hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-11 20:51:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

Apply suggestions from code review

Browse Source 
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
This commit is contained in:
Asger F
2025-11-27 13:18:11 +01:00
committed by GitHub
parent 818f4815dd
commit 7c0243fc6d
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/change-notes/2025-11-26-response-default-content-type.md
View File

@@ -1,5 +1,5 @@
---
category: minorAnalysis
---
* `new Response(x)` is not longer seen as a reflected XSS sink when no`content-type` header
* `new Response(x)` is not longer seen as a reflected XSS sink when no `content-type` header
is set, since the content type defaults to `text/plain`.

2
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/response-object.js
View File

@@ -1,6 +1,6 @@
const express = require('express');
// Note: We're using express for the taint source in order to to test 'Response'
// Note: We're using express for the taint source in order to test 'Response'
// in isolation from the more complicated http frameworks.
express().get('/foo', (req) => {