remove some FPs in js/password-in-configuration-file

2026-05-01 11:45:14 +02:00 · 2022-10-26 11:51:56 +02:00
parent 52cd200ca0
commit 0f9b4334cc
2 changed files with 8 additions and 3 deletions
--- a/javascript/ql/test/query-tests/Security/CWE-313/tst.yml
+++ b/javascript/ql/test/query-tests/Security/CWE-313/tst.yml
@@ -5,3 +5,8 @@ steps:
 username: <%= ENV['USERNAME'] %>
 password: <%= ENV['PASSWORD'] %>
 password: change_me
+query:
+- run : |
+    printf("This is some scripting")
+    password = os.env['PASSWORD']
+password: foo("blab")