mirror of
https://github.com/github/codeql.git
synced 2026-04-27 17:55:19 +02:00
JS: Drive-by change in LogInjection
This commit is contained in:
@@ -67,4 +67,11 @@ module LogInjection {
|
||||
class HtmlSanitizer extends Sanitizer {
|
||||
HtmlSanitizer() { this instanceof HtmlSanitizerCall }
|
||||
}
|
||||
|
||||
/**
|
||||
* A call to `JSON.stringify` or similar, seen as sanitizing log output.
|
||||
*/
|
||||
class JsonStringifySanitizer extends Sanitizer {
|
||||
JsonStringifySanitizer() { this = any(JsonStringifyCall c).getOutput() }
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user