mirror of
https://github.com/github/codeql.git
synced 2026-04-30 11:15:13 +02:00
add $.jGrowl as an XSS sink
This commit is contained in:
@@ -99,6 +99,8 @@ module DomBasedXss {
|
||||
this = any(Typeahead::TypeaheadSuggestionFunction f).getAReturn()
|
||||
or
|
||||
this = any(Handlebars::SafeString s).getAnArgument()
|
||||
or
|
||||
this = any(JQuery::MethodCall call | call.getMethodName() = "jGrowl").getArgument(0)
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user