mirror of
https://github.com/github/codeql.git
synced 2026-04-27 01:35:13 +02:00
Update javascript/ql/src/semmle/javascript/frameworks/Markdown.qll
Co-authored-by: Asger F <asgerf@github.com>
This commit is contained in:
committed by
GitHub
parent
62dfd1fa7d
commit
357e1c0802
@@ -139,7 +139,7 @@ private module MarkdownIt {
|
||||
exists(API::CallNode call |
|
||||
call = markdownIt().getMember(["use", "set", "configure", "enable", "disable"]).getACall() and
|
||||
result = call.getReturn() and
|
||||
not call.getParameter(0).getARhs().getALocalSource() =
|
||||
not call.getParameter(0).getAValueReachingRhs() =
|
||||
DataFlow::moduleImport("markdown-it-sanitizer")
|
||||
)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user