Update javascript/ql/src/Security/CWE-116/IncompleteHtmlAttributeSanitization.qhelp

Co-Authored-By: Asger F <asgerf@github.com>
This commit is contained in:
Esben Sparre Andreasen
2020-04-27 09:09:26 +02:00
committed by GitHub
parent 58b5bd5cfd
commit 0a8e371b0e

View File

@@ -22,7 +22,7 @@
common dangerous characters. The lack of sanitization for
<code>&quot;</code> is problematic when an incompletely sanitized
value is used as an HTML attribute in a string that
<strong>later</strong> is parsed as HTML.
later is parsed as HTML.
</p>