From 63d51205c99e1710082fa90ec96e28088b0b5bd7 Mon Sep 17 00:00:00 2001 From: Slavomir Date: Fri, 5 Mar 2021 00:43:25 +0100 Subject: [PATCH] Apply suggestions from code review Co-authored-by: Sauyon Lee --- .../experimental/CWE-79/HTMLTemplateEscapingPassthrough.qhelp | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.qhelp b/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.qhelp index 57c04ca9121..ec406bdc198 100755 --- a/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.qhelp +++ b/ql/src/experimental/CWE-79/HTMLTemplateEscapingPassthrough.qhelp @@ -4,7 +4,7 @@

In Go, the html/template package has a few special types (HTML, HTMLAttr, JS, JSStr, CSS, - Srcset, URL) + Srcset, and URL) that allow values to be rendered as-is in the template, avoiding the escaping that all the other strings go through.

@@ -25,4 +25,4 @@

- \ No newline at end of file +