hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Fixup qhelp

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2024-07-04 14:01:30 +02:00
parent 808af28618
commit 8d1113cdaf
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
python/ql/src/experimental/Security/CWE-094/Js2Py.qhelp
View File

@@ -17,8 +17,8 @@
<example>
<p>In the example below, the Javascript code being evaluated is controlled by the user and
hence leads to arbitrary code execution.</p>
<sample src="Js2PyBad.py" />
<p>This can be fixed by disabling imports before evaluating the user passed buffer.
<sample src="Js2PyGood.py" />
<sample src="Js2pyBad.py" />
<p>This can be fixed by disabling imports before evaluating the user passed buffer.</p>
<sample src="Js2pyGood.py" />
</example>
</qhelp>
</qhelp>