hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-27 01:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Added test cases for shelljs.env

Browse Source
This commit is contained in:
Napalys Klicius
2025-05-01 11:11:29 +02:00
parent 602500e280
commit 33d8ffa83e
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
javascript/ql/test/query-tests/Security/CWE-078/IndirectCommandInjection/actions.js
View File

@@ -12,3 +12,10 @@ function test(e) {
test(process.env); // $ Source
exec(getInput('data')); // $ Alert
function test2(e) {
const shelljs = require('shelljs');
exec('rm -rf ' + shelljs.env['SOME']); // $ MISSING: Alert
exec('rm -rf ' + shelljs.env.SOME); // $ MISSING: Alert
exec('rm -rf ' + shelljs.env); // $ MISSING: Alert
}