File tree Expand file tree Collapse file tree 3 files changed +8
-5
lines changed
javascript/ql/lib/semmle/javascript/security/dataflow Expand file tree Collapse file tree 3 files changed +8
-5
lines changed Original file line number Diff line number Diff line change @@ -116,10 +116,13 @@ module DomBasedXss {
116
116
/**
117
117
* A write to a URL which may execute JavaScript code.
118
118
*/
119
- class WriteURLSink extends Sink instanceof ClientSideUrlRedirect:: Sink {
120
- WriteURLSink ( ) { super .isXssSink ( ) }
119
+ class WriteUrlSink extends Sink instanceof ClientSideUrlRedirect:: Sink {
120
+ WriteUrlSink ( ) { super .isXssSink ( ) }
121
121
}
122
122
123
+ /** DEPRECATED: Alias for `WriteUrlSink`. */
124
+ deprecated class WriteURLSink = WriteUrlSink ;
125
+
123
126
/**
124
127
* An expression whose value is interpreted as HTML or CSS
125
128
* and may be inserted into the DOM.
Original file line number Diff line number Diff line change @@ -25,7 +25,7 @@ deprecated class JQueryHtmlOrSelectorInjectionConfiguration = Configuration;
25
25
*/
26
26
class HTMLSink extends DataFlow:: Node instanceof Sink {
27
27
HTMLSink ( ) {
28
- not this instanceof WriteURLSink and
28
+ not this instanceof WriteUrlSink and
29
29
not this instanceof JQueryHtmlOrSelectorSink
30
30
}
31
31
}
@@ -61,7 +61,7 @@ class Configuration extends TaintTracking::Configuration {
61
61
sink instanceof JQueryHtmlOrSelectorSink and
62
62
label = [ DataFlow:: FlowLabel:: taint ( ) , prefixLabel ( ) ]
63
63
or
64
- sink instanceof WriteURLSink and
64
+ sink instanceof WriteUrlSink and
65
65
label = prefixLabel ( )
66
66
}
67
67
Original file line number Diff line number Diff line change @@ -46,7 +46,7 @@ class Configuration extends TaintTracking::Configuration {
46
46
super .hasFlowPath ( src , sink ) and
47
47
// filtering away readings of `src` that end in a URL sink.
48
48
not (
49
- sink .getNode ( ) instanceof DomBasedXss:: WriteURLSink and
49
+ sink .getNode ( ) instanceof DomBasedXss:: WriteUrlSink and
50
50
src .getNode ( ) .( DomPropertySource ) .getPropertyName ( ) = "src"
51
51
)
52
52
}
You can’t perform that action at this time.
0 commit comments