Files
codeql/javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/winjs.js
2025-02-28 13:29:30 +01:00

6 lines
216 B
JavaScript

function test(elt) {
var tainted = document.location.search.substring(1); // $ Source
WinJS.Utilities.setInnerHTMLUnsafe(elt, tainted); // $ Alert
WinJS.Utilities.setOuterHTMLUnsafe(elt, tainted); // $ Alert
}