hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 12:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Split CWE-079 tests into their own folders

Browse Source
This commit is contained in:
Asger Feldthaus
2020-10-16 17:19:48 +01:00
parent 287ec0cbbb
commit 4137d3f971
67 changed files with 258 additions and 53 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
javascript/ql/test/query-tests/Security/CWE-079/Consistency.ql
View File

@@ -1,8 +0,0 @@
import javascript
import testUtilities.ConsistencyChecking
import semmle.javascript.security.dataflow.DomBasedXss as DomXss
import semmle.javascript.security.dataflow.ReflectedXss as ReflectedXss
import semmle.javascript.security.dataflow.StoredXss as StoredXss
import semmle.javascript.security.dataflow.XssThroughDom as ThroughDomXss
import semmle.javascript.security.dataflow.ExceptionXss as ExceptionXss
import semmle.javascript.security.dataflow.UnsafeJQueryPlugin as UnsafeJqueryPlugin

0
javascript/ql/test/query-tests/Security/CWE-079/Consistency.expected → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/ConsistencyDomBasedXss.expected
View File

3
javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/ConsistencyDomBasedXss.ql Normal file
View File

@@ -0,0 +1,3 @@
import javascript
import testUtilities.ConsistencyChecking
import semmle.javascript.security.dataflow.DomBasedXss as DomXss

10
javascript/ql/test/query-tests/Security/CWE-079/Xss.expected → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/Xss.expected
View File

@@ -59,11 +59,6 @@ nodes
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
| exception-xss.js:2:6:2:28 | foo |
| exception-xss.js:2:12:2:28 | document.location |
| exception-xss.js:2:12:2:28 | document.location |
| exception-xss.js:86:17:86:19 | foo |
| exception-xss.js:86:17:86:19 | foo |
| jquery.js:2:7:2:40 | tainted |
| jquery.js:2:17:2:33 | document.location |
| jquery.js:2:17:2:33 | document.location |
@@ -577,10 +572,6 @@ edges
| angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url |
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo |
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo |
| exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo |
| exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo |
| jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted |
| jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted |
| jquery.js:2:7:2:40 | tainted | jquery.js:7:20:7:26 | tainted |
@@ -1022,7 +1013,6 @@ edges
| angular2-client.ts:35:44:35:91 | this.ro ... arams.x | angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x | Cross-site scripting vulnerability due to $@. | angular2-client.ts:35:44:35:89 | this.ro ... .params | user-provided value |
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url | Cross-site scripting vulnerability due to $@. | angular2-client.ts:37:44:37:58 | this.router.url | user-provided value |
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | Cross-site scripting vulnerability due to $@. | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | user-provided value |
| exception-xss.js:86:17:86:19 | foo | exception-xss.js:2:12:2:28 | document.location | exception-xss.js:86:17:86:19 | foo | Cross-site scripting vulnerability due to $@. | exception-xss.js:2:12:2:28 | document.location | user-provided value |
| jquery.js:4:5:4:11 | tainted | jquery.js:2:17:2:33 | document.location | jquery.js:4:5:4:11 | tainted | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:33 | document.location | user-provided value |
| jquery.js:7:5:7:34 | "<div i ... + "\\">" | jquery.js:2:17:2:33 | document.location | jquery.js:7:5:7:34 | "<div i ... + "\\">" | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:33 | document.location | user-provided value |
| jquery.js:8:18:8:34 | "XSS: " + tainted | jquery.js:2:17:2:33 | document.location | jquery.js:8:18:8:34 | "XSS: " + tainted | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:33 | document.location | user-provided value |

0
javascript/ql/test/query-tests/Security/CWE-079/Xss.qlref → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/Xss.qlref
View File

9
javascript/ql/test/query-tests/Security/CWE-079/XssWithAdditionalSources.expected → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/XssWithAdditionalSources.expected
View File

@@ -59,11 +59,6 @@ nodes
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
| exception-xss.js:2:6:2:28 | foo |
| exception-xss.js:2:12:2:28 | document.location |
| exception-xss.js:2:12:2:28 | document.location |
| exception-xss.js:86:17:86:19 | foo |
| exception-xss.js:86:17:86:19 | foo |
| jquery.js:2:7:2:40 | tainted |
| jquery.js:2:17:2:33 | document.location |
| jquery.js:2:17:2:33 | document.location |
@@ -581,10 +576,6 @@ edges
| angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url |
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo |
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo |
| exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo |
| exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo |
| jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted |
| jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted |
| jquery.js:2:7:2:40 | tainted | jquery.js:7:20:7:26 | tainted |

0
javascript/ql/test/query-tests/Security/CWE-079/XssWithAdditionalSources.ql → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/XssWithAdditionalSources.ql
View File

0
javascript/ql/test/query-tests/Security/CWE-079/addEventListener.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/addEventListener.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/angular2-client.ts → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/angular2-client.ts
View File

0
javascript/ql/test/query-tests/Security/CWE-079/encodeuri.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/encodeuri.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/externs.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/externs.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/jquery.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/jquery.js vendored
View File

0
javascript/ql/test/query-tests/Security/CWE-079/nodemailer.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/nodemailer.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/optionalSanitizer.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/optionalSanitizer.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/react-native.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/react-native.js vendored
View File

0
javascript/ql/test/query-tests/Security/CWE-079/sanitiser.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/sanitiser.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/stored-xss.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/stored-xss.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/string-manipulations.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/string-manipulations.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/translate.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/translate.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/tst.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/tst.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/tst3.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/tst3.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/typeahead.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/typeahead.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/v-html.vue → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/v-html.vue
View File

0
javascript/ql/test/query-tests/Security/CWE-079/winjs.js → javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/winjs.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss/ConsistencyExceptionXss.expected Normal file
View File

3
javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss/ConsistencyExceptionXss.ql Normal file
View File

@@ -0,0 +1,3 @@
import javascript
import testUtilities.ConsistencyChecking
import semmle.javascript.security.dataflow.ExceptionXss as ExceptionXss

20
javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss.expected → javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss/ExceptionXss.expected
View File

@@ -86,16 +86,6 @@ nodes
| exception-xss.js:180:26:180:30 | error |
| exception-xss.js:182:19:182:23 | error |
| exception-xss.js:182:19:182:23 | error |
| tst.js:301:9:301:16 | location |
| tst.js:301:9:301:16 | location |
| tst.js:302:10:302:10 | e |
| tst.js:303:20:303:20 | e |
| tst.js:303:20:303:20 | e |
| tst.js:308:10:308:17 | location |
| tst.js:308:10:308:17 | location |
| tst.js:310:10:310:10 | e |
| tst.js:311:20:311:20 | e |
| tst.js:311:20:311:20 | e |
edges
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:9:11:9:13 | foo |
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:15:9:15:11 | foo |
@@ -178,14 +168,6 @@ edges
| exception-xss.js:180:10:180:22 | req.params.id | exception-xss.js:180:26:180:30 | error |
| exception-xss.js:180:26:180:30 | error | exception-xss.js:182:19:182:23 | error |
| exception-xss.js:180:26:180:30 | error | exception-xss.js:182:19:182:23 | error |
| tst.js:301:9:301:16 | location | tst.js:302:10:302:10 | e |
| tst.js:301:9:301:16 | location | tst.js:302:10:302:10 | e |
| tst.js:302:10:302:10 | e | tst.js:303:20:303:20 | e |
| tst.js:302:10:302:10 | e | tst.js:303:20:303:20 | e |
| tst.js:308:10:308:17 | location | tst.js:310:10:310:10 | e |
| tst.js:308:10:308:17 | location | tst.js:310:10:310:10 | e |
| tst.js:310:10:310:10 | e | tst.js:311:20:311:20 | e |
| tst.js:310:10:310:10 | e | tst.js:311:20:311:20 | e |
#select
| exception-xss.js:11:18:11:18 | e | exception-xss.js:2:12:2:28 | document.location | exception-xss.js:11:18:11:18 | e | $@ is reinterpreted as HTML without escaping meta-characters. | exception-xss.js:2:12:2:28 | document.location | Exception text |
| exception-xss.js:17:18:17:18 | e | exception-xss.js:2:12:2:28 | document.location | exception-xss.js:17:18:17:18 | e | $@ is reinterpreted as HTML without escaping meta-characters. | exception-xss.js:2:12:2:28 | document.location | Exception text |
@@ -203,5 +185,3 @@ edges
| exception-xss.js:155:18:155:18 | e | exception-xss.js:146:12:146:28 | document.location | exception-xss.js:155:18:155:18 | e | $@ is reinterpreted as HTML without escaping meta-characters. | exception-xss.js:146:12:146:28 | document.location | Exception text |
| exception-xss.js:175:18:175:18 | e | exception-xss.js:146:12:146:28 | document.location | exception-xss.js:175:18:175:18 | e | $@ is reinterpreted as HTML without escaping meta-characters. | exception-xss.js:146:12:146:28 | document.location | Exception text |
| exception-xss.js:182:19:182:23 | error | exception-xss.js:180:10:180:22 | req.params.id | exception-xss.js:182:19:182:23 | error | $@ is reinterpreted as HTML without escaping meta-characters. | exception-xss.js:180:10:180:22 | req.params.id | Exception text |
| tst.js:303:20:303:20 | e | tst.js:301:9:301:16 | location | tst.js:303:20:303:20 | e | $@ is reinterpreted as HTML without escaping meta-characters. | tst.js:301:9:301:16 | location | Exception text |
| tst.js:311:20:311:20 | e | tst.js:308:10:308:17 | location | tst.js:311:20:311:20 | e | $@ is reinterpreted as HTML without escaping meta-characters. | tst.js:308:10:308:17 | location | Exception text |

0
javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss.qlref → javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss/ExceptionXss.qlref
View File

0
javascript/ql/test/query-tests/Security/CWE-079/exception-xss.js → javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss/exception-xss.js
View File

48
javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss/externs.js Normal file
View File

@@ -0,0 +1,48 @@
// Adapted from the Google Closure externs; original copyright header included below.
/*
* Copyright 2008 The Closure Compiler Authors
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* @externs
*/
/**
* @interface
*/
function EventTarget() {}
/**
* Stub for the DOM hierarchy.
*
* @constructor
* @extends {EventTarget}
*/
function DomObjectStub() {}
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.body;
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.value;
/**
* @type {!DomObjectStub}
*/
var document;

0
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ConsistencyReflectedXss.expected Normal file
View File

3
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ConsistencyReflectedXss.ql Normal file
View File

@@ -0,0 +1,3 @@
import javascript
import testUtilities.ConsistencyChecking
import semmle.javascript.security.dataflow.ReflectedXss as ReflectedXss

5
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss.expected → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ReflectedXss.expected
View File

@@ -35,9 +35,6 @@ nodes
| etherpad.js:9:16:9:53 | req.que ... e + ")" |
| etherpad.js:11:12:11:19 | response |
| etherpad.js:11:12:11:19 | response |
| exception-xss.js:190:12:190:24 | req.params.id |
| exception-xss.js:190:12:190:24 | req.params.id |
| exception-xss.js:190:12:190:24 | req.params.id |
| formatting.js:4:9:4:29 | evil |
| formatting.js:4:16:4:29 | req.query.evil |
| formatting.js:4:16:4:29 | req.query.evil |
@@ -129,7 +126,6 @@ edges
| etherpad.js:9:16:9:30 | req.query.jsonp | etherpad.js:9:16:9:53 | req.que ... e + ")" |
| etherpad.js:9:16:9:30 | req.query.jsonp | etherpad.js:9:16:9:53 | req.que ... e + ")" |
| etherpad.js:9:16:9:53 | req.que ... e + ")" | etherpad.js:9:5:9:53 | response |
| exception-xss.js:190:12:190:24 | req.params.id | exception-xss.js:190:12:190:24 | req.params.id |
| formatting.js:4:9:4:29 | evil | formatting.js:6:43:6:46 | evil |
| formatting.js:4:9:4:29 | evil | formatting.js:7:49:7:52 | evil |
| formatting.js:4:16:4:29 | req.query.evil | formatting.js:4:9:4:29 | evil |
@@ -188,7 +184,6 @@ edges
| ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | ReflectedXssContentTypes.js:70:22:70:34 | req.params.id | ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | Cross-site scripting vulnerability due to $@. | ReflectedXssContentTypes.js:70:22:70:34 | req.params.id | user-provided value |
| ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | ReflectedXssGood3.js:135:15:135:27 | req.params.id | ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | Cross-site scripting vulnerability due to $@. | ReflectedXssGood3.js:135:15:135:27 | req.params.id | user-provided value |
| etherpad.js:11:12:11:19 | response | etherpad.js:9:16:9:30 | req.query.jsonp | etherpad.js:11:12:11:19 | response | Cross-site scripting vulnerability due to $@. | etherpad.js:9:16:9:30 | req.query.jsonp | user-provided value |
| exception-xss.js:190:12:190:24 | req.params.id | exception-xss.js:190:12:190:24 | req.params.id | exception-xss.js:190:12:190:24 | req.params.id | Cross-site scripting vulnerability due to $@. | exception-xss.js:190:12:190:24 | req.params.id | user-provided value |
| formatting.js:6:14:6:47 | util.fo ... , evil) | formatting.js:4:16:4:29 | req.query.evil | formatting.js:6:14:6:47 | util.fo ... , evil) | Cross-site scripting vulnerability due to $@. | formatting.js:4:16:4:29 | req.query.evil | user-provided value |
| formatting.js:7:14:7:53 | require ... , evil) | formatting.js:4:16:4:29 | req.query.evil | formatting.js:7:14:7:53 | require ... , evil) | Cross-site scripting vulnerability due to $@. | formatting.js:4:16:4:29 | req.query.evil | user-provided value |
| partial.js:10:14:10:18 | x + y | partial.js:13:42:13:48 | req.url | partial.js:10:14:10:18 | x + y | Cross-site scripting vulnerability due to $@. | partial.js:13:42:13:48 | req.url | user-provided value |

0
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ReflectedXss.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss.qlref → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ReflectedXss.qlref
View File

0
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXssContentTypes.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ReflectedXssContentTypes.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXssGood.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ReflectedXssGood.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXssGood2.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ReflectedXssGood2.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXssGood3.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ReflectedXssGood3.js
View File

1
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXssWithCustomSanitizer.expected → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ReflectedXssWithCustomSanitizer.expected
View File

@@ -5,7 +5,6 @@
| ReflectedXssContentTypes.js:39:13:39:35 | "FOO: " ... rams.id | Cross-site scripting vulnerability due to $@. | ReflectedXssContentTypes.js:39:23:39:35 | req.params.id | user-provided value |
| ReflectedXssContentTypes.js:70:12:70:34 | "FOO: " ... rams.id | Cross-site scripting vulnerability due to $@. | ReflectedXssContentTypes.js:70:22:70:34 | req.params.id | user-provided value |
| ReflectedXssGood3.js:139:12:139:27 | escapeHtml3(url) | Cross-site scripting vulnerability due to $@. | ReflectedXssGood3.js:135:15:135:27 | req.params.id | user-provided value |
| exception-xss.js:190:12:190:24 | req.params.id | Cross-site scripting vulnerability due to $@. | exception-xss.js:190:12:190:24 | req.params.id | user-provided value |
| formatting.js:6:14:6:47 | util.fo ... , evil) | Cross-site scripting vulnerability due to $@. | formatting.js:4:16:4:29 | req.query.evil | user-provided value |
| formatting.js:7:14:7:53 | require ... , evil) | Cross-site scripting vulnerability due to $@. | formatting.js:4:16:4:29 | req.query.evil | user-provided value |
| partial.js:10:14:10:18 | x + y | Cross-site scripting vulnerability due to $@. | partial.js:13:42:13:48 | req.url | user-provided value |

0
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXssWithCustomSanitizer.ql → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/ReflectedXssWithCustomSanitizer.ql
View File

0
javascript/ql/test/query-tests/Security/CWE-079/cookies.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/cookies.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/etherpad.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/etherpad.js
View File

48
javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/externs.js Normal file
View File

@@ -0,0 +1,48 @@
// Adapted from the Google Closure externs; original copyright header included below.
/*
* Copyright 2008 The Closure Compiler Authors
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* @externs
*/
/**
* @interface
*/
function EventTarget() {}
/**
* Stub for the DOM hierarchy.
*
* @constructor
* @extends {EventTarget}
*/
function DomObjectStub() {}
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.body;
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.value;
/**
* @type {!DomObjectStub}
*/
var document;

0
javascript/ql/test/query-tests/Security/CWE-079/formatting.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/formatting.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/partial.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/partial.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/promises.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/promises.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/tst2.js → javascript/ql/test/query-tests/Security/CWE-079/ReflectedXss/tst2.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/StoredXss/ConsistencyStoredXss.expected Normal file
View File

3
javascript/ql/test/query-tests/Security/CWE-079/StoredXss/ConsistencyStoredXss.ql Normal file
View File

@@ -0,0 +1,3 @@
import javascript
import testUtilities.ConsistencyChecking
import semmle.javascript.security.dataflow.StoredXss as StoredXss

0
javascript/ql/test/query-tests/Security/CWE-079/StoredXss.expected → javascript/ql/test/query-tests/Security/CWE-079/StoredXss/StoredXss.expected
View File

0
javascript/ql/test/query-tests/Security/CWE-079/StoredXss.qlref → javascript/ql/test/query-tests/Security/CWE-079/StoredXss/StoredXss.qlref
View File

48
javascript/ql/test/query-tests/Security/CWE-079/StoredXss/externs.js Normal file
View File

@@ -0,0 +1,48 @@
// Adapted from the Google Closure externs; original copyright header included below.
/*
* Copyright 2008 The Closure Compiler Authors
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* @externs
*/
/**
* @interface
*/
function EventTarget() {}
/**
* Stub for the DOM hierarchy.
*
* @constructor
* @extends {EventTarget}
*/
function DomObjectStub() {}
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.body;
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.value;
/**
* @type {!DomObjectStub}
*/
var document;

0
javascript/ql/test/query-tests/Security/CWE-079/xss-through-filenames.js → javascript/ql/test/query-tests/Security/CWE-079/StoredXss/xss-through-filenames.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/xss-through-torrent.js → javascript/ql/test/query-tests/Security/CWE-079/StoredXss/xss-through-torrent.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/UnsafeJQueryPlugin/ConsistencyUnsafeJQueryPlugin.expected Normal file
View File

3
javascript/ql/test/query-tests/Security/CWE-079/UnsafeJQueryPlugin/ConsistencyUnsafeJQueryPlugin.ql Normal file
View File

@@ -0,0 +1,3 @@
import javascript
import testUtilities.ConsistencyChecking
import semmle.javascript.security.dataflow.UnsafeJQueryPlugin as UnsafeJqueryPlugin

0
javascript/ql/test/query-tests/Security/CWE-079/UnsafeJQueryPlugin.expected → javascript/ql/test/query-tests/Security/CWE-079/UnsafeJQueryPlugin/UnsafeJQueryPlugin.expected
View File

0
javascript/ql/test/query-tests/Security/CWE-079/UnsafeJQueryPlugin.qlref → javascript/ql/test/query-tests/Security/CWE-079/UnsafeJQueryPlugin/UnsafeJQueryPlugin.qlref
View File

48
javascript/ql/test/query-tests/Security/CWE-079/UnsafeJQueryPlugin/externs.js Normal file
View File

@@ -0,0 +1,48 @@
// Adapted from the Google Closure externs; original copyright header included below.
/*
* Copyright 2008 The Closure Compiler Authors
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* @externs
*/
/**
* @interface
*/
function EventTarget() {}
/**
* Stub for the DOM hierarchy.
*
* @constructor
* @extends {EventTarget}
*/
function DomObjectStub() {}
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.body;
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.value;
/**
* @type {!DomObjectStub}
*/
var document;

0
javascript/ql/test/query-tests/Security/CWE-079/unsafe-jquery-plugin.js → javascript/ql/test/query-tests/Security/CWE-079/UnsafeJQueryPlugin/unsafe-jquery-plugin.js
View File

0
javascript/ql/test/query-tests/Security/CWE-079/XssThroughDom/ConsistencyXssThroughDom.expected Normal file
View File

3
javascript/ql/test/query-tests/Security/CWE-079/XssThroughDom/ConsistencyXssThroughDom.ql Normal file
View File

@@ -0,0 +1,3 @@
import javascript
import testUtilities.ConsistencyChecking
import semmle.javascript.security.dataflow.XssThroughDom as ThroughDomXss

0
javascript/ql/test/query-tests/Security/CWE-079/XssThroughDom.expected → javascript/ql/test/query-tests/Security/CWE-079/XssThroughDom/XssThroughDom.expected
View File

0
javascript/ql/test/query-tests/Security/CWE-079/XssThroughDom.qlref → javascript/ql/test/query-tests/Security/CWE-079/XssThroughDom/XssThroughDom.qlref
View File

48
javascript/ql/test/query-tests/Security/CWE-079/XssThroughDom/externs.js Normal file
View File

@@ -0,0 +1,48 @@
// Adapted from the Google Closure externs; original copyright header included below.
/*
* Copyright 2008 The Closure Compiler Authors
*
* Licensed under the Apache License, Version 2.0 (the "License");
* you may not use this file except in compliance with the License.
* You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/
/**
* @externs
*/
/**
* @interface
*/
function EventTarget() {}
/**
* Stub for the DOM hierarchy.
*
* @constructor
* @extends {EventTarget}
*/
function DomObjectStub() {}
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.body;
/**
* @type {!DomObjectStub}
*/
DomObjectStub.prototype.value;
/**
* @type {!DomObjectStub}
*/
var document;

0
javascript/ql/test/query-tests/Security/CWE-079/xss-through-dom.js → javascript/ql/test/query-tests/Security/CWE-079/XssThroughDom/xss-through-dom.js
View File