mirror of
https://github.com/github/codeql.git
synced 2025-12-24 04:36:35 +01:00
Update java/ql/src/Security/CWE/CWE-113/NettyResponseSplitting.ql
This commit is contained in:
committed by
GitHub
parent
832a4f2e07
commit
60f2fa9eb9
@@ -30,7 +30,7 @@ private class InsecureDefaultHttpResponseClassInstantiation extends InsecureNett
|
||||
}
|
||||
|
||||
private class InsecureDefaultFullHttpResponseClassInstantiation extends InsecureNettyObjectCreation {
|
||||
InsecureDefaultHttpResponseClassInstantiation() {
|
||||
InsecureDefaultFullHttpResponseClassInstantiation() {
|
||||
getConstructedType().hasQualifiedName("io.netty.handler.codec.http", "DefaultFullHttpResponse") and
|
||||
getArgument(3).(CompileTimeConstantExpr).getBooleanValue() = false
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user