Skip to content

Commit

Permalink
fix query 🐛 (#170)
Browse files Browse the repository at this point in the history
  • Loading branch information
shivasurya authored Oct 21, 2024
1 parent 656e406 commit b3b236d
Showing 1 changed file with 5 additions and 5 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,7 @@ import { Card } from '@astrojs/starlight/components';
the JavaScript code is being used. Code-PathFinder helps you find the code path where the JavaScript is being executed and the data being passed in is not properly sanitized and validated.

```sql
FROM MethodInvocation AS mi
FROM method_invocation AS mi
WHERE
mi.GetName() = "loadUrl" || mi.GetName() = "loadData"
|| mi.GetName() = "loadDataWithBaseURL"
Expand All @@ -65,7 +65,7 @@ import { Card } from '@astrojs/starlight/components';
`setAllowContentAccess` method is being called.

```sql
FROM MethodInvocation AS mi
FROM method_invocation AS mi
WHERE
mi.GetName() = "setAllowContentAccess"
SELECT mi, mi.GetEnclosingMethod()
Expand All @@ -78,7 +78,7 @@ import { Card } from '@astrojs/starlight/components';
`setAllowFileAccess` and `setAllowFileAccessFromFileURLs` methods are being called.

```sql
FROM MethodInvocation AS mi
FROM method_invocation AS mi
WHERE
mi.GetName() = "setAllowFileAccess"
|| mi.GetName() = "setAllowFileAccessFromFileURLs"
Expand All @@ -92,7 +92,7 @@ import { Card } from '@astrojs/starlight/components';
Using Code-PathFinder, you can find the code path where the `setAllowUniversalAccessFromFileURLs` method is being called.

```sql
FROM MethodInvocation AS mi
FROM method_invocation AS mi
WHERE
mi.GetName() = "setAllowUniversalAccessFromFileURLs"
SELECT mi, mi.GetEnclosingMethod()
Expand All @@ -104,7 +104,7 @@ import { Card } from '@astrojs/starlight/components';
and enable or disable JavaScript's ability to open popups. Using Code-PathFinder, you can find the code path where the `setJavaScriptEnabled` method is being called.

```sql
FROM MethodInvocation AS mi
FROM method_invocation AS mi
WHERE
(mi.GetName() = "setJavaScriptEnabled" && "true" in mi.getArgumentName())
|| (mi.GetName() = "setJavaScriptCanOpenWindowsAutomatically" && "true" in mi.getArgumentName())
Expand Down

0 comments on commit b3b236d

Please sign in to comment.