mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
16 lines
555 B
JavaScript
16 lines
555 B
JavaScript
function test() {
|
|
var src = document.location.search; // $ Source=search
|
|
|
|
if (window.DOMParser) {
|
|
// OK - DOMParser only expands internal general entities
|
|
new DOMParser().parseFromString(src, 'text/xml');
|
|
} else {
|
|
var parser;
|
|
try {
|
|
(new ActiveXObject("Microsoft.XMLDOM")).loadXML(src); // $ Alert=search // $ Alert - XMLDOM expands external entities by default
|
|
} catch (e) {
|
|
(new ActiveXObject("Msxml2.DOMDocument")).loadXML(src); // $ Alert=search // $ Alert - MSXML expands external entities by default
|
|
}
|
|
}
|
|
}
|