hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #19200 from asgerf/js/web-response

Browse Source 
JS: Add sinks for calls to 'new Response()'
This commit is contained in:
Asger F
2025-04-10 14:41:32 +02:00
committed by GitHub
parent 7f7fca9e27 da7d6d3346
commit eac14b9837
8 changed files with 208 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/src/change-notes/2025-04-09-web-response.md Normal file
View File

@@ -0,0 +1,4 @@
---
category: minorAnalysis
---
* Data passed to the [Response](https://developer.mozilla.org/en-US/docs/Web/API/Response) constructor is now treated as a sink for `js/reflected-xss`.