We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 92e0f02 commit e92738aCopy full SHA for e92738a
ql/src/experimental/CWE-942/CorsMisconfiguration.ql
@@ -122,11 +122,9 @@ class FlowsFromUntrusted extends TaintTracking::Configuration {
122
123
predicate isSink(DataFlow::Node sink, ControlFlow::ConditionGuardNode cgn) {
124
exists(IfStmt ifs |
125
- exists(Expr child, Expr operand |
126
- child = ifs.getCond().getAChildExpr*() and
127
- operand = child and
+ exists(Expr operand |
+ operand = ifs.getCond().getAChildExpr*() and
128
(
129
- //
130
exists(DataFlow::CallExpr call | call = operand |
131
call.getTarget().hasQualifiedName("strings", "HasSuffix") and
132
sink.asExpr() = call.getArgument(0)
0 commit comments