Update javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomCustomizations.qll

bananabr · erik-krogh · web-flow · commit 880e3e188581 · 2022-05-03T11:38:32.000-05:00
Co-authored-by: Erik Krogh Kristensen &lt;erik-krogh@github.com&gt;
diff --git a/javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomCustomizations.qll b/javascript/ql/lib/semmle/javascript/security/dataflow/XssThroughDomCustomizations.qll
@@ -236,7 +236,8 @@ module XssThroughDom {
   }
   
   /**
-   * A source for text from the DOM from a Selection object toString method call
+   * A source for text from the DOM from calling `toString()` on a `Selection` object.
+   * The `toString()` method returns the currently selected text in the DOM.
    * https://developer.mozilla.org/en-US/docs/Web/API/Selection
    */
   class SelectionSource extends Source {

Original file line number	Diff line number	Diff line change
`@@ -236,7 +236,8 @@ module XssThroughDom {`
`236`	`236`	`}`
`237`	`237`
`238`	`238`	`/**`
`239`		`- * A source for text from the DOM from a Selection object toString method call`
	`239`	+ * A source for text from the DOM from calling `toString()` on a `Selection` object.
	`240`	+ * The `toString()` method returns the currently selected text in the DOM.
`240`	`241`	`* https://developer.mozilla.org/en-US/docs/Web/API/Selection`
`241`	`242`	`*/`
`242`	`243`	`class SelectionSource extends Source {`