Merge pull request #12802 from erik-krogh/history-xss

JS: add browser history as XSS sink

javascript/ql/lib/semmle/javascript/security/dataflow/ClientSideUrlRedirectCustomizations.qll

@@ -222,6 +222,8 @@ module ClientSideUrlRedirect {
     HistoryWriteUrlSink() {
       this = History::getBrowserHistory().getMember(["push", "replace"]).getACall().getArgument(0)
     }
+
+    override predicate isXssSink() { any() }
   }
 
   /**