Fix nonHtmlContentType.

This commit is contained in:
Max Schaefer
2020-05-27 16:52:11 +01:00
parent f0e1147551
commit e7095baa39

View File

@@ -75,7 +75,7 @@ module ReflectedXss {
pred.getStringValue().regexpMatch("^[^<].*")
or
// json data cannot begin with `<`
pred = any(EncodingJson::MarshalFunction mf).getOutput().getExitNode(_)
exists(EncodingJson::MarshalFunction mf | pred = mf.getOutput().getNode(mf.getACall()))
)
)
}