File tree Expand file tree Collapse file tree 2 files changed +2
-2
lines changed
javascript/ql/src/semmle/javascript/security/dataflow Expand file tree Collapse file tree 2 files changed +2
-2
lines changed Original file line number Diff line number Diff line change @@ -153,7 +153,7 @@ module ClientSideUrlRedirect {
153
153
class AttributeWriteUrlSink extends ScriptUrlSink , DataFlow:: ValueNode {
154
154
AttributeWriteUrlSink ( ) {
155
155
exists ( DomPropWriteNode pw |
156
- pw .interpretsValueAsJavaScript ( ) and
156
+ pw .interpretsValueAsJavaScriptUrl ( ) and
157
157
this = DataFlow:: valueNode ( pw .getRhs ( ) )
158
158
)
159
159
}
Original file line number Diff line number Diff line change @@ -121,7 +121,7 @@ class DomPropWriteNode extends Assignment {
121
121
/**
122
122
* Holds if the assigned value is interpreted as JavaScript via javascript: protocol.
123
123
*/
124
- predicate interpretsValueAsJavaScript ( ) {
124
+ predicate interpretsValueAsJavaScriptUrl ( ) {
125
125
lhs .getPropertyName ( ) = "action" or
126
126
lhs .getPropertyName ( ) = "formaction" or
127
127
lhs .getPropertyName ( ) = "href" or
You can’t perform that action at this time.
0 commit comments