Files
codeql/javascript/ql/test/query-tests/Security/CWE-201/PostMessageStar2.js
2025-02-28 13:29:30 +01:00

14 lines
364 B
JavaScript

window.parent.postMessage(password, '*'); // $ Alert
(function() {
var data = {};
data.foo = password; // $ Source
data.bar = "unproblematic";
window.parent.postMessage(data, '*'); // $ Alert
window.parent.postMessage(data.foo, '*'); // $ Alert
window.parent.postMessage(data.bar, '*');
})();
window.parent.postMessage(authKey, '*'); // $ Alert