|
58 | 58 | | reflectedxsstest.go:51:14:51:18 | selection of URL | reflectedxsstest.go:51:14:51:26 | call to Query | provenance | Src:MaD:10 MaD:17 | |
59 | 59 | | reflectedxsstest.go:51:14:51:26 | call to Query | reflectedxsstest.go:54:11:54:21 | type conversion | provenance | | |
60 | 60 | | tst.go:14:15:14:20 | selection of Form | tst.go:14:15:14:36 | call to Get | provenance | Src:MaD:6 MaD:18 | |
61 | | -| tst.go:14:15:14:36 | call to Get | tst.go:18:32:18:32 | a | provenance | | |
| 61 | +| tst.go:14:15:14:36 | call to Get | tst.go:17:18:17:25 | username | provenance | | |
| 62 | +| tst.go:17:9:17:57 | slice literal [array] | tst.go:18:32:18:32 | a [array] | provenance | | |
| 63 | +| tst.go:17:18:17:25 | username | tst.go:17:9:17:57 | slice literal [array] | provenance | | |
62 | 64 | | tst.go:18:19:18:38 | call to Join | tst.go:18:12:18:39 | type conversion | provenance | | |
63 | | -| tst.go:18:32:18:32 | a | tst.go:18:19:18:38 | call to Join | provenance | MaD:19 | |
| 65 | +| tst.go:18:32:18:32 | a [array] | tst.go:18:19:18:38 | call to Join | provenance | MaD:19 | |
64 | 66 | | tst.go:48:14:48:19 | selection of Form | tst.go:48:14:48:34 | call to Get | provenance | Src:MaD:6 MaD:18 | |
65 | 67 | | tst.go:48:14:48:34 | call to Get | tst.go:53:12:53:26 | type conversion | provenance | | |
66 | 68 | | websocketXss.go:31:11:31:14 | xnet [postupdate] | websocketXss.go:32:24:32:27 | xnet | provenance | Src:MaD:5 | |
|
88 | 90 | | 16 | Summary: mime/multipart; Reader; true; NextPart; ; ; Argument[receiver]; ReturnValue[0]; taint; manual | |
89 | 91 | | 17 | Summary: net/url; URL; true; Query; ; ; Argument[receiver]; ReturnValue; taint; manual | |
90 | 92 | | 18 | Summary: net/url; Values; true; Get; ; ; Argument[receiver]; ReturnValue; taint; manual | |
91 | | -| 19 | Summary: strings; ; false; Join; ; ; Argument[0..1]; ReturnValue; taint; manual | |
| 93 | +| 19 | Summary: strings; ; false; Join; ; ; Argument[0].ArrayElement; ReturnValue; taint; manual | |
92 | 94 | nodes |
93 | 95 | | ReflectedXss.go:11:15:11:20 | selection of Form | semmle.label | selection of Form | |
94 | 96 | | ReflectedXss.go:11:15:11:36 | call to Get | semmle.label | call to Get | |
@@ -137,9 +139,11 @@ nodes |
137 | 139 | | reflectedxsstest.go:54:11:54:21 | type conversion | semmle.label | type conversion | |
138 | 140 | | tst.go:14:15:14:20 | selection of Form | semmle.label | selection of Form | |
139 | 141 | | tst.go:14:15:14:36 | call to Get | semmle.label | call to Get | |
| 142 | +| tst.go:17:9:17:57 | slice literal [array] | semmle.label | slice literal [array] | |
| 143 | +| tst.go:17:18:17:25 | username | semmle.label | username | |
140 | 144 | | tst.go:18:12:18:39 | type conversion | semmle.label | type conversion | |
141 | 145 | | tst.go:18:19:18:38 | call to Join | semmle.label | call to Join | |
142 | | -| tst.go:18:32:18:32 | a | semmle.label | a | |
| 146 | +| tst.go:18:32:18:32 | a [array] | semmle.label | a [array] | |
143 | 147 | | tst.go:48:14:48:19 | selection of Form | semmle.label | selection of Form | |
144 | 148 | | tst.go:48:14:48:34 | call to Get | semmle.label | call to Get | |
145 | 149 | | tst.go:53:12:53:26 | type conversion | semmle.label | type conversion | |
|
0 commit comments