Skip to content

Commit 41eb1ff

Browse files
author
Max Schaefer
committed
JavaScript: Drop precision of AmbiguousIdAttribute to 'high'.
1 parent 25f95d9 commit 41eb1ff

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

change-notes/1.20/analysis-javascript.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@
3333

3434
| **Query** | **Expected impact** | **Change** |
3535
|--------------------------------------------|------------------------------|------------------------------------------------------------------------------|
36-
| Ambiguous HTML id attribute | Fewer false-positive results | This rule now treats templates more conservatively. |
36+
| Ambiguous HTML id attribute | Fewer false-positive results | This rule now treats templates more conservatively. Its precision has been revised to 'high'. |
3737
| Client-side cross-site scripting | More true-positive results, fewer false-positive results. | This rule now recognizes WinJS functions that are vulnerable to HTML injection. It no longer flags certain safe uses of jQuery, and recognizes custom sanitizers. |
3838
| Hard-coded credentials | Fewer false-positive results | This rule no longer flag the empty string as a hardcoded username. |
3939
| Insecure randomness | More results | This rule now flags insecure uses of `crypto.pseudoRandomBytes`. |

javascript/ql/src/DOM/AmbiguousIdAttribute.ql

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@
88
* @id js/duplicate-html-id
99
* @tags maintainability
1010
* correctness
11-
* @precision very-high
11+
* @precision high
1212
*/
1313

1414
import javascript

0 commit comments

Comments
 (0)