Skip to content

Commit a148c7c

Browse files
committed
JS: Mention log-injection sink kind in docs
1 parent 4529d8b commit a148c7c

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

docs/codeql/codeql-language-guides/customizing-library-models-for-javascript.rst

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -471,6 +471,7 @@ Unlike sources, sinks tend to be highly query-specific, rarely affecting more th
471471
- **request-forgery**: A sink that controls the URL of a request, such as in a **fetch** call.
472472
- **url-redirection**: A sink that can be used to redirect the user to a malicious URL.
473473
- **unsafe-deserialization**: A deserialization sink that can lead to code execution or other unsafe behaviour, such as an unsafe YAML parser.
474+
- **log-injection**: A sink that can be used for log injection, such as in a **console.log** call.
474475

475476
Summary kinds
476477
~~~~~~~~~~~~~

0 commit comments

Comments
 (0)