We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 814004e commit ff3f85bCopy full SHA for ff3f85b
java/ql/src/semmle/code/java/security/XSS.qll
@@ -93,8 +93,8 @@ private class DefaultXssSink extends XssSink {
93
/** A default sanitizer that considers numeric and boolean typed data safe for writing to output. */
94
private class DefaultXSSSanitizer extends XssSanitizer {
95
DefaultXSSSanitizer() {
96
- this.getType() instanceof NumericType or this.getType() instanceof BooleanType
97
- or
+ this.getType() instanceof NumericType or
+ this.getType() instanceof BooleanType or
98
// Match `org.springframework.web.util.HtmlUtils.htmlEscape` and possibly other methods like it.
99
this.asExpr().(MethodAccess).getMethod().getName().regexpMatch("(?i)html_?escape.*")
100
}
0 commit comments