Thanks to visit codestin.com Credit goes to github.com
We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent b69be30 commit 2a50195Copy full SHA for 2a50195
1 file changed
java/ql/test/query-tests/security/CWE-643/XPathInjectionTest.java
@@ -133,7 +133,7 @@ public void handle(HttpServletRequest request) throws Exception {
133
134
new DefaultXPath("/users/user[@name='" + user + "' and @pass='" + pass + "']"); // $hasXPathInjection
135
new XPathPattern("/users/user[@name='" + user + "' and @pass='" + pass + "']"); // $hasXPathInjection
136
- new XPathPattern(new PatternStub(user)); // Jaxen is not modeled yet
+ new XPathPattern(new PatternStub(user)); // $ MISSING: hasXPathInjection // Jaxen is not modeled yet
137
138
DocumentFactory docFactory = DocumentFactory.getInstance();
139
docFactory.createPattern("/users/user[@name='" + user + "' and @pass='" + pass + "']"); // $hasXPathInjection
0 commit comments