hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #1066 from xiemaisi/fix-qhelp-backticks

Browse Source 
Fix qhelp backticks
This commit is contained in:
Jonas Jensen
2019-03-08 19:06:48 +01:00
committed by GitHub
parent 984fb3a010 a94f25e8fa
commit a90e4a7bdf
3 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/Security/CWE-116/DoubleEscaping.qhelp
View File

@@ -35,7 +35,7 @@ or garbled output.
<p>
Use a (well-tested) sanitization library if at all possible. These libraries are much more
likely to handle corner cases correctly than a custom implementation. For URI encoding,
you can use the standard `encodeURIComponent` and `decodeURIComponent` functions.
you can use the standard <code>encodeURIComponent</code> and <code>decodeURIComponent</code> functions.
</p>
<p>
Otherwise, make sure to always escape the escape character first, and unescape it last.