hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9021 from erik-krogh/actions

Browse Source 
JS: promote `js/actions/injection` out of experimental
This commit is contained in:
Erik Krogh Kristensen
2022-05-12 14:38:38 +02:00
committed by GitHub
parent 7cd51d6147 fef4455ccc
commit 4bef451156
14 changed files with 379 additions and 360 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
javascript/ql/test/query-tests/Security/CWE-094/ExpressionInjection/.github/workflows/comment_issue.yml vendored Normal file
View File

@@ -0,0 +1,8 @@
on: issue_comment
jobs:
echo-chamber:
runs-on: ubuntu-latest
steps:
- run: |
echo '${{ github.event.comment.body }}'

1
javascript/ql/test/query-tests/Security/CWE-094/ExpressionInjection/ExpressionInjection.expected Normal file
View File

@@ -0,0 +1 @@
| .github/workflows/comment_issue.yml:7:12:8:47 | \| | Potential injection from the github.event.comment.body context, which may be controlled by an external user. |

1
javascript/ql/test/query-tests/Security/CWE-094/ExpressionInjection/ExpressionInjection.qlref Normal file
View File

@@ -0,0 +1 @@
Security/CWE-094/ExpressionInjection.ql

1
javascript/ql/test/query-tests/Security/CWE-094/ExpressionInjection/empty.js Normal file
View File

@@ -0,0 +1 @@
console.log('test')