Files
codeql/javascript/ql/src/Security/CWE-116/IncompleteMultiCharacterSanitization.ql
2022-08-17 16:03:49 +12:00

17 lines
510 B
Plaintext

/**
* @name Incomplete multi-character sanitization
* @description A sanitizer that removes a sequence of characters may reintroduce the dangerous sequence.
* @kind problem
* @problem.severity warning
* @security-severity 7.8
* @precision high
* @id js/incomplete-multi-character-sanitization
* @tags correctness
* security
* external/cwe/cwe-020
* external/cwe/cwe-080
* external/cwe/cwe-116
*/
import semmle.javascript.security.IncompleteMultiCharacterSanitizationQuery