hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 01:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Accept a double-flagged line

Browse Source 
This is flagged by two queries but for two separate issues. Seems valid to flag it twice.
This commit is contained in:
Asger F
2025-02-12 14:16:07 +01:00
parent 68fae9ded8
commit e5bee19b19
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/test/query-tests/Security/CWE-116/IncompleteSanitization/tst.js
View File

@@ -338,7 +338,7 @@ function typicalBadHtmlSanitizers(s) {
}
function bad18NewRegExp(p) {
return p.replace(new RegExp("\\.\\./"), "");
return p.replace(new RegExp("\\.\\./"), ""); // $ Alert[js/incomplete-sanitization] Alert[js/incomplete-multi-character-sanitization] -- both lacking global flag, and multi-char replacement problem
}
function bad4NewRegExpG(s) {