mirror of
https://github.com/github/codeql.git
synced 2026-04-25 16:55:19 +02:00
JS: Temporarily accept a spurious alert
This was due to a bug that will be fixed in the following commit
This commit is contained in:
@@ -25,7 +25,7 @@ app.get('/some/path', function(req, res) {
|
||||
var target = req.param("target");
|
||||
if (isLocalURL(target))
|
||||
// OK - request parameter is sanitized before incorporating it into the redirect
|
||||
res.redirect(target);
|
||||
res.redirect(target); // $ SPURIOUS: Alert
|
||||
else
|
||||
res.redirect(target); // $ Alert - sanitization doesn't apply here
|
||||
res.redirect(target); // $ Alert - sanitization doesn't apply here
|
||||
|
||||
Reference in New Issue
Block a user