgument(0).getType().getUnderlyingType() = StringType and
22-
httpHandleFuncCall.getArgument(0).toString().matches("%/\"") and
22+
httpHandleFuncCall.getArgument(0).getStringValue().matches("%/\"") and
2323
// Trace the second argument's data flow to its predecessor
2424
predecessor = httpHandleFuncCall.getArgument(1).getAPredecessor() and
2525
// Find the corresponding expression for the predecessor

0 commit comments

Comments
 (0)