mirror of
https://github.com/github/codeql.git
synced 2025-12-17 17:23:36 +01:00
5 lines
177 B
JavaScript
5 lines
177 B
JavaScript
function foo() {
|
|
let taint = window.location.hash.substring(1);
|
|
new RegExp(taint); // OK - we do not flag RegExp injection on the client side as the impact is too low
|
|
}
|