mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
add comment about filtering away jQuery from the source
This commit is contained in:
@@ -25,6 +25,7 @@ module UnsafeHtmlConstruction {
|
||||
class ExternalInputSource extends Source, DataFlow::ParameterNode {
|
||||
ExternalInputSource() {
|
||||
this = Exports::getALibraryInputParameter() and
|
||||
// An AMD-style module sometimes loads the jQuery library in a way which looks like library input.
|
||||
not this = JQuery::dollarSource()
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user