hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review - improved sanitizer checks.

Browse Source 
Co-authored-by: Alvaro Muñoz <pwntester@github.com>
This commit is contained in:
Francis Alexander
2021-02-17 18:58:32 +05:30
committed by GitHub
parent 40f4e71b86
commit 2baf2aa5c1
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
java/ql/src/Security/CWE/CWE-346/UnvalidatedCors.ql
View File

@@ -33,6 +33,9 @@ class CorsProbableCheckAccess extends MethodAccess {
getMethod().hasName("contains") and
getMethod().getDeclaringType().getASourceSupertype*() instanceof CollectionType
or
getMethod().hasName("containsKey") and
getMethod().getDeclaringType().getASourceSupertype*() instanceof MapType
or
getMethod().hasName("equals") and
getQualifier().getType() instanceof TypeString
}