hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Move an alert and add query ID

Browse Source
This commit is contained in:
Asger F
2025-02-12 15:33:35 +01:00
parent e91a046a17
commit 51b45598c4
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
javascript/ql/test/query-tests/Security/CWE-312/passwords.js
View File

@@ -139,19 +139,19 @@
});
function indirectLogCall() {
console.log.apply(this, arguments);
console.log.apply(this, arguments); // $ Alert[js/clear-text-logging]
}
var Util = require('util');
(function() {
var config = {
x: password
};
indirectLogCall(config.x); // $ Alert
indirectLogCall(process.env); // $ Alert
indirectLogCall(config.x);
indirectLogCall(process.env);
var procdesc = Util.inspect(process.env).replace(/\n/g, '')
indirectLogCall(procdesc); // $ Alert
indirectLogCall(procdesc);
console.log(process.env); // $ Alert[js/clear-text-logging]
console.log(process.env.PATH);