hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 04:36:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

update qhelp for xss-through-dom

Browse Source 
Co-Authored-By: Asger F <asgerf@github.com>
This commit is contained in:
Erik Krogh Kristensen
2020-04-20 11:50:46 +02:00
committed by GitHub
parent 1b80f46f30
commit 2d3e42e6d6
1 changed files with 1 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
javascript/ql/src/Security/CWE-079/XssThroughDom.qhelp
View File

@@ -5,8 +5,7 @@
<overview>
<p>
Writing text from a webpage to the same webpage without properly sanitizing the
input first, might allow for a cross-site scripting vulnerability.
Extracting text from a DOM node and interpreting it as HTML can lead to a cross-site scripting vulnerability.
</p>
<p>
A webpage with this vulnerability unescapes an otherwise sanitized text,