hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 01:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2216 from asger-semmle/xss-encodeURIComponent

Browse Source 
Approved by max-schaefer
This commit is contained in:
semmle-qlci
2019-10-30 11:49:31 +00:00
committed by GitHub
parent ecd4c08cb4 94dd9a1c04
commit a778efe71e
2 changed files with 22 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/test/query-tests/Security/CWE-079/encodeuri.js Normal file
View File

@@ -0,0 +1,4 @@
function test() {
let loc = window.location.href;
$('<a href="' + encodeURIComponent(loc) + '">click</a>'); // OK
}