FIX - resolve CodeQL security alerts (#16)

This commit is contained in:
DerEchteAlec
2026-08-20 17:26:26 +02:00
committed by GitHub
parent 5b5e9fe914
commit 9aec3eefef
5 changed files with 38 additions and 5 deletions
+11 -3
View File
@@ -112,8 +112,16 @@ describe('LB Phone app bridge', () => {
expect(document).toContain('https://cfx-nui-snake_app/ui/dist/')
expect(document).not.toContain('</script><script>window.injected=true')
const runtime = /<script>([\s\S]*?)<\/script>/.exec(document)?.[1]
expect(runtime).toBeTruthy()
expect(() => new Function(runtime ?? '')).not.toThrow()
const openingTag = '<script>'
const runtimeStart = document.indexOf(openingTag)
const runtimeEnd = document.indexOf(
'</script>',
runtimeStart + openingTag.length,
)
expect(runtimeStart).toBeGreaterThanOrEqual(0)
expect(runtimeEnd).toBeGreaterThan(runtimeStart)
const runtime = document.slice(runtimeStart + openingTag.length, runtimeEnd)
expect(() => new Function(runtime)).not.toThrow()
})
})