|
234 | 234 | <path d="M7.73333 6.48697C7.55556 6.48697 7.43111 6.57586 7.36 6.75363C6.96889 7.85586 6.20444 9.59808 5.06667 11.9803C4.99556 12.1225 4.99556 12.2647 5.06667 12.407C5.13778 12.5136 5.26222 12.5492 5.44 12.5136H8.74667L9.22667 13.1536V13.6336L8.16 16.087C8.12444 16.1581 8.10667 16.247 8.10667 16.3536C8.14222 16.4247 8.19556 16.4959 8.26667 16.567C8.33778 16.6025 8.40889 16.6203 8.48 16.6203C8.58667 16.6203 8.67556 16.5847 8.74667 16.5136L14.8267 10.967L15.3067 10.807H16.64C16.7467 10.807 16.8356 10.7714 16.9067 10.7003C17.0133 10.6292 17.0667 10.5403 17.0667 10.4336V6.91363C17.0667 6.80697 17.0133 6.71808 16.9067 6.64697C16.8356 6.5403 16.7467 6.48697 16.64 6.48697H7.73333Z" fill="none" id="thumbsdown-path"/> |
235 | 235 | </svg> |
236 | 236 | </div> |
237 | | - `; // CodeQL [SM04949] no user input is used |
| 237 | + `; // CodeQL [SM04949] no user input is used, therefore these need not be sanitized. |
238 | 238 |
|
239 | 239 | feedback.classList.add("feedback-div"); |
240 | 240 |
|
|
245 | 245 | const gitHubCopilotText = document.createElement("div"); |
246 | 246 | gitHubCopilotText.classList.add("github-copilot-text"); |
247 | 247 |
|
248 | | - gitHubCopilotText.innerHTML = `<span class="new-badge">${copilotStrings.NEW_BADGE}</span> |
249 | | - <span class="gitHubCopilotText">${copilotStrings.GITHUB_COPILOT_CHAT}</span>`; // CodeQL [SM03712] no user input is used |
| 248 | + gitHubCopilotText.innerHTML = `<span class="new-badge">${copilotStrings.NEW_BADGE}</span><span class="gitHubCopilotText">${copilotStrings.GITHUB_COPILOT_CHAT}</span>`; // CodeQL [SM03712] no user input is used, therefore these need not be sanitized. |
250 | 249 |
|
251 | 250 | return gitHubCopilotText; |
252 | 251 | } |
|
279 | 278 | ${starIconSvg} |
280 | 279 | </span> |
281 | 280 | ${listPrompt} |
282 | | - </a>`; // CodeQL [SM03712] no user input is used |
| 281 | + </a>`; // CodeQL [SM03712] no user input is used, therefore these need not be sanitized. |
283 | 282 |
|
284 | 283 | return suggestedPrompt; |
285 | 284 | } |
|
291 | 290 | <a href="#" class="walkthrough-content" tabindex="0" aria-label="${copilotStrings.LEARN_MORE_MESSAGE}"> |
292 | 291 | ${bookIconSvg} |
293 | 292 | <span id="walk-text">${copilotStrings.LEARN_MORE_MESSAGE}</span> |
294 | | - </a>`; // CodeQL [SM04949] no user input is used |
| 293 | + </a>`; // CodeQL [SM04949] no user input is used, therefore these need not be sanitized. |
295 | 294 | return walkthrough; |
296 | 295 | } |
297 | 296 |
|
|
396 | 395 | userNotLoggedIn: function () { |
397 | 396 | const notLoggedIn = document.createElement("div"); |
398 | 397 | notLoggedIn.classList.add("not-loggedIn"); |
399 | | - notLoggedIn.innerHTML = `<p id="greeting"></p> |
400 | | - <p>${copilotStrings.LOGIN_MESSAGE}</p> |
401 | | - <button id="loginButton" aria-label="${copilotStrings.LOGIN_BUTTON}">${copilotStrings.LOGIN_BUTTON}</button>`; // CodeQL [SM03712] no user input is used |
| 398 | + notLoggedIn.innerHTML = `<p id="greeting"></p><p>${copilotStrings.LOGIN_MESSAGE}</p><button id="loginButton" aria-label="${copilotStrings.LOGIN_BUTTON}">${copilotStrings.LOGIN_BUTTON}</button>`; // CodeQL [SM03712] no user input is used, therefore these need not be sanitized. |
402 | 399 |
|
403 | 400 | messageElement.appendChild(notLoggedIn); |
404 | 401 |
|
|
412 | 409 | } |
413 | 410 | const loggedInDiv = document.createElement("div"); |
414 | 411 | loggedInDiv.classList.add("loggedIn"); |
415 | | - loggedInDiv.innerHTML = `<p id="greeting">${copilotStrings.HI} <strong>${userName}!</strong> ${copilotStrings.WELCOME_MESSAGE}</p>`; // CodeQL [SM03712] no user input is used |
| 412 | + loggedInDiv.innerHTML = `<p id="greeting">${copilotStrings.HI} <strong>${userName}!</strong> ${copilotStrings.WELCOME_MESSAGE}</p>`; // CodeQL [SM03712] no user input is used, therefore these need not be sanitized. |
416 | 413 | messageElement.appendChild(loggedInDiv); |
417 | 414 |
|
418 | 415 | // Add GitHub Copilot link |
|
471 | 468 |
|
472 | 469 | const notAvailabel = document.createElement("div"); |
473 | 470 | notAvailabel.classList.add("not-available"); |
474 | | - notAvailabel.innerHTML = `<p id="notAvailableGreeting"></p> |
475 | | - <p>${copilotStrings.COPILOT_SUPPORT_MESSAGE}</p> |
476 | | - <p>${copilotStrings.DOCUMENTATION_LINK}<a></p>`; // CodeQL [SM04949] no user input is used |
| 471 | + notAvailabel.innerHTML = `<p id="notAvailableGreeting"></p><p>${copilotStrings.COPILOT_SUPPORT_MESSAGE}</p><p>${copilotStrings.DOCUMENTATION_LINK}<a></p>`; // CodeQL [SM04949] no user input is used, therefore these need not be sanitized. |
477 | 472 |
|
478 | 473 | messageElement.appendChild(notAvailabel); |
479 | 474 | } |
|
0 commit comments