hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 05:05:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

JavaScript: Add tests for data-flow tutorial.

Browse Source
This commit is contained in:
Max Schaefer
2019-06-07 14:33:26 +01:00
parent f7a092882b
commit 398ee0c133
23 changed files with 235 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
javascript/ql/test/tutorials/Analyzing data flow in JavaScript/Global data flow/query1.ql Normal file
View File

@@ -0,0 +1,17 @@
import javascript
class CommandLineFileNameConfiguration extends TaintTracking::Configuration {
CommandLineFileNameConfiguration() { this = "CommandLineFileNameConfiguration" }
override predicate isSource(DataFlow::Node source) {
DataFlow::globalVarRef("process").getAPropertyRead("argv").getAPropertyRead() = source
}
override predicate isSink(DataFlow::Node sink) {
DataFlow::moduleMember("fs", "readFile").getACall().getArgument(0) = sink
}
}
from CommandLineFileNameConfiguration cfg, DataFlow::Node source, DataFlow::Node sink
where cfg.hasFlow(source, sink)
select source, sink