JS: Drive-by change in LogInjection

This commit is contained in:
Asger Feldthaus
2021-04-15 13:58:43 +01:00
parent ad12f383d9
commit 822d4525af

View File

@@ -67,4 +67,11 @@ module LogInjection {
class HtmlSanitizer extends Sanitizer {
HtmlSanitizer() { this instanceof HtmlSanitizerCall }
}
/**
* A call to `JSON.stringify` or similar, seen as sanitizing log output.
*/
class JsonStringifySanitizer extends Sanitizer {
JsonStringifySanitizer() { this = any(JsonStringifyCall c).getOutput() }
}
}