File tree Expand file tree Collapse file tree 3 files changed +90
-92
lines changed
ui5-webcomponents/test/queries/xss-input-dangerouslySetInnerHTML
ui5/lib/advanced_security/javascript/frameworks/ui5 Expand file tree Collapse file tree 3 files changed +90
-92
lines changed Original file line number Diff line number Diff line change 22 * @name DOM text reinterpreted as HTML
33 * @description Reinterpreting text from the DOM as HTML
44 * can lead to a cross-site scripting vulnerability.
5- * @ kind path-problem
5+ * @kind path-problem
66 * @problem.severity warning
77 * @security-severity 6.1
88 * @precision high
1212 * external/cwe/cwe-116
1313 */
1414
15- //an exact copy of - https://github.com/github/codeql/blob/main/javascript/ql/src/Security/CWE-079/XssThroughDom.ql
16- //at commit sha: 7b6720c
17- //included for testing purposes only
18- //tests the use of customizations to filter results via sanitizer
15+ /*
16+ * This file is an exact copy of - https://github.com/github/codeql/blob/main/javascript/ql/src/Security/CWE-079/XssThroughDom.ql
17+ * replicated at commit sha: 7b6720c , included for testing purposes only.
18+ * Its purpose is to test the use of customizations to filter results via the sanitizers.
19+ */
20+
1921import javascript
2022import semmle.javascript.security.dataflow.XssThroughDomQuery
2123import XssThroughDomFlow:: PathGraph
You can’t perform that action at this time.
0 commit comments