hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 11:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Flow through *ngFor loops

Browse Source
This commit is contained in:
Asger Feldthaus
2020-12-11 21:50:09 +00:00
parent 29dd8470d5
commit 1ab36dc81f
5 changed files with 87 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
javascript/ql/test/library-tests/frameworks/Angular2/foo.component.html
View File

@@ -5,3 +5,11 @@
[prop4]="foo | testPipe:'safe'"
[prop5]="42 | testPipe:foo"
></other-component>
<div *ngFor="let element of taintedArray">
<other-component [prop1]="element"></other-component>
</div>
<div *ngFor="let element of safeArray">
<other-component [prop2]="element"></other-component>
</div>

4
javascript/ql/test/library-tests/frameworks/Angular2/foo.component.ts
View File

@@ -6,8 +6,12 @@ import { Component } from "@angular/core";
})
export class Foo {
foo: string;
taintedArray: string[];
safeArray: string[];
constructor() {
this.foo = source();
this.taintedArray = [...source()];
this.safeArray = ['a', 'b'];
}
}

7
javascript/ql/test/library-tests/frameworks/Angular2/test.expected
View File

@@ -22,6 +22,7 @@ pipeClassRef
| TestPipe.ts:4:8:9:1 | class T ... ;\\n }\\n} | foo.component.html:5:20:5:27 | testPipe |
| TestPipe.ts:4:8:9:1 | class T ... ;\\n }\\n} | foo.component.html:6:19:6:26 | testPipe |
taintFlow
| foo.component.ts:11:20:11:27 | source() | other.component.ts:18:48:18:57 | this.prop1 |
| foo.component.ts:11:20:11:27 | source() | other.component.ts:21:48:21:57 | this.prop4 |
| foo.component.ts:11:20:11:27 | source() | other.component.ts:22:48:22:57 | this.prop5 |
| foo.component.ts:13:20:13:27 | source() | other.component.ts:18:48:18:57 | this.prop1 |
| foo.component.ts:13:20:13:27 | source() | other.component.ts:21:48:21:57 | this.prop4 |
| foo.component.ts:13:20:13:27 | source() | other.component.ts:22:48:22:57 | this.prop5 |
| foo.component.ts:14:33:14:40 | source() | other.component.ts:18:48:18:57 | this.prop1 |