hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 09:15:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Accept alerts in UselessCharacterEscape

Browse Source
This commit is contained in:
Asger F
2025-02-26 13:05:29 +01:00
parent aade1e863d
commit 0496de6c8f
1 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

18
javascript/ql/test/query-tests/Security/CWE-020/UselessCharacterEscape/tst-escapes.js
View File

@@ -10,12 +10,12 @@ RegExp("{}\"|<>?");
RegExp(" ");
// backslashes
RegExp("\a\b\c\d\e\f\g\h\i\j\k\l\m\n\o\p\q\r\s\t\\u\v\\x\y\z");
RegExp("\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q\R\S\T\U\V\X\Y\Z");
RegExp("\`\1\2\3\4\5\6\7\8\9\0\-\=");
RegExp("\a\b\c\d\e\f\g\h\i\j\k\l\m\n\o\p\q\r\s\t\\u\v\\x\y\z"); // $ Alert
RegExp("\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q\R\S\T\U\V\X\Y\Z"); // $ Alert
RegExp("\`\1\2\3\4\5\6\7\8\9\0\-\="); // $ Alert
RegExp("\~\!\@\#\$\%\^\&\*\(\)\_\+"); // $ Alert
RegExp("\[\]\'\\,\.\/"); // $ Alert
RegExp("\{\}\\\"\|\<\>\?");
RegExp("\{\}\\\"\|\<\>\?"); // $ Alert
RegExp("\ ");
/\a\b\c\d\e\f\g\h\i\j\k\l\m\n\o\p\q\r\s\t\u\v\\x\y\z"/;
/\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q\R\S\T\U\V\X\Y\Z/;
@@ -57,17 +57,17 @@ RegExp("[\.]"); // $ Alert
RegExp("a[b\.c]d"); // $ Alert
RegExp("\b");
RegExp(`\b`);
RegExp(`\k\\k\d\\d`)
RegExp(`\k\\k${foo}\d\\d`)
RegExp(`\k\\k\d\\d`) // $ Alert
RegExp(`\k\\k${foo}\d\\d`) // $ Alert
// effective escapes
RegExp("\]")
RegExp("\]") // $ Alert
RegExp("\\]")
RegExp("\\\]"); // effectively escaped after all
RegExp("x\\\]"); // effectively escaped after all
RegExp("\\\\]")
RegExp("\\\\\]")
RegExp("\\\\\]") // $ Alert
RegExp("\\\\\\]")
RegExp("\\\\\\\]") // effectively escaped after all
RegExp("\\\\\\\\]")
RegExp("\\\\\\\\\]")
RegExp("\\\\\\\\\]") // $ Alert