hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

update select clause and expected file

Browse Source
This commit is contained in:
Yunus AYDIN
2023-11-17 13:37:17 +03:00
parent 7bf7e59017
commit 9e5a80ac59
2 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
go/ql/src/experimental/CWE-525/WebCacheDeception.ql
View File

@@ -22,5 +22,6 @@ where
rn.reads(f) and
f.getParameter(0) = hw.getResponseWriter() and
hw.getHeaderName() = "cache-control"
select "Wildcard Endpoint used with : " + httpHandleFuncCall.getArgument(0),
hw.getHeaderName() + " Header is used"
select httpHandleFuncCall.getArgument(0),
"Wildcard Endpoint used with " + httpHandleFuncCall.getArgument(0) + " and '" + hw.getHeaderName()
+ "' Header is used"

2
go/ql/test/experimental/CWE-525/WebCacheDeception.expected
View File

@@ -1 +1 @@
| Wildcard Endpoint used with : "/adminusers/" | cache-control Header is used |
| WebCacheDeceptionBad.go:82:18:82:31 | "/adminusers/" | Wildcard Endpoint used with "/adminusers/" and 'cache-control' Header is used |