mirror of
https://github.com/github/codeql.git
synced 2026-04-30 03:05:15 +02:00
Update javascript/ql/src/Security/CWE-116/IncompleteHtmlAttributeSanitization.qhelp
Co-Authored-By: Asger F <asgerf@github.com>
This commit is contained in:
committed by
GitHub
parent
58b5bd5cfd
commit
0a8e371b0e
@@ -22,7 +22,7 @@
|
||||
common dangerous characters. The lack of sanitization for
|
||||
<code>"</code> is problematic when an incompletely sanitized
|
||||
value is used as an HTML attribute in a string that
|
||||
<strong>later</strong> is parsed as HTML.
|
||||
later is parsed as HTML.
|
||||
|
||||
</p>
|
||||
|
||||
|
||||
Reference in New Issue
Block a user