/** * @name Incomplete multi-character sanitization * @description A sanitizer that removes a sequence of characters may reintroduce the dangerous sequence. * @kind problem * @problem.severity warning * @security-severity 7.8 * @precision high * @id js/incomplete-multi-character-sanitization * @tags correctness * security * external/cwe/cwe-020 * external/cwe/cwe-080 * external/cwe/cwe-116 */ import semmle.javascript.security.IncompleteMultiCharacterSanitizationQuery