We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent dd37c47 commit a8f93caCopy full SHA for a8f93ca
javascript/ql/lib/semmle/javascript/security/dataflow/DomBasedXssQuery.qll
@@ -105,7 +105,6 @@ module DomBasedXssConfig implements DataFlow::StateConfigSig {
105
state1.isTaintedUrlSuffix() and
106
state2.isTaintedPrefix()
107
or
108
- // FIXME: this fails to work in the test case at jquery.js:37
109
exists(DataFlow::FunctionNode callback, DataFlow::Node arg |
110
any(JQuery::MethodCall c).interpretsArgumentAsHtml(arg) and
111
callback = arg.getABoundFunctionValue(_) and
0 commit comments