JS: Block flow into window.location

2026-05-05 05:35:13 +02:00 · 2023-10-06 15:00:08 +02:00
parent 75c915b2a3
commit b5ad36686e
3 changed files with 14 additions and 6 deletions
--- a/javascript/ql/test/library-tests/InterProceduralFlow/global2.js
+++ b/javascript/ql/test/library-tests/InterProceduralFlow/global2.js
@@ -1,2 +1,2 @@
 let remote_sink = source1;
-let other_remote_sink = document.location;
+let other_remote_sink = document.someProp;