Files
codeql/go/ql/test/experimental/CWE-840/ConditionalBypassGood.go
2022-05-20 10:07:19 -07:00

13 lines
228 B
Go

package main
import (
"net/http"
)
func exampleHandlerGood(w http.ResponseWriter, r *http.Request) {
// GOOD: the configuration is not user controlled
if r.Header.Get("Origin") != config.get("Host") {
//do something
}
}