LGTM.com - false positive - js/unvalidated-message-origin wrongly detects window.chrome.webview.addEventListener('message' ...
Đang mở
false-positive
JS
- Ngôn ngữ chính
- CodeQL
- Star
- 10.1k
- Fork
- 2.1k
- Merge trung bình
- 2 ngày 15 giờ
- Pull request đã merge (30 ngày)
- 141
Mô tả
**Description of the false positive**
Microsoft's webview2 provides a `window.chrome.webview` object which supports a "message" event for receiving messages from the host application. This is not the same as the `window` "message" event, and the event object doesn't support an `origin` property, but js/unvalidated-message-origin wrongly flags it.
**URL to the alert on the project page on LGTM.com**
This alert is not in a project that's on LGTM.com.
Hướng dẫn đóng góp
Đánh giá
Issue này chưa được đánh giá.