We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent fb54a3b commit dd37c47Copy full SHA for dd37c47
javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomQuery.qll
@@ -12,8 +12,6 @@ private import semmle.javascript.security.dataflow.UnsafeJQueryPluginCustomizati
12
* A taint-tracking configuration for reasoning about XSS through the DOM.
13
*/
14
module XssThroughDomConfig implements DataFlow::ConfigSig {
15
- // NOTE: Gained FP in Lucifier due to spurious source but with more data flow (I think).
16
- // TODO: Seen unexplained FP in meteor, likely due to spurious flow into a callback coming from another call site
17
predicate isSource(DataFlow::Node source) { source instanceof Source }
18
19
predicate isSink(DataFlow::Node sink) { sink instanceof DomBasedXss::Sink }
0 commit comments