hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 03:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Update javascript/ql/src/experimental/Security/CWE-020/PostMessageNoOriginCheck.qhelp

Browse Source 
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
This commit is contained in:
Alessio Della Libera
2020-06-18 19:44:38 +02:00
committed by GitHub
parent ffc9a449ab
commit c0271b1627
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/src/experimental/Security/CWE-020/PostMessageNoOriginCheck.qhelp
View File

@@ -25,7 +25,7 @@ Always verify the sender's identity of incoming messages.
<sample src="examples/postMessageWithInsufficientCheck.js" />
<p> In the third example, the `MessageEvent.origin` is properly checked against a trusted origin. </p>
<sample src="examples/postMessageWithInsufficientCheck.js" />
<sample src="examples/postMessageWithOriginCheck.js" />
</example>