Skip to content

Losing taints when using URLSearchParams #8

@leeN

Description

@leeN

Proof of Concept code:

var params = "q=URLUtils." + String.tainted("searchParams") + "&"+ String.tainted("topic") + "=api";
let searchParams = new URLSearchParams(params);
for (let p of searchParams) {
  var key = p[0];
  var value = p[1];
  // Key should be tainted in first run
  // Value should be tainted in second run
}

Metadata

Metadata

Assignees

Labels

bugSomething isn't workinggood first issueGood for newcomers

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions