CodeQL library for JavaScript
Search

Member predicate Templating::TemplatePlaceholderTag::isInCodeAttribute

Holds if this occurs in an attribute value that is interepted as JavaScript.

Unlike in script tags, HTML entities in attributes are expanded prior to JS parsing, which cancels out the benefit of HTML escaping.

predicate isInCodeAttribute()