use new source in client-side-url-redirect test

erik-krogh · erik-krogh · commit f4f96ce04dc6 · 2020-09-14T16:50:47.000+02:00
diff --git a/javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/tst13.js b/javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/tst13.js
@@ -43,6 +43,10 @@ function foo() {
     var el = document.createElement("script");
     el.src = payload;
     document.body.appendChild(el); // NOT OK
-
-    importScripts(payload); // NOT OK
 }
+
+(function () {
+    self.onmessage = function (e) {
+        importScripts(e); // NOT OK
+    }
+})();
