hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-29 22:32:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

HTTP ResponseBody: support HeaderWrites with hard-coded header values.

Browse Source
This commit is contained in:
Chris Smowton
2021-04-16 15:19:06 +01:00
parent 3fd2c7d4bb
commit 9ea8b34e47
1 changed files with 8 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
ql/src/semmle/go/concepts/HTTP.qll
View File

@@ -190,7 +190,14 @@ module HTTP {
abstract ResponseWriter getResponseWriter();
/** Gets a content-type associated with this body. */
string getAContentType() { result = getAContentTypeNode().getStringValue() }
string getAContentType() {
exists(HTTP::HeaderWrite hw | hw = getResponseWriter().getAHeaderWrite() |
hw.getHeaderName() = "content-type" and
result = hw.getHeaderValue()
)
or
result = getAContentTypeNode().getStringValue()
}
/** Gets a dataflow node for a content-type associated with this body. */
DataFlow::Node getAContentTypeNode() {