Update csharp/ql/src/Security Features/CWE-327/InsecureSQLConnection.ql

raulgarciamsft · MathiasVP · web-flow · commit 0662013ef5b5 · 2024-10-22T09:20:01.000-07:00
Co-authored-by: Mathias Vorreiter Pedersen &lt;mathiasvp@github.com&gt;
diff --git a/csharp/ql/src/Security Features/CWE-327/InsecureSQLConnection.ql b/csharp/ql/src/Security Features/CWE-327/InsecureSQLConnection.ql
@@ -52,7 +52,7 @@ predicate isEncryptTrue(Source source, Sink sink) {
   or
   exists(ObjectCreation oc, Expr e | oc.getRuntimeArgument(0) = sink.asExpr() |
     getInfoForInitializedConnEncryption(oc, e) and
-    e.getValue().toString().toLowerCase() = "true"
+    e.getValue().toLowerCase() = "true"
   )
 }
 

Original file line number	Diff line number	Diff line change
`@@ -52,7 +52,7 @@ predicate isEncryptTrue(Source source, Sink sink) {`
`52`	`52`	`or`
`53`	`53`	`exists(ObjectCreation oc, Expr e \| oc.getRuntimeArgument(0) = sink.asExpr() \|`
`54`	`54`	`getInfoForInitializedConnEncryption(oc, e) and`
`55`		`- e.getValue().toString().toLowerCase() = "true"`
	`55`	`+ e.getValue().toLowerCase() = "true"`
`56`	`56`	`)`
`57`	`57`	`}`
`58`	`58`