hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-01-08 12:10:22 +01:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Accept CDATA in E4X content.

Browse Source
This commit is contained in:
Max Schaefer
2019-02-04 09:48:06 +00:00
parent 81b86d9a0f
commit d6deefed86
3 changed files with 657 additions and 639 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
javascript/extractor/src/com/semmle/jcorn/CustomParser.java
View File

@@ -564,7 +564,7 @@ public class CustomParser extends FlowParser {
@Override
protected Either<Integer, Token> jsx_readChunk(StringBuilder out, int chunkStart, int ch) {
// skip XML comments and processing instructions (which are allowed in E4X, but not in JSX)
// skip XML comments, processing instructions and CDATA (which are allowed in E4X, but not in JSX)
if (this.options.e4x() && ch == '<') {
if (inputSubstring(this.pos+1, this.pos+4).equals("!--")) {
out.append(inputSubstring(chunkStart, this.pos));
@@ -576,6 +576,13 @@ public class CustomParser extends FlowParser {
this.pos += 2;
jsx_readUntil("?>");
return Either.left(this.pos);
} else if (inputSubstring(this.pos+1, this.pos+9).equals("![CDATA[")) {
out.append(inputSubstring(chunkStart, this.pos));
this.pos += 9;
int cdataStart = this.pos;
jsx_readUntil("]]>");
out.append(inputSubstring(cdataStart, this.pos-3));
return Either.left(this.pos);
}
}