mirror of
https://github.com/github/codeql.git
synced 2026-05-02 04:05:14 +02:00
JS: address doc review
This commit is contained in:
@@ -5,7 +5,7 @@
|
||||
|
||||
<overview>
|
||||
<p>
|
||||
Invoking a user-controlled method on certain objects can lead to invocation of unsafe functions,
|
||||
Calling a user-controlled method on certain objects can lead to invocation of unsafe functions,
|
||||
such as <code>eval</code> or the <code>Function</code> constructor. In particular, the global object
|
||||
contains the <code>eval</code> function, and any function object contains the <code>Function</code> constructor
|
||||
in its <code>constructor</code> property.
|
||||
|
||||
Reference in New Issue
Block a user