Small changes

Author: Kwstubbs

go/ql/lib/semmle/go/frameworks/GinCors.qll

@@ -12,7 +12,7 @@ module GinCors {
   string packagePath() { result = package("github.com/gin-contrib/cors", "") }
 
   /**
-   * New function create a new gin Handler that passed to gin as middleware
+   * A new function create a new gin Handler that passed to gin as middleware
    */
   class New extends Function {
     New() { exists(Function f | f.hasQualifiedName(packagePath(), "New") | this = f) }
@@ -107,6 +107,9 @@ module GinCors {
       exists(Type t | t.hasQualifiedName(packagePath(), "Config") | v.getType() = t)
     }
 
+    /**
+     * Get variable declaration of GinConfig
+     */
     SsaWithFields getV() { result = v }
   }
 }

go/ql/test/experimental/CWE-942/CorsMisconfiguration.go

@@ -191,9 +191,9 @@ func main() {
 		// })
 		http.HandleFunc("/", func(w http.ResponseWriter, req *http.Request) {
 			// OK-ish: the input origin header is validated against a whitelist.
-			if origin := req.Header.Get("Origin"); cors[origin] {
+			if origin := req.Header.Get("Origin"); cors_map[origin] {
 				w.Header().Set("Access-Control-Allow-Origin", origin)
-			} else if len(origin) > 0 && cors["*"] {
+			} else if len(origin) > 0 && cors_map["*"] {
 				w.Header().Set("Access-Control-Allow-Origin", origin)
 			}
 
@@ -219,7 +219,7 @@ func main() {
 }
 
 var (
-	cors = map[string]bool{"*": true}
+	cors_map = map[string]bool{"*": true}
 )
 
 func GetAllowOrigin() []string {