Files
codeql/javascript/ql/test/query-tests/Security/CWE-776/closure.js
2018-08-02 17:53:23 +01:00

6 lines
145 B
JavaScript

function test() {
var src = document.location.search;
// NOT OK: Closure expands internal entities by default
goog.dom.xml.loadXml(src);
}