mirror of
https://github.com/github/codeql.git
synced 2026-04-24 16:25:15 +02:00
Update ql/src/queries/security/cwe-079/ReflectedXSS.qhelp
Co-authored-by: Nick Rolfe <nickrolfe@github.com>
This commit is contained in:
@@ -37,7 +37,7 @@
|
||||
|
||||
<p>
|
||||
However, the following example is unsafe because user-controlled input is
|
||||
output without escaping, since it is marked as <code>html_safe</code>.
|
||||
emitted without escaping, since it is marked as <code>html_safe</code>.
|
||||
</p>
|
||||
<sample src="examples/reflective_xss.html.erb" />
|
||||
</example>
|
||||
|
||||
Reference in New Issue
Block a user