Files
codeql/javascript/ql/src/AngularJS/examples/InsecureUrlWhitelist.js
2018-08-02 17:53:23 +01:00

10 lines
312 B
JavaScript

angular.module('myApp', [])
.config(function($sceDelegateProvider) {
$sceDelegateProvider.resourceUrlWhitelist([
"*://example.org/*", // BAD
"https://**.example.com/*", // BAD
"https://example.**", // BAD
"https://example.*" // BAD
]);
});