mirror of
https://github.com/github/codeql.git
synced 2026-04-29 10:45:15 +02:00
Usually this is ignored for suspicion that it could be taken for a protocol specifier, but on balance the context `(something) + "/" + tainted()` is more likely to be taken for a user-controlled location within a host the user does not control.