hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 00:35:20 +02:00
Code Issues Packages Projects Releases Wiki Activity

Added test cases for rimraf library.

Browse Source
This commit is contained in:
Napalys
2025-04-02 10:21:17 +02:00
parent 01275aa073
commit 14999c19da
1 changed files with 30 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
javascript/ql/test/query-tests/Security/CWE-022/TaintedPath/rimraf.js Normal file
View File

@@ -0,0 +1,30 @@
const express = require('express');
const rimraf = require('rimraf');
const app = express();
app.use(express.json());
app.post('/rmsync', async (req, res) => {
const { path } = req.body; // $ MISSING: Source
rimraf.sync(path); // $ MISSING: Alert
rimraf.rimrafSync(path); // $ MISSING: Alert
rimraf.native(path); // $ MISSING: Alert
await rimraf.native(path); // $ MISSING: Alert
rimraf.native.sync(path); // $ MISSING: Alert
rimraf.nativeSync(path); // $ MISSING: Alert
await rimraf.manual(path); // $ MISSING: Alert
rimraf.manual(path); // $ MISSING: Alert
rimraf.manual.sync(path); // $ MISSING: Alert
rimraf.manualSync(path); // $ MISSING: Alert
await rimraf.windows(path); // $ MISSING: Alert
rimraf.windows(path); // $ MISSING: Alert
rimraf.windows.sync(path); // $ MISSING: Alert
rimraf.windowsSync(path); // $ MISSING: Alert
rimraf.moveRemove(path); // $ MISSING: Alert
rimraf.moveRemove.sync(path); // $ MISSING: Alert
rimraf.moveRemoveSync(path); // $ MISSING: Alert
rimraf.posixSync(path); // $ MISSING: Alert
rimraf.posix(path); // $ MISSING: Alert
rimraf.posix.sync(path); // $ MISSING: Alert
});