search

mozilla / scanjs

[DEPRECATED] Static analysis tool for javascript code.
Other
428 stars 39 forks source link

[testing][false negative] - parseFromString rule #85

Closed pwnetrationguru closed 10 years ago

pwnetrationguru commented 10 years ago

parseFromString rule misses the following dangerous example:

doc = parser.parseFromString(someVar, "text/html");
pauljt commented 10 years ago

While not actually dangerous until you add this node to a document, I've added a rule for this in the newscanner since its probably worth highlighting in a review situation.