/* goodB2G() - use badsource and goodsink */ private void GoodB2G(HttpRequest req, HttpResponse resp) { string data; /* POTENTIAL FLAW: Read data from a querystring using Params.Get */ data = req.Params.Get("name"); CWE643_Xpath_Injection__Params_Get_Web_53b.GoodB2GSink(data, req, resp); }