mirror of
https://github.com/github/codeql.git
synced 2026-04-25 16:55:19 +02:00
Update javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/UnsafeHtmlExpansion.js
Co-authored-by: Napalys Klicius <napalys@github.com>
This commit is contained in:
@@ -32,7 +32,7 @@
|
||||
function getExpanded() {
|
||||
return expanded;
|
||||
}
|
||||
html.replace(defaultPattern, getExpanded()); // MISSING: Alert - not tracking the expansion string
|
||||
html.replace(defaultPattern, getExpanded()); // $ MISSING: Alert - not tracking the expansion string
|
||||
html.replace(defaultPattern, something); // OK - possibly
|
||||
defaultPattern.match(something); // OK - possibly
|
||||
getPattern().match(something); // OK - possibly
|
||||
|
||||
Reference in New Issue
Block a user