We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
There was an error while loading. Please reload this page.
1 parent 1d693d3 commit 9e625acCopy full SHA for 9e625ac
ruby/ql/lib/codeql/ruby/frameworks/ActionView.qll
@@ -226,10 +226,9 @@ module ActionView {
226
*/
227
module Helpers {
228
/**
229
- * Calls to ActionView helpers which render their argument without escaping.
230
- * These arguments should be treated as XSS sinks.
231
- * In the documentation for classes in this module, the vulnerable argument is
232
- * named `x`.
+ * A call to ActionView helpers which renders its argument without escaping.
+ * The argument should be treated as an XSS sink. In the documentation for
+ * classes in this module, the vulnerable argument is named `x`.
233
234
abstract class RawHelperCall extends MethodCall {
235
abstract Expr getRawArgument();
0 commit comments