We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 49274d5 commit 9760965Copy full SHA for 9760965
1 file changed
javascript/ql/test/query-tests/Security/CWE-918/clientSide.js
@@ -11,7 +11,7 @@ export function MyComponent() {
11
const query = window.location.search.substring(1);
12
request('https://example.com/api/' + query + '/id'); // $ Alert[js/client-side-request-forgery]
13
request('https://example.com/api?q=' + query);
14
- request('https://example.com/api/' + window.location.search); // likely OK - but currently flagged anyway
+ request('https://example.com/api/' + window.location.search); // $ Alert[js/client-side-request-forgery] - likely OK - but currently flagged anyway
15
16
const fragment = window.location.hash.substring(1);
17
request('https://example.com/api/' + fragment + '/id'); // $ Alert[js/client-side-request-forgery]
0 commit comments