Skip to content

Commit 5436bb1

Browse files
committed
JS: Mention Xss.ql in change note
1 parent c91cdb5 commit 5436bb1

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

change-notes/1.26/analysis-javascript.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -58,5 +58,4 @@
5858

5959
## Changes to libraries
6060
* The predicate `TypeAnnotation.hasQualifiedName` now works in more cases when the imported library was not present during extraction.
61-
* The class `DomBasedXss::Configuration` has been deprecated, as it has been split into `DomBasedXss::HtmlInjectionConfiguration` and `DomBasedXss::JQueryHtmlOrSelectorInjectionConfiguration`. Unless specifically working with jQuery sinks, uses of that
62-
class should be replaced with `HtmlInjectionConfiguration`.
61+
* The class `DomBasedXss::Configuration` has been deprecated, as it has been split into `DomBasedXss::HtmlInjectionConfiguration` and `DomBasedXss::JQueryHtmlOrSelectorInjectionConfiguration`. Unless specifically working with jQuery sinks, subclasses should instead be based on `HtmlInjectionConfiguration`. To use both configurations in a query, see [Xss.ql](https://github.com/github/codeql/blob/main/javascript/ql/src/Security/CWE-079/Xss.ql) for an example.

0 commit comments

Comments
 (0)