Skip to content

JS: Add startsWith-sanitizer to redirect queries#3892

Merged
semmle-qlci merged 3 commits into
github:masterfrom
asger-semmle:js/redirect-starts-with-sanitizer
Jul 6, 2020
Merged

JS: Add startsWith-sanitizer to redirect queries#3892
semmle-qlci merged 3 commits into
github:masterfrom
asger-semmle:js/redirect-starts-with-sanitizer

Conversation

@asgerf
Copy link
Copy Markdown
Contributor

@asgerf asgerf commented Jul 3, 2020

Fixes a FP I spotted in the evaluation of #3835, which was due to a missing sanitizer, not because of the PR.

@asgerf asgerf added JS Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish labels Jul 3, 2020
@asgerf asgerf requested a review from a team as a code owner July 3, 2020 13:51
Copy link
Copy Markdown
Contributor

@erik-krogh erik-krogh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

Just missing an autoformat.

Comment thread javascript/ql/src/semmle/javascript/security/dataflow/UrlConcatenation.qll Outdated
@semmle-qlci semmle-qlci merged commit fe0c5a9 into github:master Jul 6, 2020
@erik-krogh
Copy link
Copy Markdown
Contributor

A little late, but here is an evaluation that looks ok.

@erik-krogh erik-krogh removed the Awaiting evaluation Do not merge yet, this PR is waiting for an evaluation to finish label Jul 7, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants