hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 16:25:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Migrate URLSearchParams model to flow summaries

Browse Source
This commit is contained in:
Asger F
2025-02-13 11:51:00 +01:00
parent f531f4479b
commit 26dcbf7a2a
4 changed files with 72 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
javascript/ql/test/library-tests/TripleDot/urlsearchparams.js
View File

@@ -1,15 +1,15 @@
function u1() {
const searchParams = new URLSearchParams(source("u1.1"));
sink(searchParams.get("x")); // $ MISSING: hasTaintFlow=u1.1
sink(searchParams.get(unknown())); // $ MISSING: hasTaintFlow=u1.1
sink(searchParams.getAll("x")); // $ MISSING: hasTaintFlow=u1.1
sink(searchParams.getAll(unknown())); // $ MISSING: hasTaintFlow=u1.1
sink(searchParams.get("x")); // $ hasTaintFlow=u1.1
sink(searchParams.get(unknown())); // $ hasTaintFlow=u1.1
sink(searchParams.getAll("x")); // $ hasTaintFlow=u1.1
sink(searchParams.getAll(unknown())); // $ hasTaintFlow=u1.1
}
function u2() {
const url = new URL(source("u2.1"));
sink(url.searchParams.get("x")); // $ MISSING: hasTaintFlow=u2.1
sink(url.searchParams.get(unknown())); // $ MISSING: hasTaintFlow=u2.1
sink(url.searchParams.getAll("x")); // $ MISSING: hasTaintFlow=u2.1
sink(url.searchParams.getAll(unknown())); // $ MISSING: hasTaintFlow=u2.1
sink(url.searchParams.get("x")); // $ hasTaintFlow=u2.1
sink(url.searchParams.get(unknown())); // $ hasTaintFlow=u2.1
sink(url.searchParams.getAll("x")); // $ hasTaintFlow=u2.1
sink(url.searchParams.getAll(unknown())); // $ hasTaintFlow=u2.1
}