Files
codeql/javascript/change-notes/2021-08-05-tainted-url-suffix.md
Asger Feldthaus 6ef83f8015 JS: Change note
2021-08-10 08:55:03 +02:00

5 lines
177 B
Markdown

lgtm,codescanning
* The `js/xss` query now reports fewer false positives in cases where
`location.hash` flows to a jQuery `$()` call in a way that preserves
the `#` prefix.