mirror of
https://github.com/github/codeql.git
synced 2026-04-30 11:15:13 +02:00
Fix nonHtmlContentType.
This commit is contained in:
@@ -75,7 +75,7 @@ module ReflectedXss {
|
||||
pred.getStringValue().regexpMatch("^[^<].*")
|
||||
or
|
||||
// json data cannot begin with `<`
|
||||
pred = any(EncodingJson::MarshalFunction mf).getOutput().getExitNode(_)
|
||||
exists(EncodingJson::MarshalFunction mf | pred = mf.getOutput().getNode(mf.getACall()))
|
||||
)
|
||||
)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user