add example for domain names with sub-domains to missing-regexp-anchor

go/ql/src/Security/CWE-020/MissingRegexpAnchorGoodDomain.go

@@ -5,13 +5,16 @@ import (
 )
 
 func checkSubdomain(domain String) {
-	// GOOD: Checking the domain is `example.com` or a subdomain of `example.com`.
-	re := "(^|\\.)example\\.com$"
-
-	// Alternatively, checking strictly that the domain is `example.com`.
-	// re2 := "^example\\.com$"
-
+	// Checking strictly that the domain is `example.com`.
+	re := "^example\\.com$"
 	if matched, _ := regexp.MatchString(re, domain); matched {
 		// domain is good.
 	}
-}
+
+	// GOOD: Alternatively, check the domain is `example.com` or a subdomain of `example.com`.
+	re2 := "(^|\\.)example\\.com$"
+
+	if matched, _ := regexp.MatchString(re2, domain); matched {
+		// domain is good.
+	}
+}