mirror of
https://github.com/github/codeql.git
synced 2026-05-01 11:45:14 +02:00
Update javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomCustomizations.qll
Co-authored-by: Erik Krogh Kristensen <erik-krogh@github.com>
This commit is contained in:
@@ -236,7 +236,8 @@ module XssThroughDom {
|
||||
}
|
||||
|
||||
/**
|
||||
* A source for text from the DOM from a Selection object toString method call
|
||||
* A source for text from the DOM from calling `toString()` on a `Selection` object.
|
||||
* The `toString()` method returns the currently selected text in the DOM.
|
||||
* https://developer.mozilla.org/en-US/docs/Web/API/Selection
|
||||
*/
|
||||
class SelectionSource extends Source {
|
||||
|
||||
Reference in New Issue
Block a user