JS: Add caution to XMLHttpRequest class

2026-04-29 10:45:15 +02:00 · 2019-08-02 23:04:37 +01:00
parent 02fba482fa
commit d3e796decc
1 changed files with 2 additions and 0 deletions
--- a/javascript/ql/src/semmle/javascript/frameworks/ClientRequests.qll
+++ b/javascript/ql/src/semmle/javascript/frameworks/ClientRequests.qll
@@ -376,6 +376,8 @@ module ClientRequest {

  /**
   * A model of a URL request made using the `XMLHttpRequest` browser class.
+   *
+   * Note: Prefer to use the `ClientRequest` class as it is more general.
   */
  class XMLHttpRequest extends ClientRequest::Range {
    XMLHttpRequest() {