We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent aba8be2 commit 8dac00aCopy full SHA for 8dac00a
javascript/ql/lib/semmle/javascript/security/dataflow/DomBasedXssCustomizations.qll
@@ -266,7 +266,7 @@ module DomBasedXss {
266
.getMember("setProperty")
267
.getACall() and
268
this = setProperty.getParameter(2).asSink() and
269
- setProperty.getParameter(1).asSink().asExpr().(StringLiteral).getValue() = "innerHTML"
+ setProperty.getArgument(1).getStringValue() = "innerHTML"
270
)
271
}
272
0 commit comments