We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent b58e882 commit 0dc4738Copy full SHA for 0dc4738
go/ql/lib/semmle/go/security/Xss.qll
@@ -143,10 +143,10 @@ module SharedXss {
143
HtmlTemplateSanitizer() {
144
exists(Method m, DataFlow::CallNode call | m = call.getCall().getTarget() |
145
m.hasQualifiedName("html/template", "Template", "ExecuteTemplate") and
146
- call.getArgument(2) = this
+ this = call.getArgument(2)
147
or
148
m.hasQualifiedName("html/template", "Template", "Execute") and
149
- call.getArgument(1) = this
+ this = call.getArgument(1)
150
)
151
}
152
0 commit comments