hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

update alert-messages of the sensitive data queries to match #10314

Browse Source
This commit is contained in:
erik-krogh
2022-09-06 12:25:36 +02:00
parent aa56ca37ae
commit 24f2e3cc07
4 changed files with 53 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/src/Security/CWE-312/CleartextLogging.ql
View File

@@ -38,5 +38,5 @@ where
cfg.hasFlowPath(source, sink) and
// ignore logging to the browser console (even though it is not a good practice)
not inBrowserEnvironment(sink.getNode().asExpr().getTopLevel())
select sink.getNode(), source, sink, "Log entry depends on $@.", source.getNode(),
"sensitive data returned by " + source.getNode().(Source).describe()
select sink.getNode(), source, sink, "$@ is logged here.", source.getNode(),
"Sensitive data returned by " + source.getNode().(Source).describe()

4
javascript/ql/src/Security/CWE-312/CleartextStorage.ql
View File

@@ -19,5 +19,5 @@ import DataFlow::PathGraph
from Configuration cfg, DataFlow::PathNode source, DataFlow::PathNode sink
where cfg.hasFlowPath(source, sink)
select sink.getNode(), source, sink, "This data storage depends on $@.", source.getNode(),
"sensitive data returned by " + source.getNode().(Source).describe()
select sink.getNode(), source, sink, "$@ is stored here.", source.getNode(),
"Sensitive data returned by " + source.getNode().(Source).describe()

78
javascript/ql/test/query-tests/Security/CWE-312/CleartextLogging.expected
View File

@@ -288,42 +288,42 @@ edges
| passwords_in_server_5.js:7:12:7:12 | x | passwords_in_server_5.js:8:17:8:17 | x |
| passwords_in_server_5.js:7:12:7:12 | x | passwords_in_server_5.js:8:17:8:17 | x |
#select
| passwords.js:2:17:2:24 | password | passwords.js:2:17:2:24 | password | passwords.js:2:17:2:24 | password | Log entry depends on $@. | passwords.js:2:17:2:24 | password | sensitive data returned by an access to password |
| passwords.js:3:17:3:26 | o.password | passwords.js:3:17:3:26 | o.password | passwords.js:3:17:3:26 | o.password | Log entry depends on $@. | passwords.js:3:17:3:26 | o.password | sensitive data returned by an access to password |
| passwords.js:4:17:4:29 | getPassword() | passwords.js:4:17:4:29 | getPassword() | passwords.js:4:17:4:29 | getPassword() | Log entry depends on $@. | passwords.js:4:17:4:29 | getPassword() | sensitive data returned by a call to getPassword |
| passwords.js:5:17:5:31 | o.getPassword() | passwords.js:5:17:5:31 | o.getPassword() | passwords.js:5:17:5:31 | o.getPassword() | Log entry depends on $@. | passwords.js:5:17:5:31 | o.getPassword() | sensitive data returned by a call to getPassword |
| passwords.js:8:21:8:21 | x | passwords.js:10:11:10:18 | password | passwords.js:8:21:8:21 | x | Log entry depends on $@. | passwords.js:10:11:10:18 | password | sensitive data returned by an access to password |
| passwords.js:12:18:12:25 | password | passwords.js:12:18:12:25 | password | passwords.js:12:18:12:25 | password | Log entry depends on $@. | passwords.js:12:18:12:25 | password | sensitive data returned by an access to password |
| passwords.js:14:17:14:38 | name + ... assword | passwords.js:14:31:14:38 | password | passwords.js:14:17:14:38 | name + ... assword | Log entry depends on $@. | passwords.js:14:31:14:38 | password | sensitive data returned by an access to password |
| passwords.js:16:17:16:38 | `${name ... sword}` | passwords.js:16:29:16:36 | password | passwords.js:16:17:16:38 | `${name ... sword}` | Log entry depends on $@. | passwords.js:16:29:16:36 | password | sensitive data returned by an access to password |
| passwords.js:21:17:21:20 | obj1 | passwords.js:18:16:20:5 | {\\n ... x\\n } | passwords.js:21:17:21:20 | obj1 | Log entry depends on $@. | passwords.js:18:16:20:5 | {\\n ... x\\n } | sensitive data returned by an access to password |
| passwords.js:26:17:26:20 | obj2 | passwords.js:24:12:24:19 | password | passwords.js:26:17:26:20 | obj2 | Log entry depends on $@. | passwords.js:24:12:24:19 | password | sensitive data returned by an access to password |
| passwords.js:29:17:29:20 | obj3 | passwords.js:30:14:30:21 | password | passwords.js:29:17:29:20 | obj3 | Log entry depends on $@. | passwords.js:30:14:30:21 | password | sensitive data returned by an access to password |
| passwords.js:78:17:78:38 | temp.en ... assword | passwords.js:77:37:77:53 | req.body.password | passwords.js:78:17:78:38 | temp.en ... assword | Log entry depends on $@. | passwords.js:77:37:77:53 | req.body.password | sensitive data returned by an access to password |
| passwords.js:81:17:81:31 | `pw: ${secret}` | passwords.js:80:18:80:25 | password | passwords.js:81:17:81:31 | `pw: ${secret}` | Log entry depends on $@. | passwords.js:80:18:80:25 | password | sensitive data returned by an access to password |
| passwords.js:93:21:93:46 | "Passwo ... assword | passwords.js:93:39:93:46 | password | passwords.js:93:21:93:46 | "Passwo ... assword | Log entry depends on $@. | passwords.js:93:39:93:46 | password | sensitive data returned by an access to password |
| passwords.js:98:21:98:46 | "Passwo ... assword | passwords.js:98:39:98:46 | password | passwords.js:98:21:98:46 | "Passwo ... assword | Log entry depends on $@. | passwords.js:98:39:98:46 | password | sensitive data returned by an access to password |
| passwords.js:105:21:105:46 | "Passwo ... assword | passwords.js:105:39:105:46 | password | passwords.js:105:21:105:46 | "Passwo ... assword | Log entry depends on $@. | passwords.js:105:39:105:46 | password | sensitive data returned by an access to password |
| passwords.js:110:21:110:46 | "Passwo ... assword | passwords.js:110:39:110:46 | password | passwords.js:110:21:110:46 | "Passwo ... assword | Log entry depends on $@. | passwords.js:110:39:110:46 | password | sensitive data returned by an access to password |
| passwords.js:114:25:114:50 | "Passwo ... assword | passwords.js:114:43:114:50 | password | passwords.js:114:25:114:50 | "Passwo ... assword | Log entry depends on $@. | passwords.js:114:43:114:50 | password | sensitive data returned by an access to password |
| passwords.js:119:21:119:46 | "Passwo ... assword | passwords.js:119:39:119:46 | password | passwords.js:119:21:119:46 | "Passwo ... assword | Log entry depends on $@. | passwords.js:119:39:119:46 | password | sensitive data returned by an access to password |
| passwords.js:122:17:122:49 | name + ... tring() | passwords.js:122:31:122:38 | password | passwords.js:122:17:122:49 | name + ... tring() | Log entry depends on $@. | passwords.js:122:31:122:38 | password | sensitive data returned by an access to password |
| passwords.js:123:17:123:48 | name + ... lueOf() | passwords.js:123:31:123:38 | password | passwords.js:123:17:123:48 | name + ... lueOf() | Log entry depends on $@. | passwords.js:123:31:123:38 | password | sensitive data returned by an access to password |
| passwords.js:135:17:135:22 | config | passwords.js:127:18:132:5 | {\\n ... )\\n } | passwords.js:135:17:135:22 | config | Log entry depends on $@. | passwords.js:127:18:132:5 | {\\n ... )\\n } | sensitive data returned by an access to password |
| passwords.js:135:17:135:22 | config | passwords.js:130:12:130:19 | password | passwords.js:135:17:135:22 | config | Log entry depends on $@. | passwords.js:130:12:130:19 | password | sensitive data returned by an access to password |
| passwords.js:135:17:135:22 | config | passwords.js:131:12:131:24 | getPassword() | passwords.js:135:17:135:22 | config | Log entry depends on $@. | passwords.js:131:12:131:24 | getPassword() | sensitive data returned by a call to getPassword |
| passwords.js:136:17:136:24 | config.x | passwords.js:130:12:130:19 | password | passwords.js:136:17:136:24 | config.x | Log entry depends on $@. | passwords.js:130:12:130:19 | password | sensitive data returned by an access to password |
| passwords.js:137:17:137:24 | config.y | passwords.js:131:12:131:24 | getPassword() | passwords.js:137:17:137:24 | config.y | Log entry depends on $@. | passwords.js:131:12:131:24 | getPassword() | sensitive data returned by a call to getPassword |
| passwords.js:142:26:142:34 | arguments | passwords.js:147:12:147:19 | password | passwords.js:142:26:142:34 | arguments | Log entry depends on $@. | passwords.js:147:12:147:19 | password | sensitive data returned by an access to password |
| passwords.js:142:26:142:34 | arguments | passwords.js:150:21:150:31 | process.env | passwords.js:142:26:142:34 | arguments | Log entry depends on $@. | passwords.js:150:21:150:31 | process.env | sensitive data returned by process environment |
| passwords.js:142:26:142:34 | arguments | passwords.js:152:33:152:43 | process.env | passwords.js:142:26:142:34 | arguments | Log entry depends on $@. | passwords.js:152:33:152:43 | process.env | sensitive data returned by process environment |
| passwords.js:156:17:156:27 | process.env | passwords.js:156:17:156:27 | process.env | passwords.js:156:17:156:27 | process.env | Log entry depends on $@. | passwords.js:156:17:156:27 | process.env | sensitive data returned by process environment |
| passwords.js:163:14:163:41 | passwor ... g, "*") | passwords.js:163:14:163:21 | password | passwords.js:163:14:163:41 | passwor ... g, "*") | Log entry depends on $@. | passwords.js:163:14:163:21 | password | sensitive data returned by an access to password |
| passwords.js:164:14:164:42 | passwor ... g, "*") | passwords.js:164:14:164:21 | password | passwords.js:164:14:164:42 | passwor ... g, "*") | Log entry depends on $@. | passwords.js:164:14:164:21 | password | sensitive data returned by an access to password |
| passwords.js:169:17:169:45 | passwor ... g, "*") | passwords.js:169:17:169:24 | password | passwords.js:169:17:169:45 | passwor ... g, "*") | Log entry depends on $@. | passwords.js:169:17:169:24 | password | sensitive data returned by an access to password |
| passwords.js:170:11:170:39 | passwor ... g, "*") | passwords.js:170:11:170:18 | password | passwords.js:170:11:170:39 | passwor ... g, "*") | Log entry depends on $@. | passwords.js:170:11:170:18 | password | sensitive data returned by an access to password |
| passwords_in_server_1.js:6:13:6:20 | password | passwords_in_server_1.js:6:13:6:20 | password | passwords_in_server_1.js:6:13:6:20 | password | Log entry depends on $@. | passwords_in_server_1.js:6:13:6:20 | password | sensitive data returned by an access to password |
| passwords_in_server_2.js:3:13:3:20 | password | passwords_in_server_2.js:3:13:3:20 | password | passwords_in_server_2.js:3:13:3:20 | password | Log entry depends on $@. | passwords_in_server_2.js:3:13:3:20 | password | sensitive data returned by an access to password |
| passwords_in_server_3.js:2:13:2:20 | password | passwords_in_server_3.js:2:13:2:20 | password | passwords_in_server_3.js:2:13:2:20 | password | Log entry depends on $@. | passwords_in_server_3.js:2:13:2:20 | password | sensitive data returned by an access to password |
| passwords_in_server_4.js:2:13:2:20 | password | passwords_in_server_4.js:2:13:2:20 | password | passwords_in_server_4.js:2:13:2:20 | password | Log entry depends on $@. | passwords_in_server_4.js:2:13:2:20 | password | sensitive data returned by an access to password |
| passwords_in_server_5.js:8:17:8:17 | x | passwords_in_server_5.js:4:7:4:24 | req.query.password | passwords_in_server_5.js:8:17:8:17 | x | Log entry depends on $@. | passwords_in_server_5.js:4:7:4:24 | req.query.password | sensitive data returned by an access to password |
| passwords.js:2:17:2:24 | password | passwords.js:2:17:2:24 | password | passwords.js:2:17:2:24 | password | $@ is logged here. | passwords.js:2:17:2:24 | password | Sensitive data returned by an access to password |
| passwords.js:3:17:3:26 | o.password | passwords.js:3:17:3:26 | o.password | passwords.js:3:17:3:26 | o.password | $@ is logged here. | passwords.js:3:17:3:26 | o.password | Sensitive data returned by an access to password |
| passwords.js:4:17:4:29 | getPassword() | passwords.js:4:17:4:29 | getPassword() | passwords.js:4:17:4:29 | getPassword() | $@ is logged here. | passwords.js:4:17:4:29 | getPassword() | Sensitive data returned by a call to getPassword |
| passwords.js:5:17:5:31 | o.getPassword() | passwords.js:5:17:5:31 | o.getPassword() | passwords.js:5:17:5:31 | o.getPassword() | $@ is logged here. | passwords.js:5:17:5:31 | o.getPassword() | Sensitive data returned by a call to getPassword |
| passwords.js:8:21:8:21 | x | passwords.js:10:11:10:18 | password | passwords.js:8:21:8:21 | x | $@ is logged here. | passwords.js:10:11:10:18 | password | Sensitive data returned by an access to password |
| passwords.js:12:18:12:25 | password | passwords.js:12:18:12:25 | password | passwords.js:12:18:12:25 | password | $@ is logged here. | passwords.js:12:18:12:25 | password | Sensitive data returned by an access to password |
| passwords.js:14:17:14:38 | name + ... assword | passwords.js:14:31:14:38 | password | passwords.js:14:17:14:38 | name + ... assword | $@ is logged here. | passwords.js:14:31:14:38 | password | Sensitive data returned by an access to password |
| passwords.js:16:17:16:38 | `${name ... sword}` | passwords.js:16:29:16:36 | password | passwords.js:16:17:16:38 | `${name ... sword}` | $@ is logged here. | passwords.js:16:29:16:36 | password | Sensitive data returned by an access to password |
| passwords.js:21:17:21:20 | obj1 | passwords.js:18:16:20:5 | {\\n ... x\\n } | passwords.js:21:17:21:20 | obj1 | $@ is logged here. | passwords.js:18:16:20:5 | {\\n ... x\\n } | Sensitive data returned by an access to password |
| passwords.js:26:17:26:20 | obj2 | passwords.js:24:12:24:19 | password | passwords.js:26:17:26:20 | obj2 | $@ is logged here. | passwords.js:24:12:24:19 | password | Sensitive data returned by an access to password |
| passwords.js:29:17:29:20 | obj3 | passwords.js:30:14:30:21 | password | passwords.js:29:17:29:20 | obj3 | $@ is logged here. | passwords.js:30:14:30:21 | password | Sensitive data returned by an access to password |
| passwords.js:78:17:78:38 | temp.en ... assword | passwords.js:77:37:77:53 | req.body.password | passwords.js:78:17:78:38 | temp.en ... assword | $@ is logged here. | passwords.js:77:37:77:53 | req.body.password | Sensitive data returned by an access to password |
| passwords.js:81:17:81:31 | `pw: ${secret}` | passwords.js:80:18:80:25 | password | passwords.js:81:17:81:31 | `pw: ${secret}` | $@ is logged here. | passwords.js:80:18:80:25 | password | Sensitive data returned by an access to password |
| passwords.js:93:21:93:46 | "Passwo ... assword | passwords.js:93:39:93:46 | password | passwords.js:93:21:93:46 | "Passwo ... assword | $@ is logged here. | passwords.js:93:39:93:46 | password | Sensitive data returned by an access to password |
| passwords.js:98:21:98:46 | "Passwo ... assword | passwords.js:98:39:98:46 | password | passwords.js:98:21:98:46 | "Passwo ... assword | $@ is logged here. | passwords.js:98:39:98:46 | password | Sensitive data returned by an access to password |
| passwords.js:105:21:105:46 | "Passwo ... assword | passwords.js:105:39:105:46 | password | passwords.js:105:21:105:46 | "Passwo ... assword | $@ is logged here. | passwords.js:105:39:105:46 | password | Sensitive data returned by an access to password |
| passwords.js:110:21:110:46 | "Passwo ... assword | passwords.js:110:39:110:46 | password | passwords.js:110:21:110:46 | "Passwo ... assword | $@ is logged here. | passwords.js:110:39:110:46 | password | Sensitive data returned by an access to password |
| passwords.js:114:25:114:50 | "Passwo ... assword | passwords.js:114:43:114:50 | password | passwords.js:114:25:114:50 | "Passwo ... assword | $@ is logged here. | passwords.js:114:43:114:50 | password | Sensitive data returned by an access to password |
| passwords.js:119:21:119:46 | "Passwo ... assword | passwords.js:119:39:119:46 | password | passwords.js:119:21:119:46 | "Passwo ... assword | $@ is logged here. | passwords.js:119:39:119:46 | password | Sensitive data returned by an access to password |
| passwords.js:122:17:122:49 | name + ... tring() | passwords.js:122:31:122:38 | password | passwords.js:122:17:122:49 | name + ... tring() | $@ is logged here. | passwords.js:122:31:122:38 | password | Sensitive data returned by an access to password |
| passwords.js:123:17:123:48 | name + ... lueOf() | passwords.js:123:31:123:38 | password | passwords.js:123:17:123:48 | name + ... lueOf() | $@ is logged here. | passwords.js:123:31:123:38 | password | Sensitive data returned by an access to password |
| passwords.js:135:17:135:22 | config | passwords.js:127:18:132:5 | {\\n ... )\\n } | passwords.js:135:17:135:22 | config | $@ is logged here. | passwords.js:127:18:132:5 | {\\n ... )\\n } | Sensitive data returned by an access to password |
| passwords.js:135:17:135:22 | config | passwords.js:130:12:130:19 | password | passwords.js:135:17:135:22 | config | $@ is logged here. | passwords.js:130:12:130:19 | password | Sensitive data returned by an access to password |
| passwords.js:135:17:135:22 | config | passwords.js:131:12:131:24 | getPassword() | passwords.js:135:17:135:22 | config | $@ is logged here. | passwords.js:131:12:131:24 | getPassword() | Sensitive data returned by a call to getPassword |
| passwords.js:136:17:136:24 | config.x | passwords.js:130:12:130:19 | password | passwords.js:136:17:136:24 | config.x | $@ is logged here. | passwords.js:130:12:130:19 | password | Sensitive data returned by an access to password |
| passwords.js:137:17:137:24 | config.y | passwords.js:131:12:131:24 | getPassword() | passwords.js:137:17:137:24 | config.y | $@ is logged here. | passwords.js:131:12:131:24 | getPassword() | Sensitive data returned by a call to getPassword |
| passwords.js:142:26:142:34 | arguments | passwords.js:147:12:147:19 | password | passwords.js:142:26:142:34 | arguments | $@ is logged here. | passwords.js:147:12:147:19 | password | Sensitive data returned by an access to password |
| passwords.js:142:26:142:34 | arguments | passwords.js:150:21:150:31 | process.env | passwords.js:142:26:142:34 | arguments | $@ is logged here. | passwords.js:150:21:150:31 | process.env | Sensitive data returned by process environment |
| passwords.js:142:26:142:34 | arguments | passwords.js:152:33:152:43 | process.env | passwords.js:142:26:142:34 | arguments | $@ is logged here. | passwords.js:152:33:152:43 | process.env | Sensitive data returned by process environment |
| passwords.js:156:17:156:27 | process.env | passwords.js:156:17:156:27 | process.env | passwords.js:156:17:156:27 | process.env | $@ is logged here. | passwords.js:156:17:156:27 | process.env | Sensitive data returned by process environment |
| passwords.js:163:14:163:41 | passwor ... g, "*") | passwords.js:163:14:163:21 | password | passwords.js:163:14:163:41 | passwor ... g, "*") | $@ is logged here. | passwords.js:163:14:163:21 | password | Sensitive data returned by an access to password |
| passwords.js:164:14:164:42 | passwor ... g, "*") | passwords.js:164:14:164:21 | password | passwords.js:164:14:164:42 | passwor ... g, "*") | $@ is logged here. | passwords.js:164:14:164:21 | password | Sensitive data returned by an access to password |
| passwords.js:169:17:169:45 | passwor ... g, "*") | passwords.js:169:17:169:24 | password | passwords.js:169:17:169:45 | passwor ... g, "*") | $@ is logged here. | passwords.js:169:17:169:24 | password | Sensitive data returned by an access to password |
| passwords.js:170:11:170:39 | passwor ... g, "*") | passwords.js:170:11:170:18 | password | passwords.js:170:11:170:39 | passwor ... g, "*") | $@ is logged here. | passwords.js:170:11:170:18 | password | Sensitive data returned by an access to password |
| passwords_in_server_1.js:6:13:6:20 | password | passwords_in_server_1.js:6:13:6:20 | password | passwords_in_server_1.js:6:13:6:20 | password | $@ is logged here. | passwords_in_server_1.js:6:13:6:20 | password | Sensitive data returned by an access to password |
| passwords_in_server_2.js:3:13:3:20 | password | passwords_in_server_2.js:3:13:3:20 | password | passwords_in_server_2.js:3:13:3:20 | password | $@ is logged here. | passwords_in_server_2.js:3:13:3:20 | password | Sensitive data returned by an access to password |
| passwords_in_server_3.js:2:13:2:20 | password | passwords_in_server_3.js:2:13:2:20 | password | passwords_in_server_3.js:2:13:2:20 | password | $@ is logged here. | passwords_in_server_3.js:2:13:2:20 | password | Sensitive data returned by an access to password |
| passwords_in_server_4.js:2:13:2:20 | password | passwords_in_server_4.js:2:13:2:20 | password | passwords_in_server_4.js:2:13:2:20 | password | $@ is logged here. | passwords_in_server_4.js:2:13:2:20 | password | Sensitive data returned by an access to password |
| passwords_in_server_5.js:8:17:8:17 | x | passwords_in_server_5.js:4:7:4:24 | req.query.password | passwords_in_server_5.js:8:17:8:17 | x | $@ is logged here. | passwords_in_server_5.js:4:7:4:24 | req.query.password | Sensitive data returned by an access to password |

20
javascript/ql/test/query-tests/Security/CWE-312/CleartextStorage.expected
View File

@@ -53,13 +53,13 @@ edges
| tst-webstorage.js:3:20:3:32 | data.password | tst-webstorage.js:3:20:3:32 | data.password |
| tst-webstorage.js:4:29:4:41 | data.password | tst-webstorage.js:4:29:4:41 | data.password |
#select
| CleartextStorage2.js:7:19:7:34 | 'password=' + pw | CleartextStorage2.js:5:12:5:58 | url.par ... assword | CleartextStorage2.js:7:19:7:34 | 'password=' + pw | This data storage depends on $@. | CleartextStorage2.js:5:12:5:58 | url.par ... assword | sensitive data returned by an access to current_password |
| CleartextStorage.js:7:26:7:27 | pw | CleartextStorage.js:5:12:5:40 | req.par ... sword") | CleartextStorage.js:7:26:7:27 | pw | This data storage depends on $@. | CleartextStorage.js:5:12:5:40 | req.par ... sword") | sensitive data returned by a call to param |
| tst-angularjs.js:3:32:3:45 | data1.password | tst-angularjs.js:3:32:3:45 | data1.password | tst-angularjs.js:3:32:3:45 | data1.password | This data storage depends on $@. | tst-angularjs.js:3:32:3:45 | data1.password | sensitive data returned by an access to password |
| tst-angularjs.js:4:33:4:46 | data2.password | tst-angularjs.js:4:33:4:46 | data2.password | tst-angularjs.js:4:33:4:46 | data2.password | This data storage depends on $@. | tst-angularjs.js:4:33:4:46 | data2.password | sensitive data returned by an access to password |
| tst-angularjs.js:5:27:5:40 | data3.password | tst-angularjs.js:5:27:5:40 | data3.password | tst-angularjs.js:5:27:5:40 | data3.password | This data storage depends on $@. | tst-angularjs.js:5:27:5:40 | data3.password | sensitive data returned by an access to password |
| tst-angularjs.js:6:33:6:46 | data4.password | tst-angularjs.js:6:33:6:46 | data4.password | tst-angularjs.js:6:33:6:46 | data4.password | This data storage depends on $@. | tst-angularjs.js:6:33:6:46 | data4.password | sensitive data returned by an access to password |
| tst-webstorage.js:1:18:1:30 | data.password | tst-webstorage.js:1:18:1:30 | data.password | tst-webstorage.js:1:18:1:30 | data.password | This data storage depends on $@. | tst-webstorage.js:1:18:1:30 | data.password | sensitive data returned by an access to password |
| tst-webstorage.js:2:27:2:39 | data.password | tst-webstorage.js:2:27:2:39 | data.password | tst-webstorage.js:2:27:2:39 | data.password | This data storage depends on $@. | tst-webstorage.js:2:27:2:39 | data.password | sensitive data returned by an access to password |
| tst-webstorage.js:3:20:3:32 | data.password | tst-webstorage.js:3:20:3:32 | data.password | tst-webstorage.js:3:20:3:32 | data.password | This data storage depends on $@. | tst-webstorage.js:3:20:3:32 | data.password | sensitive data returned by an access to password |
| tst-webstorage.js:4:29:4:41 | data.password | tst-webstorage.js:4:29:4:41 | data.password | tst-webstorage.js:4:29:4:41 | data.password | This data storage depends on $@. | tst-webstorage.js:4:29:4:41 | data.password | sensitive data returned by an access to password |
| CleartextStorage2.js:7:19:7:34 | 'password=' + pw | CleartextStorage2.js:5:12:5:58 | url.par ... assword | CleartextStorage2.js:7:19:7:34 | 'password=' + pw | $@ is stored here. | CleartextStorage2.js:5:12:5:58 | url.par ... assword | Sensitive data returned by an access to current_password |
| CleartextStorage.js:7:26:7:27 | pw | CleartextStorage.js:5:12:5:40 | req.par ... sword") | CleartextStorage.js:7:26:7:27 | pw | $@ is stored here. | CleartextStorage.js:5:12:5:40 | req.par ... sword") | Sensitive data returned by a call to param |
| tst-angularjs.js:3:32:3:45 | data1.password | tst-angularjs.js:3:32:3:45 | data1.password | tst-angularjs.js:3:32:3:45 | data1.password | $@ is stored here. | tst-angularjs.js:3:32:3:45 | data1.password | Sensitive data returned by an access to password |
| tst-angularjs.js:4:33:4:46 | data2.password | tst-angularjs.js:4:33:4:46 | data2.password | tst-angularjs.js:4:33:4:46 | data2.password | $@ is stored here. | tst-angularjs.js:4:33:4:46 | data2.password | Sensitive data returned by an access to password |
| tst-angularjs.js:5:27:5:40 | data3.password | tst-angularjs.js:5:27:5:40 | data3.password | tst-angularjs.js:5:27:5:40 | data3.password | $@ is stored here. | tst-angularjs.js:5:27:5:40 | data3.password | Sensitive data returned by an access to password |
| tst-angularjs.js:6:33:6:46 | data4.password | tst-angularjs.js:6:33:6:46 | data4.password | tst-angularjs.js:6:33:6:46 | data4.password | $@ is stored here. | tst-angularjs.js:6:33:6:46 | data4.password | Sensitive data returned by an access to password |
| tst-webstorage.js:1:18:1:30 | data.password | tst-webstorage.js:1:18:1:30 | data.password | tst-webstorage.js:1:18:1:30 | data.password | $@ is stored here. | tst-webstorage.js:1:18:1:30 | data.password | Sensitive data returned by an access to password |
| tst-webstorage.js:2:27:2:39 | data.password | tst-webstorage.js:2:27:2:39 | data.password | tst-webstorage.js:2:27:2:39 | data.password | $@ is stored here. | tst-webstorage.js:2:27:2:39 | data.password | Sensitive data returned by an access to password |
| tst-webstorage.js:3:20:3:32 | data.password | tst-webstorage.js:3:20:3:32 | data.password | tst-webstorage.js:3:20:3:32 | data.password | $@ is stored here. | tst-webstorage.js:3:20:3:32 | data.password | Sensitive data returned by an access to password |
| tst-webstorage.js:4:29:4:41 | data.password | tst-webstorage.js:4:29:4:41 | data.password | tst-webstorage.js:4:29:4:41 | data.password | $@ is stored here. | tst-webstorage.js:4:29:4:41 | data.password | Sensitive data returned by an access to password |