hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 05:05:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Fix FPs from TLDs without a domain name

Browse Source
This commit is contained in:
Asger F
2019-10-24 14:06:41 +01:00
parent 20fb7717d8
commit 17ad97812e
3 changed files with 27 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
javascript/ql/test/query-tests/Security/CWE-020/tst-UnanchoredUrlRegExp.js
View File

@@ -101,6 +101,7 @@
pkg.source.match(/<a:skin.*?\s+xmlns:a="http:\/\/ajax.org\/2005\/aml"/m)
// replace
path.replace(/engine.io/, "$&-client")
path.replace(/engine.io/, "$&-client");
/\.com|\.org/; // OK, has no domain name
});