hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-11 01:39:28 +02:00
Code Issues Packages Projects Releases Wiki Activity

use HtmlConcatenationLeaf

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2020-05-26 18:33:29 +02:00
parent 9b047f6f03
commit 63a14d1b96
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/semmle/javascript/security/dataflow/IncompleteHtmlAttributeSanitizationCustomizations.qll
View File

@@ -54,7 +54,7 @@ module IncompleteHtmlAttributeSanitization {
lhs = this.getPreviousLeaf().getStringValue().regexpCapture("(?s)(.*)=\"[^\"]*", 1) and
(
this.getNextLeaf().getStringValue().regexpMatch(".*\".*") or
this.getRoot().getConstantStringParts().regexpMatch("(?s).*</.*")
this instanceof StringOps::HtmlConcatenationLeaf
)
}