public override void Bad(HttpRequest req, HttpResponse resp) { /* POTENTIAL FLAW: data may be set to null */ data = req.QueryString["CWE690"]; CWE690_NULL_Deref_From_Return__getParameter_Web_equals_68b.BadSink(req, resp); }