Files
codeql/javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/winjs.js
2020-10-16 17:32:36 +01:00

6 lines
182 B
JavaScript

function test(elt) {
var tainted = document.location.search.substring(1);
WinJS.Utilities.setInnerHTMLUnsafe(elt, tainted);
WinJS.Utilities.setOuterHTMLUnsafe(elt, tainted);
}