hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 09:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #2330 from erik-krogh/exceptionXss

Browse Source 
JS: Added query for detecting XSS that happens through an exception
This commit is contained in:
Max Schaefer
2019-11-29 09:04:45 +00:00
committed by GitHub
parent 73e08eba43 9351cd44e4
commit f958916c76
19 changed files with 598 additions and 57 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
change-notes/1.24/analysis-javascript.md
View File

@@ -11,9 +11,9 @@
## New queries
| **Query** | **Tags** | **Purpose** |
|---------------------------------------------------------------------------|-------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| **Query** | **Tags** | **Purpose** |
|---------------------------------------------------------------------------------|-------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
| Cross-site scripting through exception (`js/xss-through-exception`) | security, external/cwe/cwe-079, external/cwe/cwe-116 | Highlights potential XSS vulnerabilities where an exception is written to the DOM. Results are not shown on LGTM by default. |
## Changes to existing queries