We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 264d6db commit b8fa943Copy full SHA for b8fa943
java/ql/test/library-tests/pathsanitizer/Test.java
@@ -258,10 +258,10 @@ public void dotDotCheckGuard() throws Exception {
258
}
259
{
260
String source = (String) source();
261
- if (!source.startsWith("/data") && source.indexOf("..") == -1)
262
- sink(source); // Safe
263
- else
+ if (source.startsWith("/data") || source.indexOf("..") != -1)
264
sink(source); // $ hasTaintFlow
+ else
+ sink(source); // Safe
265
266
267
0 commit comments