remove change-notes and fix build error

go/ql/src/change-notes/2023-11-14-web-cache-deception.md

@@ -1,4 +0,0 @@
----
-category: newQuery
----
-* Added a new query, `go/web-cache-deception`, to detect code that vulnerable to Web Cache Deception.

go/ql/src/experimental/CWE-525/WebCacheDeception.ql

@@ -1,4 +1,4 @@
-/**
+/*
  * @name Web Cache Deception
  * @description A caching system has been detected on the application and is vulnerable to web cache deception. By manipulating the URL it is possible to force the application to cache pages that are only accessible by an authenticated user. Once cached, these pages can be accessed by an unauthenticated user.
  * @kind path-problem

go/ql/src/experimental/CWE-525/WebCacheDeceptionBad.go

@@ -1,7 +1,6 @@
 package main
 
 import (
-	"flag"
 	"fmt"
 	"html/template"
 	"log"
@@ -76,14 +75,12 @@ func ShowAdminPageCache(w http.ResponseWriter, r *http.Request) {
 }
 
 func main() {
-	var portNum = flag.String("p", "80", "Specify application server listening port")
-	flag.Parse()
-	fmt.Println("Vulnapp server listening : " + *portNum)
+	fmt.Println("Vulnapp server listening : 1337")
 
 	http.Handle("/assets/", http.StripPrefix("/assets/", http.FileServer(http.Dir("assets/"))))
 
 	http.HandleFunc("/adminusers/", ShowAdminPageCache)
-	err := http.ListenAndServe(":"+*portNum, nil)
+	err := http.ListenAndServe(":1337", nil)
 	if err != nil {
 		log.Fatal("ListenAndServe: ", err)
 	}

go/ql/src/experimental/CWE-525/WebCacheDeceptionGood.go

@@ -1,7 +1,6 @@
 package main
 
 import (
-	"flag"
 	"fmt"
 	"html/template"
 	"log"
@@ -76,14 +75,13 @@ func ShowAdminPageCache(w http.ResponseWriter, r *http.Request) {
 }
 
 func main() {
-	var portNum = flag.String("p", "80", "Specify application server listening port")
-	flag.Parse()
-	fmt.Println("Vulnapp server listening : " + *portNum)
+
+	fmt.Println("Vulnapp server listening : 1337")
 
 	http.Handle("/assets/", http.StripPrefix("/assets/", http.FileServer(http.Dir("assets/"))))
 	http.HandleFunc("/adminusers", ShowAdminPageCache)
 
-	err := http.ListenAndServe(":"+*portNum, nil)
+	err := http.ListenAndServe(":1337", nil)
 	if err != nil {
 		log.Fatal("ListenAndServe: ", err)
 	}

go/ql/src/experimental/CWE-525/wcd/baseline-info.json

@@ -0,0 +1 @@
+{"languages":{"go":{"displayName":"Go","files":["WebCacheDeceptionGood.go","WebCacheDeceptionBad.go"],"linesOfCode":132,"name":"go"}}}

go/ql/src/experimental/CWE-525/wcd/codeql-database.yml

@@ -0,0 +1,10 @@
+---
+sourceLocationPrefix: /Users/yunus.aydin/Research/codeql-fork/go/ql/src/experimental/CWE-525
+baselineLinesOfCode: 132
+unicodeNewlines: false
+columnKind: utf8
+primaryLanguage: go
+creationMetadata:
+  cliVersion: 2.15.2
+  creationTime: 2023-11-14T16:52:04.849827Z
+finalised: true