We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
UriEncodingSanitizer
1 parent 7a7e879 commit 8aca630Copy full SHA for 8aca630
1 file changed
javascript/ql/lib/semmle/javascript/security/dataflow/RequestForgeryCustomizations.qll
@@ -106,9 +106,9 @@ module RequestForgery {
106
private import Xss as Xss
107
108
/**
109
- * A call to `encodeURI` or `encodeURIComponent`, viewed as a sanitizer for request forgery.
+ * A call to `encodeURIComponent`, viewed as a sanitizer for request forgery.
110
* These calls will escape "/" to "%2F", which is not a problem for request forgery.
111
- * The result from calling `encodeURI` or `encodeURIComponent` is not a valid URL, and only makes sense
+ * The result from calling `encodeURIComponent` is not a valid URL, and only makes sense
112
* as a part of a URL.
113
*/
114
class UriEncodingSanitizer extends Sanitizer instanceof Xss::Shared::UriEncodingSanitizer {
0 commit comments