Update xss-serialize-javascript.yaml

patch-1
Prince Chaddha 2023-06-28 10:39:08 +05:30 committed by GitHub
parent d4f2312cc5
commit 5a98340f2b
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions

View File

@ -14,13 +14,13 @@ file:
matchers:
- type: regex
regex:
- "\\$S = require\\('serialize-javascript'\\)"
- "\\$S\\(..., {unsafe: true}\\)"
- "require\\('serialize-javascript'\\)"
- "\\\$S\(\.\*?, \\{unsafe: true\\}\)"
condition: or
- type: regex
negative: true
regex:
- "escape\\(...\\)"
- "encodeURI\\(...\\)"
- "escape\\(.*?\\)"
- "encodeURI\\(.*?\\)"
condition: or