File tree Expand file tree Collapse file tree
javascript/ql/src/semmle/javascript Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -9,9 +9,7 @@ module D3 {
99 private class D3GlobalEntry extends API:: EntryPoint {
1010 D3GlobalEntry ( ) { this = "D3GlobalEntry" }
1111
12- override DataFlow:: SourceNode getAUse ( ) {
13- result = DataFlow:: globalVarRef ( "d3" )
14- }
12+ override DataFlow:: SourceNode getAUse ( ) { result = DataFlow:: globalVarRef ( "d3" ) }
1513
1614 override DataFlow:: Node getARhs ( ) { none ( ) }
1715 }
Original file line number Diff line number Diff line change @@ -70,7 +70,7 @@ module XssThroughDom {
7070 exists ( DataFlow:: MethodCallNode call , string methodName |
7171 this = call and
7272 call = D3:: d3Selection ( ) .getMember ( methodName ) .getACall ( )
73- |
73+ |
7474 methodName = "attr" and
7575 call .getNumArgument ( ) = 1 and
7676 call .getArgument ( 0 ) .mayHaveStringValue ( unsafeAttributeName ( ) )
You can’t perform that action at this time.
0 commit comments