Merge pull request #1645 from Semmle/js/fix-missing-regexp-anchor-qhelp

semmle-qlci · web-flow · commit 5125a4134587 · 2019-07-29T16:46:36.000+01:00
Approved by asger-semmle
diff --git a/javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.qhelp b/javascript/ql/src/Security/CWE-020/MissingRegExpAnchor.qhelp
@@ -62,9 +62,9 @@
 			A related mistake is to write a regular expression with
 			multiple alternatives, but to only include an anchor for one of the
 			alternatives. As an example, the regular expression
-			<code>/^www\\.example\\.com|beta\\.example\\.com/</code> will match the host
+			<code>/^www\.example\.com|beta\.example\.com/</code> will match the host
 			<code>evil.beta.example.com</code> because the regular expression is parsed
-			as <code>/(^www\\.example\\.com)|(beta\\.example\\.com)/</code>
+			as <code>/(^www\.example\.com)|(beta\.example\.com)/</code>
 
 		</p>
 	</example>
