add .js and .py files to js/insecure-download

2026-04-30 11:15:13 +02:00 · 2020-06-15 12:48:50 +02:00
parent 1751fb6c47
commit 4d1920eec1
1 changed files with 1 additions and 1 deletions
--- a/javascript/ql/src/semmle/javascript/security/dataflow/InsecureDownloadCustomizations.qll
+++ b/javascript/ql/src/semmle/javascript/security/dataflow/InsecureDownloadCustomizations.qll
@@ -53,7 +53,7 @@ module InsecureDownload {
  string unsafeExtension() {
    result =
      ["exe", "dmg", "pkg", "tar.gz", "zip", "sh", "bat", "cmd", "app", "apk", "msi", "dmg",
-          "tar.gz", "zip"]
+          "tar.gz", "zip", "js", "py"]
  }

  /**