JS: Add reminder to update ClientSideUrlRedirect

This commit is contained in:
Asger F
2024-09-10 15:22:11 +02:00
parent da696817a3
commit 15fc450a9e

View File

@@ -35,7 +35,7 @@ module ClientSideUrlRedirect {
* hence are only partially user-controlled.
*/
abstract class DocumentUrl extends DataFlow::FlowLabel {
DocumentUrl() { this = "document.url" }
DocumentUrl() { this = "document.url" } // TODO: replace with TaintedUrlSuffix
}
/** A source of remote user input, considered as a flow source for unvalidated URL redirects. */