hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

use the DOTALL flag

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2020-05-26 14:41:16 +02:00
parent fd561d1ce2
commit 9b047f6f03
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/src/semmle/javascript/security/dataflow/IncompleteHtmlAttributeSanitizationCustomizations.qll
View File

@@ -51,10 +51,10 @@ module IncompleteHtmlAttributeSanitization {
string lhs;
HtmlAttributeConcatenation() {
lhs = this.getPreviousLeaf().getStringValue().regexpCapture("((?:[\n\r]|.)*)=\"[^\"]*", 1) and
lhs = this.getPreviousLeaf().getStringValue().regexpCapture("(?s)(.*)=\"[^\"]*", 1) and
(
this.getNextLeaf().getStringValue().regexpMatch(".*\".*") or
this.getRoot().getConstantStringParts().regexpMatch("(?:[\n\r]|.)*</.*")
this.getRoot().getConstantStringParts().regexpMatch("(?s).*</.*")
)
}