hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Eliminate source of false positives in UnsafeShellCommandConstruction.

Browse Source
This commit is contained in:
Max Schaefer
2020-10-12 14:52:23 +01:00
parent cd33d358aa
commit 1c04c07f07
2 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/test/query-tests/Security/CWE-078/lib/lib.js
View File

@@ -333,5 +333,5 @@ function id(x) {
module.exports.id = id;
module.exports.unproblematic = function() {
cp.exec("rm -rf " + id("test")); // OK [INCONSISTENCY]
cp.exec("rm -rf " + id("test")); // OK
};