hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-30 23:02:56 +01:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Sauyon Lee <sauyon@github.com>
This commit is contained in:
Slavomir
2021-03-05 00:43:25 +01:00
committed by Chris Smowton
parent 49894341a8
commit 63d51205c9
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.qhelp
View File

@@ -4,7 +4,7 @@
<p>
In Go, the <code>html/template</code> package has a few special types
(<code>HTML</code>, <code>HTMLAttr</code>, <code>JS</code>, <code>JSStr</code>, <code>CSS</code>,
<code>Srcset</code>, <code>URL</code>)
<code>Srcset</code>, and <code>URL</code>)
that allow values to be rendered as-is in the template, avoiding the escaping that all the other strings go
through.
</p>
@@ -25,4 +25,4 @@
</p>
<sample src="HTMLTemplateEscapingPassthroughGood.go" />
</example>
</qhelp>
</qhelp>