We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 46c75df commit a062d51Copy full SHA for a062d51
go/ql/lib/semmle/go/security/Xss.qll
@@ -139,10 +139,10 @@ module SharedXss {
139
HtmlTemplateSanitizer() {
140
exists(Method m, DataFlow::CallNode call | m = call.getCall().getTarget() |
141
m.hasQualifiedName("html/template", "Template", "ExecuteTemplate") and
142
- call.getArgument(2) = this
+ this = call.getArgument(2)
143
or
144
m.hasQualifiedName("html/template", "Template", "Execute") and
145
- call.getArgument(1) = this
+ this = call.getArgument(1)
146
)
147
}
148
0 commit comments