mirror of
https://github.com/github/codeql.git
synced 2026-04-30 19:26:02 +02:00
Update java/ql/src/experimental/Security/CWE/CWE-352/JsonpInjectionLib.qll
Co-authored-by: Chris Smowton <smowton@github.com>
This commit is contained in:
@@ -130,7 +130,7 @@ class RemoteFlowConfig extends DataFlow2::Configuration {
|
||||
}
|
||||
}
|
||||
|
||||
/** A data flow configuration tracing flow from json data to splicing jsonp data. */
|
||||
/** A data flow configuration tracing flow from json data into the argument `json` of JSONP-like string `someFunctionName + "(" + json + ")"`. */
|
||||
class JsonDataFlowConfig extends DataFlow2::Configuration {
|
||||
JsonDataFlowConfig() { this = "JsonDataFlowConfig" }
|
||||
|
||||
|
||||
Reference in New Issue
Block a user