mirror of
https://github.com/github/codeql.git
synced 2026-08-03 00:43:00 +02:00
21 lines
440 B
Go
21 lines
440 B
Go
package main
|
|
|
|
import (
|
|
"net/url"
|
|
"strings"
|
|
)
|
|
|
|
func test(urlstr string) {
|
|
u, _ := url.Parse(urlstr)
|
|
sch := u.Scheme
|
|
if sch == "javascript" || u.Scheme == "data" || sch == "vbscript" { // OK
|
|
return
|
|
}
|
|
|
|
urlstr = strings.NewReplacer("\n", "", "\r", "", "\t", "", "\u0000", "").Replace(urlstr)
|
|
urlstr = strings.ToLower(urlstr)
|
|
if strings.HasPrefix(urlstr, "javascript:") || strings.HasPrefix(urlstr, "data:") { // NOT OK
|
|
return
|
|
}
|
|
}
|