mirror of
https://github.com/github/codeql.git
synced 2026-05-28 18:11:25 +02:00
15 lines
410 B
Plaintext
15 lines
410 B
Plaintext
/**
|
|
* @name Incomplete URL substring sanitization
|
|
* @description Security checks on the substrings of an unparsed URL are often vulnerable to bypassing.
|
|
* @kind problem
|
|
* @problem.severity warning
|
|
* @security-severity 7.8
|
|
* @precision high
|
|
* @id js/incomplete-url-substring-sanitization
|
|
* @tags correctness
|
|
* security
|
|
* external/cwe/cwe-020
|
|
*/
|
|
|
|
import IncompleteUrlSubstringSanitization
|