hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 09:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Remove escaped "{" and "}" before counting placeholders

Browse Source
This commit is contained in:
Owen Mansel-Chan
2024-12-05 10:43:13 +00:00
parent 2c061b0d56
commit b20b7c7572
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
java/ql/lib/semmle/code/java/frameworks/spring/SpringWebClient.qll
View File

@@ -56,7 +56,10 @@ private class SpringWebClientRestTemplateGetForObject extends RequestForgerySink
i <=
max(int occurrenceIndex, int occurrenceOffset |
exists(
hsp.getStringValue().regexpFind("\\{[^}]*\\}", occurrenceIndex, occurrenceOffset)
hsp.getStringValue()
.replaceAll("\\{", " ")
.replaceAll("\\}", " ")
.regexpFind("\\{[^}]*\\}", occurrenceIndex, occurrenceOffset)
) and
occurrenceOffset < hsp.getOffset()
|
@@ -78,6 +81,8 @@ private class SpringWebClientRestTemplateGetForObject extends RequestForgerySink
mc.getArgument(0)
.(CompileTimeConstantExpr)
.getStringValue()
.replaceAll("\\{", " ")
.replaceAll("\\}", " ")
.regexpFind("\\{[^}]*\\}", occurrenceIndex, _)
)
|