mirror of
https://github.com/github/codeql.git
synced 2025-12-20 18:56:32 +01:00
Update javascript/ql/src/experimental/Security/CWE-020/PostMessageNoOriginCheck.ql
Co-authored-by: Esben Sparre Andreasen <esbena@github.com>
This commit is contained in:
committed by
GitHub
parent
c0271b1627
commit
eba64dba7c
@@ -61,4 +61,4 @@ class PostMessageEvent extends DataFlow::SourceNode {
|
||||
|
||||
from PostMessageEvent event
|
||||
where not event.hasOriginChecked() or event.hasOriginInsufficientlyChecked()
|
||||
select event, "Missing or unsafe origin verification"
|
||||
select event, "Missing or unsafe origin verification."
|
||||
|
||||
Reference in New Issue
Block a user