CodeQL library for JavaScript
codeql/javascript-all 0.2.2 (changelog, source)
Search

Predicate ReflectedXss::nonHtmlContentTypeHeader

Holds if h may send a response with a content type other than HTML.

Import path

import semmle.javascript.security.dataflow.ReflectedXssCustomizations
HeaderDefinition nonHtmlContentTypeHeader(RouteHandler h)