mirror of
https://github.com/github/codeql.git
synced 2025-12-18 18:10:39 +01:00
7 lines
304 B
HTML
7 lines
304 B
HTML
<a href="javascript:'some-attribute-string-1'"></a> <!-- OK -->
|
|
<a href="javascript:'some-attribute-string-2'; foo();"></a> <!-- OK -->
|
|
<a href="javascript:'some-attribute-string-3'; function foo(){ 'some-function-string'; };"></a> <!-- OK --> <!-- BAD -->
|
|
<script>
|
|
'some-script-string' // BAD
|
|
</script>
|