mirror of
https://github.com/github/codeql.git
synced 2026-04-24 08:15:14 +02:00
JS: Update some tests with provenance columns
Only includes the changes that purely contain the new provenance columns
This commit is contained in:
Asger F
@@ -1,25 +1,25 @@
|
||||
edges
|
||||
| check-domain.js:16:9:16:27 | url | check-domain.js:17:13:17:15 | url |
|
||||
| check-domain.js:16:15:16:27 | req.query.url | check-domain.js:16:9:16:27 | url |
|
||||
| check-middleware.js:9:27:9:43 | req.query.tainted | check-middleware.js:9:13:9:43 | "test.c ... tainted |
|
||||
| check-path.js:19:27:19:43 | req.query.tainted | check-path.js:19:13:19:43 | 'test.c ... tainted |
|
||||
| check-path.js:23:27:23:43 | req.query.tainted | check-path.js:23:13:23:45 | `/addre ... inted}` |
|
||||
| check-path.js:33:29:33:45 | req.query.tainted | check-path.js:33:15:33:45 | 'test.c ... tainted |
|
||||
| check-path.js:37:29:37:45 | req.query.tainted | check-path.js:37:15:37:45 | 'test.c ... tainted |
|
||||
| check-path.js:45:26:45:42 | req.query.tainted | check-path.js:45:13:45:44 | `${base ... inted}` |
|
||||
| check-regex.js:16:29:16:45 | req.query.tainted | check-regex.js:16:15:16:45 | "test.c ... tainted |
|
||||
| check-regex.js:24:25:24:42 | req.params.tainted | check-regex.js:24:15:24:42 | baseURL ... tainted |
|
||||
| check-regex.js:31:29:31:45 | req.query.tainted | check-regex.js:31:15:31:45 | "test.c ... tainted |
|
||||
| check-regex.js:34:25:34:42 | req.params.tainted | check-regex.js:34:15:34:42 | baseURL ... tainted |
|
||||
| check-regex.js:41:27:41:43 | req.query.tainted | check-regex.js:41:13:41:43 | "test.c ... tainted |
|
||||
| check-validator.js:15:29:15:45 | req.query.tainted | check-validator.js:15:15:15:45 | "test.c ... tainted |
|
||||
| check-validator.js:27:29:27:45 | req.query.tainted | check-validator.js:27:15:27:45 | "test.c ... tainted |
|
||||
| check-validator.js:50:29:50:45 | req.query.tainted | check-validator.js:50:15:50:45 | "test.c ... tainted |
|
||||
| check-validator.js:54:9:54:37 | numberURL | check-validator.js:62:29:62:37 | numberURL |
|
||||
| check-validator.js:54:21:54:37 | req.query.tainted | check-validator.js:54:9:54:37 | numberURL |
|
||||
| check-validator.js:59:29:59:45 | req.query.tainted | check-validator.js:59:15:59:45 | "test.c ... tainted |
|
||||
| check-validator.js:62:29:62:37 | numberURL | check-validator.js:62:15:62:37 | "test.c ... mberURL |
|
||||
| check-validator.js:68:29:68:45 | req.query.tainted | check-validator.js:68:15:68:45 | "test.c ... tainted |
|
||||
| check-domain.js:16:9:16:27 | url | check-domain.js:17:13:17:15 | url | provenance | |
|
||||
| check-domain.js:16:15:16:27 | req.query.url | check-domain.js:16:9:16:27 | url | provenance | |
|
||||
| check-middleware.js:9:27:9:43 | req.query.tainted | check-middleware.js:9:13:9:43 | "test.c ... tainted | provenance | |
|
||||
| check-path.js:19:27:19:43 | req.query.tainted | check-path.js:19:13:19:43 | 'test.c ... tainted | provenance | |
|
||||
| check-path.js:23:27:23:43 | req.query.tainted | check-path.js:23:13:23:45 | `/addre ... inted}` | provenance | |
|
||||
| check-path.js:33:29:33:45 | req.query.tainted | check-path.js:33:15:33:45 | 'test.c ... tainted | provenance | |
|
||||
| check-path.js:37:29:37:45 | req.query.tainted | check-path.js:37:15:37:45 | 'test.c ... tainted | provenance | |
|
||||
| check-path.js:45:26:45:42 | req.query.tainted | check-path.js:45:13:45:44 | `${base ... inted}` | provenance | |
|
||||
| check-regex.js:16:29:16:45 | req.query.tainted | check-regex.js:16:15:16:45 | "test.c ... tainted | provenance | |
|
||||
| check-regex.js:24:25:24:42 | req.params.tainted | check-regex.js:24:15:24:42 | baseURL ... tainted | provenance | |
|
||||
| check-regex.js:31:29:31:45 | req.query.tainted | check-regex.js:31:15:31:45 | "test.c ... tainted | provenance | |
|
||||
| check-regex.js:34:25:34:42 | req.params.tainted | check-regex.js:34:15:34:42 | baseURL ... tainted | provenance | |
|
||||
| check-regex.js:41:27:41:43 | req.query.tainted | check-regex.js:41:13:41:43 | "test.c ... tainted | provenance | |
|
||||
| check-validator.js:15:29:15:45 | req.query.tainted | check-validator.js:15:15:15:45 | "test.c ... tainted | provenance | |
|
||||
| check-validator.js:27:29:27:45 | req.query.tainted | check-validator.js:27:15:27:45 | "test.c ... tainted | provenance | |
|
||||
| check-validator.js:50:29:50:45 | req.query.tainted | check-validator.js:50:15:50:45 | "test.c ... tainted | provenance | |
|
||||
| check-validator.js:54:9:54:37 | numberURL | check-validator.js:62:29:62:37 | numberURL | provenance | |
|
||||
| check-validator.js:54:21:54:37 | req.query.tainted | check-validator.js:54:9:54:37 | numberURL | provenance | |
|
||||
| check-validator.js:59:29:59:45 | req.query.tainted | check-validator.js:59:15:59:45 | "test.c ... tainted | provenance | |
|
||||
| check-validator.js:62:29:62:37 | numberURL | check-validator.js:62:15:62:37 | "test.c ... mberURL | provenance | |
|
||||
| check-validator.js:68:29:68:45 | req.query.tainted | check-validator.js:68:15:68:45 | "test.c ... tainted | provenance | |
|
||||
nodes
|
||||
| check-domain.js:16:9:16:27 | url | semmle.label | url |
|
||||
| check-domain.js:16:15:16:27 | req.query.url | semmle.label | req.query.url |
|
||||
|
||||
@@ -48,12 +48,6 @@ dataFlow
|
||||
| partial.js:6:15:6:24 | "tainted2" | partial.js:42:15:42:15 | y |
|
||||
| partial.js:6:15:6:24 | "tainted2" | partial.js:48:15:48:15 | y |
|
||||
| partial.js:6:15:6:24 | "tainted2" | partial.js:54:15:54:15 | y |
|
||||
| promises.js:2:16:2:24 | "tainted" | promises.js:7:16:7:18 | val |
|
||||
| promises.js:2:16:2:24 | "tainted" | promises.js:38:32:38:32 | v |
|
||||
| promises.js:11:22:11:31 | "resolved" | promises.js:19:20:19:20 | v |
|
||||
| promises.js:12:22:12:31 | "rejected" | promises.js:21:20:21:20 | v |
|
||||
| promises.js:12:22:12:31 | "rejected" | promises.js:24:20:24:20 | v |
|
||||
| promises.js:32:24:32:37 | "also tainted" | promises.js:38:32:38:32 | v |
|
||||
| properties2.js:7:14:7:21 | "source" | properties2.js:8:12:8:24 | foo(source).p |
|
||||
| properties2.js:7:14:7:21 | "source" | properties2.js:17:13:17:15 | o.p |
|
||||
| properties2.js:7:14:7:21 | "source" | properties2.js:33:13:33:20 | getP(o3) |
|
||||
@@ -67,7 +61,6 @@ dataFlow
|
||||
| tst2.js:6:24:6:37 | "also tainted" | tst2.js:11:15:11:24 | g(source2) |
|
||||
| tst6.mjs:12:14:12:21 | "source" | tst6.mjs:14:12:14:16 | a.m() |
|
||||
| tst6.mjs:16:15:16:23 | "source2" | tst6.mjs:18:13:18:24 | a.m.call(a2) |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:28:20:28:22 | elt |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:39:17:39:17 | x |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:41:19:41:19 | x |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:45:17:45:17 | x |
|
||||
@@ -133,12 +126,6 @@ taintTracking
|
||||
| partial.js:6:15:6:24 | "tainted2" | partial.js:42:15:42:15 | y |
|
||||
| partial.js:6:15:6:24 | "tainted2" | partial.js:48:15:48:15 | y |
|
||||
| partial.js:6:15:6:24 | "tainted2" | partial.js:54:15:54:15 | y |
|
||||
| promises.js:2:16:2:24 | "tainted" | promises.js:7:16:7:18 | val |
|
||||
| promises.js:2:16:2:24 | "tainted" | promises.js:38:32:38:32 | v |
|
||||
| promises.js:11:22:11:31 | "resolved" | promises.js:19:20:19:20 | v |
|
||||
| promises.js:12:22:12:31 | "rejected" | promises.js:21:20:21:20 | v |
|
||||
| promises.js:12:22:12:31 | "rejected" | promises.js:24:20:24:20 | v |
|
||||
| promises.js:32:24:32:37 | "also tainted" | promises.js:38:32:38:32 | v |
|
||||
| properties2.js:7:14:7:21 | "source" | properties2.js:8:12:8:24 | foo(source).p |
|
||||
| properties2.js:7:14:7:21 | "source" | properties2.js:17:13:17:15 | o.p |
|
||||
| properties2.js:7:14:7:21 | "source" | properties2.js:33:13:33:20 | getP(o3) |
|
||||
@@ -167,7 +154,6 @@ taintTracking
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:19:16:19:34 | JSON.parse(source1) |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:20:16:20:37 | JSON.st ... sink10) |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:24:16:24:18 | foo |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:28:20:28:22 | elt |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:30:20:30:22 | ary |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:36:16:36:24 | dict[key] |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:39:17:39:17 | x |
|
||||
@@ -237,12 +223,6 @@ germanFlow
|
||||
| partial.js:6:15:6:24 | "tainted2" | partial.js:42:15:42:15 | y |
|
||||
| partial.js:6:15:6:24 | "tainted2" | partial.js:48:15:48:15 | y |
|
||||
| partial.js:6:15:6:24 | "tainted2" | partial.js:54:15:54:15 | y |
|
||||
| promises.js:2:16:2:24 | "tainted" | promises.js:7:16:7:18 | val |
|
||||
| promises.js:2:16:2:24 | "tainted" | promises.js:38:32:38:32 | v |
|
||||
| promises.js:11:22:11:31 | "resolved" | promises.js:19:20:19:20 | v |
|
||||
| promises.js:12:22:12:31 | "rejected" | promises.js:21:20:21:20 | v |
|
||||
| promises.js:12:22:12:31 | "rejected" | promises.js:24:20:24:20 | v |
|
||||
| promises.js:32:24:32:37 | "also tainted" | promises.js:38:32:38:32 | v |
|
||||
| properties2.js:7:14:7:21 | "source" | properties2.js:8:12:8:24 | foo(source).p |
|
||||
| properties2.js:7:14:7:21 | "source" | properties2.js:17:13:17:15 | o.p |
|
||||
| properties2.js:7:14:7:21 | "source" | properties2.js:33:13:33:20 | getP(o3) |
|
||||
@@ -256,7 +236,6 @@ germanFlow
|
||||
| tst2.js:6:24:6:37 | "also tainted" | tst2.js:11:15:11:24 | g(source2) |
|
||||
| tst6.mjs:12:14:12:21 | "source" | tst6.mjs:14:12:14:16 | a.m() |
|
||||
| tst6.mjs:16:15:16:23 | "source2" | tst6.mjs:18:13:18:24 | a.m.call(a2) |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:28:20:28:22 | elt |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:39:17:39:17 | x |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:41:19:41:19 | x |
|
||||
| tst.js:2:17:2:22 | "src1" | tst.js:45:17:45:17 | x |
|
||||
|
||||
@@ -1,36 +1,36 @@
|
||||
edges
|
||||
| app.js:15:30:15:58 | req.que ... tedCode | views/ejs_sinks.ejs:13:43:13:61 | dataInGeneratedCode |
|
||||
| app.js:17:25:17:48 | req.que ... shSink1 | views/ejs_sinks.ejs:16:23:16:36 | backslashSink1 |
|
||||
| app.js:19:35:19:68 | req.que ... rString | views/ejs_sinks.ejs:21:43:21:66 | dataInE ... rString |
|
||||
| app.js:34:30:34:58 | req.que ... tedCode | views/hbs_sinks.hbs:25:42:25:60 | dataInGeneratedCode |
|
||||
| app.js:36:25:36:48 | req.que ... shSink1 | views/hbs_sinks.hbs:28:22:28:35 | backslashSink1 |
|
||||
| app.js:38:35:38:68 | req.que ... rString | views/hbs_sinks.hbs:33:42:33:65 | dataInE ... rString |
|
||||
| app.js:53:30:53:58 | req.que ... tedCode | views/njk_sinks.njk:13:42:13:60 | dataInGeneratedCode |
|
||||
| app.js:54:33:54:64 | req.que ... CodeRaw | views/njk_sinks.njk:14:45:14:66 | dataInG ... CodeRaw |
|
||||
| app.js:56:25:56:48 | req.que ... shSink1 | views/njk_sinks.njk:17:22:17:35 | backslashSink1 |
|
||||
| app.js:58:35:58:68 | req.que ... rString | views/njk_sinks.njk:22:42:22:65 | dataInE ... rString |
|
||||
| app.js:59:38:59:74 | req.que ... ringRaw | views/njk_sinks.njk:23:42:23:68 | dataInE ... ringRaw |
|
||||
| app.js:65:22:65:42 | req.que ... pedHtml | views/angularjs_include.ejs:2:9:2:19 | escapedHtml |
|
||||
| app.js:65:22:65:42 | req.que ... pedHtml | views/angularjs_sinks.ejs:3:13:3:23 | escapedHtml |
|
||||
| app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_include.ejs:3:9:3:15 | rawHtml |
|
||||
| app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_sinks.ejs:4:13:4:19 | rawHtml |
|
||||
| views/angularjs_include.ejs:2:9:2:19 | escapedHtml | views/angularjs_include.ejs:2:5:2:22 | <%= escapedHtml %> |
|
||||
| views/angularjs_include.ejs:3:9:3:15 | rawHtml | views/angularjs_include.ejs:3:5:3:18 | <%- rawHtml %> |
|
||||
| views/angularjs_sinks.ejs:3:13:3:23 | escapedHtml | views/angularjs_sinks.ejs:3:9:3:26 | <%= escapedHtml %> |
|
||||
| views/angularjs_sinks.ejs:4:13:4:19 | rawHtml | views/angularjs_sinks.ejs:4:9:4:22 | <%- rawHtml %> |
|
||||
| views/ejs_sinks.ejs:13:43:13:61 | dataInGeneratedCode | views/ejs_sinks.ejs:13:39:13:64 | <%= dataInGeneratedCode %> |
|
||||
| views/ejs_sinks.ejs:16:23:16:36 | backslashSink1 | views/ejs_sinks.ejs:16:19:16:39 | <%= backslashSink1 %> |
|
||||
| views/ejs_sinks.ejs:21:43:21:66 | dataInE ... rString | views/ejs_sinks.ejs:21:39:21:69 | <%= dataInEventHandlerString %> |
|
||||
| views/hbs_sinks.hbs:25:42:25:60 | dataInGeneratedCode | views/hbs_sinks.hbs:25:39:25:63 | {{ dataInGeneratedCode }} |
|
||||
| views/hbs_sinks.hbs:28:22:28:35 | backslashSink1 | views/hbs_sinks.hbs:28:19:28:38 | {{ backslashSink1 }} |
|
||||
| views/hbs_sinks.hbs:33:42:33:65 | dataInE ... rString | views/hbs_sinks.hbs:33:39:33:68 | {{ dataInEventHandlerString }} |
|
||||
| views/njk_sinks.njk:13:42:13:60 | dataInGeneratedCode | views/njk_sinks.njk:13:39:13:63 | {{ dataInGeneratedCode }} |
|
||||
| views/njk_sinks.njk:14:45:14:66 | dataInG ... CodeRaw | views/njk_sinks.njk:14:45:14:73 | dataInG ... \| safe |
|
||||
| views/njk_sinks.njk:14:45:14:73 | dataInG ... \| safe | views/njk_sinks.njk:14:42:14:76 | {{ dataInGeneratedCodeRaw \| safe }} |
|
||||
| views/njk_sinks.njk:17:22:17:35 | backslashSink1 | views/njk_sinks.njk:17:19:17:38 | {{ backslashSink1 }} |
|
||||
| views/njk_sinks.njk:22:42:22:65 | dataInE ... rString | views/njk_sinks.njk:22:39:22:68 | {{ dataInEventHandlerString }} |
|
||||
| views/njk_sinks.njk:23:42:23:68 | dataInE ... ringRaw | views/njk_sinks.njk:23:42:23:75 | dataInE ... \| safe |
|
||||
| views/njk_sinks.njk:23:42:23:75 | dataInE ... \| safe | views/njk_sinks.njk:23:39:23:78 | {{ dataInEventHandlerStringRaw \| safe }} |
|
||||
| app.js:15:30:15:58 | req.que ... tedCode | views/ejs_sinks.ejs:13:43:13:61 | dataInGeneratedCode | provenance | |
|
||||
| app.js:17:25:17:48 | req.que ... shSink1 | views/ejs_sinks.ejs:16:23:16:36 | backslashSink1 | provenance | |
|
||||
| app.js:19:35:19:68 | req.que ... rString | views/ejs_sinks.ejs:21:43:21:66 | dataInE ... rString | provenance | |
|
||||
| app.js:34:30:34:58 | req.que ... tedCode | views/hbs_sinks.hbs:25:42:25:60 | dataInGeneratedCode | provenance | |
|
||||
| app.js:36:25:36:48 | req.que ... shSink1 | views/hbs_sinks.hbs:28:22:28:35 | backslashSink1 | provenance | |
|
||||
| app.js:38:35:38:68 | req.que ... rString | views/hbs_sinks.hbs:33:42:33:65 | dataInE ... rString | provenance | |
|
||||
| app.js:53:30:53:58 | req.que ... tedCode | views/njk_sinks.njk:13:42:13:60 | dataInGeneratedCode | provenance | |
|
||||
| app.js:54:33:54:64 | req.que ... CodeRaw | views/njk_sinks.njk:14:45:14:66 | dataInG ... CodeRaw | provenance | |
|
||||
| app.js:56:25:56:48 | req.que ... shSink1 | views/njk_sinks.njk:17:22:17:35 | backslashSink1 | provenance | |
|
||||
| app.js:58:35:58:68 | req.que ... rString | views/njk_sinks.njk:22:42:22:65 | dataInE ... rString | provenance | |
|
||||
| app.js:59:38:59:74 | req.que ... ringRaw | views/njk_sinks.njk:23:42:23:68 | dataInE ... ringRaw | provenance | |
|
||||
| app.js:65:22:65:42 | req.que ... pedHtml | views/angularjs_include.ejs:2:9:2:19 | escapedHtml | provenance | |
|
||||
| app.js:65:22:65:42 | req.que ... pedHtml | views/angularjs_sinks.ejs:3:13:3:23 | escapedHtml | provenance | |
|
||||
| app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_include.ejs:3:9:3:15 | rawHtml | provenance | |
|
||||
| app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_sinks.ejs:4:13:4:19 | rawHtml | provenance | |
|
||||
| views/angularjs_include.ejs:2:9:2:19 | escapedHtml | views/angularjs_include.ejs:2:5:2:22 | <%= escapedHtml %> | provenance | |
|
||||
| views/angularjs_include.ejs:3:9:3:15 | rawHtml | views/angularjs_include.ejs:3:5:3:18 | <%- rawHtml %> | provenance | |
|
||||
| views/angularjs_sinks.ejs:3:13:3:23 | escapedHtml | views/angularjs_sinks.ejs:3:9:3:26 | <%= escapedHtml %> | provenance | |
|
||||
| views/angularjs_sinks.ejs:4:13:4:19 | rawHtml | views/angularjs_sinks.ejs:4:9:4:22 | <%- rawHtml %> | provenance | |
|
||||
| views/ejs_sinks.ejs:13:43:13:61 | dataInGeneratedCode | views/ejs_sinks.ejs:13:39:13:64 | <%= dataInGeneratedCode %> | provenance | |
|
||||
| views/ejs_sinks.ejs:16:23:16:36 | backslashSink1 | views/ejs_sinks.ejs:16:19:16:39 | <%= backslashSink1 %> | provenance | |
|
||||
| views/ejs_sinks.ejs:21:43:21:66 | dataInE ... rString | views/ejs_sinks.ejs:21:39:21:69 | <%= dataInEventHandlerString %> | provenance | |
|
||||
| views/hbs_sinks.hbs:25:42:25:60 | dataInGeneratedCode | views/hbs_sinks.hbs:25:39:25:63 | {{ dataInGeneratedCode }} | provenance | |
|
||||
| views/hbs_sinks.hbs:28:22:28:35 | backslashSink1 | views/hbs_sinks.hbs:28:19:28:38 | {{ backslashSink1 }} | provenance | |
|
||||
| views/hbs_sinks.hbs:33:42:33:65 | dataInE ... rString | views/hbs_sinks.hbs:33:39:33:68 | {{ dataInEventHandlerString }} | provenance | |
|
||||
| views/njk_sinks.njk:13:42:13:60 | dataInGeneratedCode | views/njk_sinks.njk:13:39:13:63 | {{ dataInGeneratedCode }} | provenance | |
|
||||
| views/njk_sinks.njk:14:45:14:66 | dataInG ... CodeRaw | views/njk_sinks.njk:14:45:14:73 | dataInG ... \| safe | provenance | |
|
||||
| views/njk_sinks.njk:14:45:14:73 | dataInG ... \| safe | views/njk_sinks.njk:14:42:14:76 | {{ dataInGeneratedCodeRaw \| safe }} | provenance | |
|
||||
| views/njk_sinks.njk:17:22:17:35 | backslashSink1 | views/njk_sinks.njk:17:19:17:38 | {{ backslashSink1 }} | provenance | |
|
||||
| views/njk_sinks.njk:22:42:22:65 | dataInE ... rString | views/njk_sinks.njk:22:39:22:68 | {{ dataInEventHandlerString }} | provenance | |
|
||||
| views/njk_sinks.njk:23:42:23:68 | dataInE ... ringRaw | views/njk_sinks.njk:23:42:23:75 | dataInE ... \| safe | provenance | |
|
||||
| views/njk_sinks.njk:23:42:23:75 | dataInE ... \| safe | views/njk_sinks.njk:23:39:23:78 | {{ dataInEventHandlerStringRaw \| safe }} | provenance | |
|
||||
nodes
|
||||
| app.js:15:30:15:58 | req.que ... tedCode | semmle.label | req.que ... tedCode |
|
||||
| app.js:17:25:17:48 | req.que ... shSink1 | semmle.label | req.que ... shSink1 |
|
||||
|
||||
@@ -1,33 +1,33 @@
|
||||
edges
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:5:13:5:21 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:6:17:6:25 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:7:16:7:24 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:8:31:8:39 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:9:18:9:26 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:10:19:10:27 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:11:20:11:28 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:15:16:15:24 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:33:14:33:22 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:34:34:34:42 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:42:8:42:16 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:43:8:43:16 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:44:8:44:16 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:17:3:27 | window.name | tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:10:13:10:33 | ['x', u ... d, 'y'] [1] | tst-UntrustedDataToExternalAPI.js:10:13:10:33 | ['x', u ... d, 'y'] |
|
||||
| tst-UntrustedDataToExternalAPI.js:10:19:10:27 | untrusted | tst-UntrustedDataToExternalAPI.js:10:13:10:33 | ['x', u ... d, 'y'] |
|
||||
| tst-UntrustedDataToExternalAPI.js:10:19:10:27 | untrusted | tst-UntrustedDataToExternalAPI.js:10:13:10:33 | ['x', u ... d, 'y'] [1] |
|
||||
| tst-UntrustedDataToExternalAPI.js:13:8:17:5 | {\\n ... }\\n } [y, z] | tst-UntrustedDataToExternalAPI.js:13:8:17:5 | {\\n ... }\\n } |
|
||||
| tst-UntrustedDataToExternalAPI.js:14:12:16:9 | {\\n ... } [z] | tst-UntrustedDataToExternalAPI.js:13:8:17:5 | {\\n ... }\\n } [y, z] |
|
||||
| tst-UntrustedDataToExternalAPI.js:15:16:15:24 | untrusted | tst-UntrustedDataToExternalAPI.js:14:12:16:9 | {\\n ... } [z] |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [x] | tst-UntrustedDataToExternalAPI.js:41:7:41:8 | {} |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [x] | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | {\\n x ... usted\\n} |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [y] | tst-UntrustedDataToExternalAPI.js:41:7:41:8 | {} |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [y] | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | {\\n x ... usted\\n} |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [z] | tst-UntrustedDataToExternalAPI.js:41:7:41:8 | {} |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [z] | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | {\\n x ... usted\\n} |
|
||||
| tst-UntrustedDataToExternalAPI.js:42:8:42:16 | untrusted | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [x] |
|
||||
| tst-UntrustedDataToExternalAPI.js:43:8:43:16 | untrusted | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [y] |
|
||||
| tst-UntrustedDataToExternalAPI.js:44:8:44:16 | untrusted | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [z] |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:5:13:5:21 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:6:17:6:25 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:7:16:7:24 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:8:31:8:39 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:9:18:9:26 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:10:19:10:27 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:11:20:11:28 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:15:16:15:24 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:33:14:33:22 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:34:34:34:42 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:42:8:42:16 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:43:8:43:16 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | tst-UntrustedDataToExternalAPI.js:44:8:44:16 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:17:3:27 | window.name | tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:10:13:10:33 | ['x', u ... d, 'y'] [1] | tst-UntrustedDataToExternalAPI.js:10:13:10:33 | ['x', u ... d, 'y'] | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:10:19:10:27 | untrusted | tst-UntrustedDataToExternalAPI.js:10:13:10:33 | ['x', u ... d, 'y'] | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:10:19:10:27 | untrusted | tst-UntrustedDataToExternalAPI.js:10:13:10:33 | ['x', u ... d, 'y'] [1] | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:13:8:17:5 | {\\n ... }\\n } [y, z] | tst-UntrustedDataToExternalAPI.js:13:8:17:5 | {\\n ... }\\n } | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:14:12:16:9 | {\\n ... } [z] | tst-UntrustedDataToExternalAPI.js:13:8:17:5 | {\\n ... }\\n } [y, z] | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:15:16:15:24 | untrusted | tst-UntrustedDataToExternalAPI.js:14:12:16:9 | {\\n ... } [z] | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [x] | tst-UntrustedDataToExternalAPI.js:41:7:41:8 | {} | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [x] | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | {\\n x ... usted\\n} | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [y] | tst-UntrustedDataToExternalAPI.js:41:7:41:8 | {} | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [y] | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | {\\n x ... usted\\n} | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [z] | tst-UntrustedDataToExternalAPI.js:41:7:41:8 | {} | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [z] | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | {\\n x ... usted\\n} | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:42:8:42:16 | untrusted | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [x] | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:43:8:43:16 | untrusted | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [y] | provenance | |
|
||||
| tst-UntrustedDataToExternalAPI.js:44:8:44:16 | untrusted | tst-UntrustedDataToExternalAPI.js:41:11:45:1 | [post update] {\\n x ... usted\\n} [z] | provenance | |
|
||||
nodes
|
||||
| tst-UntrustedDataToExternalAPI.js:3:5:3:27 | untrusted | semmle.label | untrusted |
|
||||
| tst-UntrustedDataToExternalAPI.js:3:17:3:27 | window.name | semmle.label | window.name |
|
||||
|
||||
@@ -23,19 +23,19 @@ nodes
|
||||
| ZipSlipBadUnzipper.js:7:20:7:29 | entry.path | semmle.label | entry.path |
|
||||
| ZipSlipBadUnzipper.js:8:37:8:44 | fileName | semmle.label | fileName |
|
||||
edges
|
||||
| ZipSlipBad2.js:5:9:5:46 | fileName | ZipSlipBad2.js:6:22:6:29 | fileName |
|
||||
| ZipSlipBad2.js:5:20:5:46 | 'output ... ry.path | ZipSlipBad2.js:5:9:5:46 | fileName |
|
||||
| ZipSlipBad2.js:5:37:5:46 | entry.path | ZipSlipBad2.js:5:20:5:46 | 'output ... ry.path |
|
||||
| ZipSlipBad.js:7:11:7:31 | fileName | ZipSlipBad.js:8:37:8:44 | fileName |
|
||||
| ZipSlipBad.js:7:22:7:31 | entry.path | ZipSlipBad.js:7:11:7:31 | fileName |
|
||||
| ZipSlipBad.js:15:11:15:31 | fileName | ZipSlipBad.js:16:30:16:37 | fileName |
|
||||
| ZipSlipBad.js:15:22:15:31 | entry.path | ZipSlipBad.js:15:11:15:31 | fileName |
|
||||
| ZipSlipBad.js:22:11:22:31 | fileName | ZipSlipBad.js:23:28:23:35 | fileName |
|
||||
| ZipSlipBad.js:22:22:22:31 | entry.path | ZipSlipBad.js:22:11:22:31 | fileName |
|
||||
| ZipSlipBad.js:30:14:30:17 | name | ZipSlipBad.js:31:26:31:29 | name |
|
||||
| ZipSlipBad.js:34:16:34:19 | name | ZipSlipBad.js:35:26:35:29 | name |
|
||||
| ZipSlipBadUnzipper.js:7:9:7:29 | fileName | ZipSlipBadUnzipper.js:8:37:8:44 | fileName |
|
||||
| ZipSlipBadUnzipper.js:7:20:7:29 | entry.path | ZipSlipBadUnzipper.js:7:9:7:29 | fileName |
|
||||
| ZipSlipBad2.js:5:9:5:46 | fileName | ZipSlipBad2.js:6:22:6:29 | fileName | provenance | |
|
||||
| ZipSlipBad2.js:5:20:5:46 | 'output ... ry.path | ZipSlipBad2.js:5:9:5:46 | fileName | provenance | |
|
||||
| ZipSlipBad2.js:5:37:5:46 | entry.path | ZipSlipBad2.js:5:20:5:46 | 'output ... ry.path | provenance | Config |
|
||||
| ZipSlipBad.js:7:11:7:31 | fileName | ZipSlipBad.js:8:37:8:44 | fileName | provenance | |
|
||||
| ZipSlipBad.js:7:22:7:31 | entry.path | ZipSlipBad.js:7:11:7:31 | fileName | provenance | |
|
||||
| ZipSlipBad.js:15:11:15:31 | fileName | ZipSlipBad.js:16:30:16:37 | fileName | provenance | |
|
||||
| ZipSlipBad.js:15:22:15:31 | entry.path | ZipSlipBad.js:15:11:15:31 | fileName | provenance | |
|
||||
| ZipSlipBad.js:22:11:22:31 | fileName | ZipSlipBad.js:23:28:23:35 | fileName | provenance | |
|
||||
| ZipSlipBad.js:22:22:22:31 | entry.path | ZipSlipBad.js:22:11:22:31 | fileName | provenance | |
|
||||
| ZipSlipBad.js:30:14:30:17 | name | ZipSlipBad.js:31:26:31:29 | name | provenance | |
|
||||
| ZipSlipBad.js:34:16:34:19 | name | ZipSlipBad.js:35:26:35:29 | name | provenance | |
|
||||
| ZipSlipBadUnzipper.js:7:9:7:29 | fileName | ZipSlipBadUnzipper.js:8:37:8:44 | fileName | provenance | |
|
||||
| ZipSlipBadUnzipper.js:7:20:7:29 | entry.path | ZipSlipBadUnzipper.js:7:9:7:29 | fileName | provenance | |
|
||||
subpaths
|
||||
#select
|
||||
| AdmZipBad.js:6:24:6:41 | zipEntry.entryName | AdmZipBad.js:6:24:6:41 | zipEntry.entryName | AdmZipBad.js:6:24:6:41 | zipEntry.entryName | Unsanitized archive entry, which may contain '..', is used in a $@. | AdmZipBad.js:6:24:6:41 | zipEntry.entryName | file system operation |
|
||||
|
||||
@@ -36,34 +36,34 @@ nodes
|
||||
| tst.js:29:28:29:42 | JSON.parse(str) | semmle.label | JSON.parse(str) |
|
||||
| tst.js:29:39:29:41 | str | semmle.label | str |
|
||||
edges
|
||||
| tst2.js:6:9:6:46 | bodyParameter | tst2.js:7:28:7:40 | bodyParameter |
|
||||
| tst2.js:6:25:6:32 | req.body | tst2.js:6:25:6:46 | req.bod ... rameter |
|
||||
| tst2.js:6:25:6:46 | req.bod ... rameter | tst2.js:6:9:6:46 | bodyParameter |
|
||||
| tst2.js:26:9:26:46 | bodyParameter | tst2.js:27:28:27:40 | bodyParameter |
|
||||
| tst2.js:26:25:26:32 | req.body | tst2.js:26:25:26:46 | req.bod ... rameter |
|
||||
| tst2.js:26:25:26:46 | req.bod ... rameter | tst2.js:26:9:26:46 | bodyParameter |
|
||||
| tst2.js:34:9:34:46 | bodyParameter | tst2.js:35:28:35:40 | bodyParameter |
|
||||
| tst2.js:34:25:34:32 | req.body | tst2.js:34:25:34:46 | req.bod ... rameter |
|
||||
| tst2.js:34:25:34:46 | req.bod ... rameter | tst2.js:34:9:34:46 | bodyParameter |
|
||||
| tst2.js:42:9:42:46 | bodyParameter | tst2.js:43:28:43:40 | bodyParameter |
|
||||
| tst2.js:42:25:42:32 | req.body | tst2.js:42:25:42:46 | req.bod ... rameter |
|
||||
| tst2.js:42:25:42:46 | req.bod ... rameter | tst2.js:42:9:42:46 | bodyParameter |
|
||||
| tst2.js:51:9:51:46 | bodyParameter | tst2.js:52:28:52:40 | bodyParameter |
|
||||
| tst2.js:51:25:51:32 | req.body | tst2.js:51:25:51:46 | req.bod ... rameter |
|
||||
| tst2.js:51:25:51:46 | req.bod ... rameter | tst2.js:51:9:51:46 | bodyParameter |
|
||||
| tst.js:7:9:7:46 | bodyParameter | tst.js:10:28:10:40 | bodyParameter |
|
||||
| tst.js:7:25:7:32 | req.body | tst.js:7:25:7:46 | req.bod ... rameter |
|
||||
| tst.js:7:25:7:46 | req.bod ... rameter | tst.js:7:9:7:46 | bodyParameter |
|
||||
| tst.js:8:9:8:49 | queryParameter | tst.js:11:28:11:41 | queryParameter |
|
||||
| tst.js:8:9:8:49 | queryParameter | tst.js:20:19:20:32 | queryParameter |
|
||||
| tst.js:8:26:8:49 | req.que ... rameter | tst.js:8:9:8:49 | queryParameter |
|
||||
| tst.js:20:19:20:32 | queryParameter | tst.js:23:24:23:26 | obj |
|
||||
| tst.js:23:24:23:26 | obj | tst.js:24:28:24:30 | obj |
|
||||
| tst.js:23:24:23:26 | obj | tst.js:26:17:26:19 | obj |
|
||||
| tst.js:26:11:26:24 | str | tst.js:29:39:29:41 | str |
|
||||
| tst.js:26:17:26:19 | obj | tst.js:26:17:26:24 | obj + "" |
|
||||
| tst.js:26:17:26:24 | obj + "" | tst.js:26:11:26:24 | str |
|
||||
| tst.js:29:39:29:41 | str | tst.js:29:28:29:42 | JSON.parse(str) |
|
||||
| tst2.js:6:9:6:46 | bodyParameter | tst2.js:7:28:7:40 | bodyParameter | provenance | |
|
||||
| tst2.js:6:25:6:32 | req.body | tst2.js:6:25:6:46 | req.bod ... rameter | provenance | Config |
|
||||
| tst2.js:6:25:6:46 | req.bod ... rameter | tst2.js:6:9:6:46 | bodyParameter | provenance | |
|
||||
| tst2.js:26:9:26:46 | bodyParameter | tst2.js:27:28:27:40 | bodyParameter | provenance | |
|
||||
| tst2.js:26:25:26:32 | req.body | tst2.js:26:25:26:46 | req.bod ... rameter | provenance | Config |
|
||||
| tst2.js:26:25:26:46 | req.bod ... rameter | tst2.js:26:9:26:46 | bodyParameter | provenance | |
|
||||
| tst2.js:34:9:34:46 | bodyParameter | tst2.js:35:28:35:40 | bodyParameter | provenance | |
|
||||
| tst2.js:34:25:34:32 | req.body | tst2.js:34:25:34:46 | req.bod ... rameter | provenance | Config |
|
||||
| tst2.js:34:25:34:46 | req.bod ... rameter | tst2.js:34:9:34:46 | bodyParameter | provenance | |
|
||||
| tst2.js:42:9:42:46 | bodyParameter | tst2.js:43:28:43:40 | bodyParameter | provenance | |
|
||||
| tst2.js:42:25:42:32 | req.body | tst2.js:42:25:42:46 | req.bod ... rameter | provenance | Config |
|
||||
| tst2.js:42:25:42:46 | req.bod ... rameter | tst2.js:42:9:42:46 | bodyParameter | provenance | |
|
||||
| tst2.js:51:9:51:46 | bodyParameter | tst2.js:52:28:52:40 | bodyParameter | provenance | |
|
||||
| tst2.js:51:25:51:32 | req.body | tst2.js:51:25:51:46 | req.bod ... rameter | provenance | Config |
|
||||
| tst2.js:51:25:51:46 | req.bod ... rameter | tst2.js:51:9:51:46 | bodyParameter | provenance | |
|
||||
| tst.js:7:9:7:46 | bodyParameter | tst.js:10:28:10:40 | bodyParameter | provenance | |
|
||||
| tst.js:7:25:7:32 | req.body | tst.js:7:25:7:46 | req.bod ... rameter | provenance | Config |
|
||||
| tst.js:7:25:7:46 | req.bod ... rameter | tst.js:7:9:7:46 | bodyParameter | provenance | |
|
||||
| tst.js:8:9:8:49 | queryParameter | tst.js:11:28:11:41 | queryParameter | provenance | |
|
||||
| tst.js:8:9:8:49 | queryParameter | tst.js:20:19:20:32 | queryParameter | provenance | |
|
||||
| tst.js:8:26:8:49 | req.que ... rameter | tst.js:8:9:8:49 | queryParameter | provenance | |
|
||||
| tst.js:20:19:20:32 | queryParameter | tst.js:23:24:23:26 | obj | provenance | |
|
||||
| tst.js:23:24:23:26 | obj | tst.js:24:28:24:30 | obj | provenance | |
|
||||
| tst.js:23:24:23:26 | obj | tst.js:26:17:26:19 | obj | provenance | |
|
||||
| tst.js:26:11:26:24 | str | tst.js:29:39:29:41 | str | provenance | |
|
||||
| tst.js:26:17:26:19 | obj | tst.js:26:17:26:24 | obj + "" | provenance | Config |
|
||||
| tst.js:26:17:26:24 | obj + "" | tst.js:26:11:26:24 | str | provenance | |
|
||||
| tst.js:29:39:29:41 | str | tst.js:29:28:29:42 | JSON.parse(str) | provenance | Config |
|
||||
subpaths
|
||||
#select
|
||||
| routes.js:2:23:2:30 | req.body | routes.js:2:23:2:30 | req.body | routes.js:2:23:2:30 | req.body | Template object depends on a $@. | routes.js:2:23:2:30 | req.body | user-provided value |
|
||||
|
||||
@@ -13,13 +13,13 @@ nodes
|
||||
| second-order.js:42:31:42:46 | req.query.remote | semmle.label | req.query.remote |
|
||||
| second-order.js:44:18:44:31 | req.query.args | semmle.label | req.query.args |
|
||||
edges
|
||||
| second-order.js:6:9:6:33 | remote | second-order.js:7:33:7:38 | remote |
|
||||
| second-order.js:6:9:6:33 | remote | second-order.js:9:29:9:34 | remote |
|
||||
| second-order.js:6:9:6:33 | remote | second-order.js:11:33:11:38 | remote |
|
||||
| second-order.js:6:9:6:33 | remote | second-order.js:26:35:26:40 | remote |
|
||||
| second-order.js:6:18:6:33 | req.query.remote | second-order.js:6:9:6:33 | remote |
|
||||
| second-order.js:13:9:13:31 | myArgs | second-order.js:15:19:15:24 | myArgs |
|
||||
| second-order.js:13:18:13:31 | req.query.args | second-order.js:13:9:13:31 | myArgs |
|
||||
| second-order.js:6:9:6:33 | remote | second-order.js:7:33:7:38 | remote | provenance | |
|
||||
| second-order.js:6:9:6:33 | remote | second-order.js:9:29:9:34 | remote | provenance | |
|
||||
| second-order.js:6:9:6:33 | remote | second-order.js:11:33:11:38 | remote | provenance | |
|
||||
| second-order.js:6:9:6:33 | remote | second-order.js:26:35:26:40 | remote | provenance | |
|
||||
| second-order.js:6:18:6:33 | req.query.remote | second-order.js:6:9:6:33 | remote | provenance | |
|
||||
| second-order.js:13:9:13:31 | myArgs | second-order.js:15:19:15:24 | myArgs | provenance | |
|
||||
| second-order.js:13:18:13:31 | req.query.args | second-order.js:13:9:13:31 | myArgs | provenance | |
|
||||
subpaths
|
||||
#select
|
||||
| second-order.js:7:33:7:38 | remote | second-order.js:6:18:6:33 | req.query.remote | second-order.js:7:33:7:38 | remote | Command line argument that depends on $@ can execute an arbitrary command if --upload-pack is used with git. | second-order.js:6:18:6:33 | req.query.remote | a user-provided value |
|
||||
|
||||
@@ -1,62 +1,62 @@
|
||||
edges
|
||||
| unsafe-jquery-plugin.js:2:38:2:44 | options | unsafe-jquery-plugin.js:3:5:3:11 | options |
|
||||
| unsafe-jquery-plugin.js:2:38:2:44 | options | unsafe-jquery-plugin.js:5:5:5:11 | options |
|
||||
| unsafe-jquery-plugin.js:2:38:2:44 | options | unsafe-jquery-plugin.js:7:17:7:23 | options |
|
||||
| unsafe-jquery-plugin.js:2:38:2:44 | options | unsafe-jquery-plugin.js:11:16:11:22 | options |
|
||||
| unsafe-jquery-plugin.js:5:5:5:11 | options | unsafe-jquery-plugin.js:5:5:5:18 | options.target |
|
||||
| unsafe-jquery-plugin.js:5:5:5:11 | options | unsafe-jquery-plugin.js:5:5:5:18 | options.target |
|
||||
| unsafe-jquery-plugin.js:5:5:5:18 | options.target | unsafe-jquery-plugin.js:11:16:11:29 | options.target |
|
||||
| unsafe-jquery-plugin.js:7:17:7:23 | options | unsafe-jquery-plugin.js:7:17:7:30 | options.target |
|
||||
| unsafe-jquery-plugin.js:7:17:7:30 | options.target | unsafe-jquery-plugin.js:11:16:11:29 | options.target |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:22:6:22:11 | target |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:30:6:30:11 | target |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:36:6:36:11 | target |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:40:6:40:11 | target |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:48:6:48:11 | target |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:52:6:52:11 | target |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:60:6:60:11 | target |
|
||||
| unsafe-jquery-plugin.js:11:16:11:22 | options | unsafe-jquery-plugin.js:11:16:11:29 | options.target |
|
||||
| unsafe-jquery-plugin.js:11:16:11:29 | options.target | unsafe-jquery-plugin.js:11:7:11:29 | target |
|
||||
| unsafe-jquery-plugin.js:71:38:71:44 | options | unsafe-jquery-plugin.js:72:5:72:11 | options |
|
||||
| unsafe-jquery-plugin.js:72:5:72:11 | options | unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz |
|
||||
| unsafe-jquery-plugin.js:76:38:76:44 | options | unsafe-jquery-plugin.js:77:17:77:23 | options |
|
||||
| unsafe-jquery-plugin.js:77:17:77:23 | options | unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz |
|
||||
| unsafe-jquery-plugin.js:101:38:101:44 | options | unsafe-jquery-plugin.js:105:6:105:12 | options |
|
||||
| unsafe-jquery-plugin.js:102:3:105:13 | options | unsafe-jquery-plugin.js:107:5:107:11 | options |
|
||||
| unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | unsafe-jquery-plugin.js:102:3:105:13 | options |
|
||||
| unsafe-jquery-plugin.js:105:6:105:12 | options | unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) |
|
||||
| unsafe-jquery-plugin.js:107:5:107:11 | options | unsafe-jquery-plugin.js:107:5:107:18 | options.target |
|
||||
| unsafe-jquery-plugin.js:114:38:114:44 | options | unsafe-jquery-plugin.js:115:51:115:57 | options |
|
||||
| unsafe-jquery-plugin.js:115:3:115:58 | options | unsafe-jquery-plugin.js:117:5:117:11 | options |
|
||||
| unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | unsafe-jquery-plugin.js:115:3:115:58 | options |
|
||||
| unsafe-jquery-plugin.js:115:51:115:57 | options | unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) |
|
||||
| unsafe-jquery-plugin.js:117:5:117:11 | options | unsafe-jquery-plugin.js:117:5:117:18 | options.target |
|
||||
| unsafe-jquery-plugin.js:121:40:121:46 | options | unsafe-jquery-plugin.js:122:5:122:11 | options |
|
||||
| unsafe-jquery-plugin.js:122:5:122:11 | options | unsafe-jquery-plugin.js:122:5:122:18 | options.target |
|
||||
| unsafe-jquery-plugin.js:126:33:126:39 | options | unsafe-jquery-plugin.js:127:6:127:12 | options |
|
||||
| unsafe-jquery-plugin.js:127:6:127:12 | options | unsafe-jquery-plugin.js:127:6:127:19 | options.target |
|
||||
| unsafe-jquery-plugin.js:131:34:131:40 | options | unsafe-jquery-plugin.js:132:5:132:11 | options |
|
||||
| unsafe-jquery-plugin.js:132:5:132:11 | options | unsafe-jquery-plugin.js:132:5:132:18 | options.target |
|
||||
| unsafe-jquery-plugin.js:135:36:135:42 | options | unsafe-jquery-plugin.js:136:5:136:11 | options |
|
||||
| unsafe-jquery-plugin.js:136:5:136:11 | options | unsafe-jquery-plugin.js:136:5:136:29 | options ... elector |
|
||||
| unsafe-jquery-plugin.js:153:38:153:44 | options | unsafe-jquery-plugin.js:154:16:154:22 | options |
|
||||
| unsafe-jquery-plugin.js:153:38:153:44 | options | unsafe-jquery-plugin.js:156:3:156:9 | options |
|
||||
| unsafe-jquery-plugin.js:153:38:153:44 | options | unsafe-jquery-plugin.js:157:44:157:50 | options |
|
||||
| unsafe-jquery-plugin.js:154:16:154:22 | options | unsafe-jquery-plugin.js:154:16:154:29 | options.target |
|
||||
| unsafe-jquery-plugin.js:154:16:154:29 | options.target | unsafe-jquery-plugin.js:156:3:156:16 | options.target |
|
||||
| unsafe-jquery-plugin.js:154:16:154:29 | options.target | unsafe-jquery-plugin.js:157:44:157:57 | options.target |
|
||||
| unsafe-jquery-plugin.js:156:3:156:9 | options | unsafe-jquery-plugin.js:156:3:156:16 | options.target |
|
||||
| unsafe-jquery-plugin.js:156:3:156:16 | options.target | unsafe-jquery-plugin.js:157:44:157:57 | options.target |
|
||||
| unsafe-jquery-plugin.js:157:44:157:50 | options | unsafe-jquery-plugin.js:157:44:157:57 | options.target |
|
||||
| unsafe-jquery-plugin.js:157:44:157:57 | options.target | unsafe-jquery-plugin.js:157:44:157:59 | options.target.a |
|
||||
| unsafe-jquery-plugin.js:160:38:160:44 | options | unsafe-jquery-plugin.js:165:16:165:22 | options |
|
||||
| unsafe-jquery-plugin.js:165:7:165:29 | target | unsafe-jquery-plugin.js:170:6:170:11 | target |
|
||||
| unsafe-jquery-plugin.js:165:16:165:22 | options | unsafe-jquery-plugin.js:165:7:165:29 | target |
|
||||
| unsafe-jquery-plugin.js:178:27:178:33 | options | unsafe-jquery-plugin.js:179:5:179:11 | options |
|
||||
| unsafe-jquery-plugin.js:179:5:179:11 | options | unsafe-jquery-plugin.js:179:5:179:18 | options.target |
|
||||
| unsafe-jquery-plugin.js:185:28:185:34 | options | unsafe-jquery-plugin.js:186:21:186:27 | options |
|
||||
| unsafe-jquery-plugin.js:186:21:186:27 | options | unsafe-jquery-plugin.js:186:21:186:30 | options.of |
|
||||
| unsafe-jquery-plugin.js:186:21:186:30 | options.of | unsafe-jquery-plugin.js:192:19:192:28 | options.of |
|
||||
| unsafe-jquery-plugin.js:2:38:2:44 | options | unsafe-jquery-plugin.js:3:5:3:11 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:2:38:2:44 | options | unsafe-jquery-plugin.js:5:5:5:11 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:2:38:2:44 | options | unsafe-jquery-plugin.js:7:17:7:23 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:2:38:2:44 | options | unsafe-jquery-plugin.js:11:16:11:22 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:5:5:5:11 | options | unsafe-jquery-plugin.js:5:5:5:18 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:5:5:5:11 | options | unsafe-jquery-plugin.js:5:5:5:18 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:5:5:5:18 | options.target | unsafe-jquery-plugin.js:11:16:11:29 | options.target | provenance | Config |
|
||||
| unsafe-jquery-plugin.js:7:17:7:23 | options | unsafe-jquery-plugin.js:7:17:7:30 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:7:17:7:30 | options.target | unsafe-jquery-plugin.js:11:16:11:29 | options.target | provenance | Config |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:22:6:22:11 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:30:6:30:11 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:36:6:36:11 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:40:6:40:11 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:48:6:48:11 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:52:6:52:11 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:11:7:11:29 | target | unsafe-jquery-plugin.js:60:6:60:11 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:11:16:11:22 | options | unsafe-jquery-plugin.js:11:16:11:29 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:11:16:11:29 | options.target | unsafe-jquery-plugin.js:11:7:11:29 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:71:38:71:44 | options | unsafe-jquery-plugin.js:72:5:72:11 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:72:5:72:11 | options | unsafe-jquery-plugin.js:72:5:72:23 | options.foo.bar.baz | provenance | |
|
||||
| unsafe-jquery-plugin.js:76:38:76:44 | options | unsafe-jquery-plugin.js:77:17:77:23 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:77:17:77:23 | options | unsafe-jquery-plugin.js:77:17:77:35 | options.foo.bar.baz | provenance | |
|
||||
| unsafe-jquery-plugin.js:101:38:101:44 | options | unsafe-jquery-plugin.js:105:6:105:12 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:102:3:105:13 | options | unsafe-jquery-plugin.js:107:5:107:11 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | unsafe-jquery-plugin.js:102:3:105:13 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:105:6:105:12 | options | unsafe-jquery-plugin.js:102:13:105:13 | $.exten ... ptions) | provenance | |
|
||||
| unsafe-jquery-plugin.js:107:5:107:11 | options | unsafe-jquery-plugin.js:107:5:107:18 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:114:38:114:44 | options | unsafe-jquery-plugin.js:115:51:115:57 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:115:3:115:58 | options | unsafe-jquery-plugin.js:117:5:117:11 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | unsafe-jquery-plugin.js:115:3:115:58 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:115:51:115:57 | options | unsafe-jquery-plugin.js:115:13:115:58 | $.exten ... ptions) | provenance | |
|
||||
| unsafe-jquery-plugin.js:117:5:117:11 | options | unsafe-jquery-plugin.js:117:5:117:18 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:121:40:121:46 | options | unsafe-jquery-plugin.js:122:5:122:11 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:122:5:122:11 | options | unsafe-jquery-plugin.js:122:5:122:18 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:126:33:126:39 | options | unsafe-jquery-plugin.js:127:6:127:12 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:127:6:127:12 | options | unsafe-jquery-plugin.js:127:6:127:19 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:131:34:131:40 | options | unsafe-jquery-plugin.js:132:5:132:11 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:132:5:132:11 | options | unsafe-jquery-plugin.js:132:5:132:18 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:135:36:135:42 | options | unsafe-jquery-plugin.js:136:5:136:11 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:136:5:136:11 | options | unsafe-jquery-plugin.js:136:5:136:29 | options ... elector | provenance | |
|
||||
| unsafe-jquery-plugin.js:153:38:153:44 | options | unsafe-jquery-plugin.js:154:16:154:22 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:153:38:153:44 | options | unsafe-jquery-plugin.js:156:3:156:9 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:153:38:153:44 | options | unsafe-jquery-plugin.js:157:44:157:50 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:154:16:154:22 | options | unsafe-jquery-plugin.js:154:16:154:29 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:154:16:154:29 | options.target | unsafe-jquery-plugin.js:156:3:156:16 | options.target | provenance | Config |
|
||||
| unsafe-jquery-plugin.js:154:16:154:29 | options.target | unsafe-jquery-plugin.js:157:44:157:57 | options.target | provenance | Config |
|
||||
| unsafe-jquery-plugin.js:156:3:156:9 | options | unsafe-jquery-plugin.js:156:3:156:16 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:156:3:156:16 | options.target | unsafe-jquery-plugin.js:157:44:157:57 | options.target | provenance | Config |
|
||||
| unsafe-jquery-plugin.js:157:44:157:50 | options | unsafe-jquery-plugin.js:157:44:157:57 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:157:44:157:57 | options.target | unsafe-jquery-plugin.js:157:44:157:59 | options.target.a | provenance | |
|
||||
| unsafe-jquery-plugin.js:160:38:160:44 | options | unsafe-jquery-plugin.js:165:16:165:22 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:165:7:165:29 | target | unsafe-jquery-plugin.js:170:6:170:11 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:165:16:165:22 | options | unsafe-jquery-plugin.js:165:7:165:29 | target | provenance | |
|
||||
| unsafe-jquery-plugin.js:178:27:178:33 | options | unsafe-jquery-plugin.js:179:5:179:11 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:179:5:179:11 | options | unsafe-jquery-plugin.js:179:5:179:18 | options.target | provenance | |
|
||||
| unsafe-jquery-plugin.js:185:28:185:34 | options | unsafe-jquery-plugin.js:186:21:186:27 | options | provenance | |
|
||||
| unsafe-jquery-plugin.js:186:21:186:27 | options | unsafe-jquery-plugin.js:186:21:186:30 | options.of | provenance | |
|
||||
| unsafe-jquery-plugin.js:186:21:186:30 | options.of | unsafe-jquery-plugin.js:192:19:192:28 | options.of | provenance | Config |
|
||||
nodes
|
||||
| unsafe-jquery-plugin.js:2:38:2:44 | options | semmle.label | options |
|
||||
| unsafe-jquery-plugin.js:3:5:3:11 | options | semmle.label | options |
|
||||
|
||||
@@ -1,46 +1,46 @@
|
||||
edges
|
||||
| forms.js:8:23:8:28 | values | forms.js:9:31:9:36 | values |
|
||||
| forms.js:9:31:9:36 | values | forms.js:9:31:9:40 | values.foo |
|
||||
| forms.js:11:24:11:29 | values | forms.js:12:31:12:36 | values |
|
||||
| forms.js:12:31:12:36 | values | forms.js:12:31:12:40 | values.bar |
|
||||
| forms.js:24:15:24:20 | values | forms.js:25:23:25:28 | values |
|
||||
| forms.js:25:23:25:28 | values | forms.js:25:23:25:34 | values.email |
|
||||
| forms.js:28:20:28:25 | values | forms.js:29:23:29:28 | values |
|
||||
| forms.js:29:23:29:28 | values | forms.js:29:23:29:34 | values.email |
|
||||
| forms.js:34:11:34:53 | values | forms.js:35:19:35:24 | values |
|
||||
| forms.js:34:13:34:18 | values | forms.js:34:11:34:53 | values |
|
||||
| forms.js:35:19:35:24 | values | forms.js:35:19:35:30 | values.email |
|
||||
| forms.js:44:21:44:26 | values | forms.js:45:21:45:26 | values |
|
||||
| forms.js:45:21:45:26 | values | forms.js:45:21:45:33 | values.stooge |
|
||||
| forms.js:71:21:71:24 | data | forms.js:72:19:72:22 | data |
|
||||
| forms.js:72:19:72:22 | data | forms.js:72:19:72:27 | data.name |
|
||||
| forms.js:92:17:92:36 | values | forms.js:93:25:93:30 | values |
|
||||
| forms.js:92:26:92:36 | getValues() | forms.js:92:17:92:36 | values |
|
||||
| forms.js:93:25:93:30 | values | forms.js:93:25:93:35 | values.name |
|
||||
| xss-through-dom.js:73:9:73:41 | selector | xss-through-dom.js:77:4:77:11 | selector |
|
||||
| xss-through-dom.js:73:20:73:41 | $("inpu ... 0).name | xss-through-dom.js:73:9:73:41 | selector |
|
||||
| xss-through-dom.js:84:8:84:30 | text | xss-through-dom.js:86:33:86:36 | text |
|
||||
| xss-through-dom.js:84:8:84:30 | text | xss-through-dom.js:87:36:87:39 | text |
|
||||
| xss-through-dom.js:84:15:84:30 | $("text").text() | xss-through-dom.js:84:8:84:30 | text |
|
||||
| xss-through-dom.js:86:33:86:36 | text | xss-through-dom.js:86:16:86:37 | anser.a ... l(text) |
|
||||
| xss-through-dom.js:87:36:87:39 | text | xss-through-dom.js:87:16:87:40 | new ans ... s(text) |
|
||||
| xss-through-dom.js:109:45:109:55 | this.el.src | xss-through-dom.js:109:31:109:70 | "<a src ... oo</a>" |
|
||||
| xss-through-dom.js:114:11:114:52 | src | xss-through-dom.js:115:16:115:18 | src |
|
||||
| xss-through-dom.js:114:11:114:52 | src | xss-through-dom.js:117:26:117:28 | src |
|
||||
| xss-through-dom.js:114:17:114:52 | documen ... k").src | xss-through-dom.js:114:11:114:52 | src |
|
||||
| xss-through-dom.js:120:23:120:37 | ev.target.files | xss-through-dom.js:120:23:120:45 | ev.targ ... 0].name |
|
||||
| xss-through-dom.js:122:53:122:67 | ev.target.files | xss-through-dom.js:122:53:122:70 | ev.target.files[0] |
|
||||
| xss-through-dom.js:122:53:122:70 | ev.target.files[0] | xss-through-dom.js:122:33:122:71 | URL.cre ... les[0]) |
|
||||
| xss-through-dom.js:130:6:130:68 | linkText | xss-through-dom.js:131:19:131:26 | linkText |
|
||||
| xss-through-dom.js:130:6:130:68 | linkText | xss-through-dom.js:132:16:132:23 | linkText |
|
||||
| xss-through-dom.js:130:17:130:37 | wSelect ... tring() | xss-through-dom.js:130:6:130:68 | linkText |
|
||||
| xss-through-dom.js:130:42:130:62 | dSelect ... tring() | xss-through-dom.js:130:6:130:68 | linkText |
|
||||
| xss-through-dom.js:139:11:139:52 | src | xss-through-dom.js:140:19:140:21 | src |
|
||||
| xss-through-dom.js:139:11:139:52 | src | xss-through-dom.js:141:25:141:27 | src |
|
||||
| xss-through-dom.js:139:11:139:52 | src | xss-through-dom.js:150:24:150:26 | src |
|
||||
| xss-through-dom.js:139:17:139:52 | documen ... k").src | xss-through-dom.js:139:11:139:52 | src |
|
||||
| xss-through-dom.js:154:25:154:27 | msg | xss-through-dom.js:155:27:155:29 | msg |
|
||||
| xss-through-dom.js:159:34:159:52 | $("textarea").val() | xss-through-dom.js:154:25:154:27 | msg |
|
||||
| forms.js:8:23:8:28 | values | forms.js:9:31:9:36 | values | provenance | |
|
||||
| forms.js:9:31:9:36 | values | forms.js:9:31:9:40 | values.foo | provenance | |
|
||||
| forms.js:11:24:11:29 | values | forms.js:12:31:12:36 | values | provenance | |
|
||||
| forms.js:12:31:12:36 | values | forms.js:12:31:12:40 | values.bar | provenance | |
|
||||
| forms.js:24:15:24:20 | values | forms.js:25:23:25:28 | values | provenance | |
|
||||
| forms.js:25:23:25:28 | values | forms.js:25:23:25:34 | values.email | provenance | |
|
||||
| forms.js:28:20:28:25 | values | forms.js:29:23:29:28 | values | provenance | |
|
||||
| forms.js:29:23:29:28 | values | forms.js:29:23:29:34 | values.email | provenance | |
|
||||
| forms.js:34:11:34:53 | values | forms.js:35:19:35:24 | values | provenance | |
|
||||
| forms.js:34:13:34:18 | values | forms.js:34:11:34:53 | values | provenance | |
|
||||
| forms.js:35:19:35:24 | values | forms.js:35:19:35:30 | values.email | provenance | |
|
||||
| forms.js:44:21:44:26 | values | forms.js:45:21:45:26 | values | provenance | |
|
||||
| forms.js:45:21:45:26 | values | forms.js:45:21:45:33 | values.stooge | provenance | |
|
||||
| forms.js:71:21:71:24 | data | forms.js:72:19:72:22 | data | provenance | |
|
||||
| forms.js:72:19:72:22 | data | forms.js:72:19:72:27 | data.name | provenance | |
|
||||
| forms.js:92:17:92:36 | values | forms.js:93:25:93:30 | values | provenance | |
|
||||
| forms.js:92:26:92:36 | getValues() | forms.js:92:17:92:36 | values | provenance | |
|
||||
| forms.js:93:25:93:30 | values | forms.js:93:25:93:35 | values.name | provenance | |
|
||||
| xss-through-dom.js:73:9:73:41 | selector | xss-through-dom.js:77:4:77:11 | selector | provenance | |
|
||||
| xss-through-dom.js:73:20:73:41 | $("inpu ... 0).name | xss-through-dom.js:73:9:73:41 | selector | provenance | |
|
||||
| xss-through-dom.js:84:8:84:30 | text | xss-through-dom.js:86:33:86:36 | text | provenance | |
|
||||
| xss-through-dom.js:84:8:84:30 | text | xss-through-dom.js:87:36:87:39 | text | provenance | |
|
||||
| xss-through-dom.js:84:15:84:30 | $("text").text() | xss-through-dom.js:84:8:84:30 | text | provenance | |
|
||||
| xss-through-dom.js:86:33:86:36 | text | xss-through-dom.js:86:16:86:37 | anser.a ... l(text) | provenance | |
|
||||
| xss-through-dom.js:87:36:87:39 | text | xss-through-dom.js:87:16:87:40 | new ans ... s(text) | provenance | |
|
||||
| xss-through-dom.js:109:45:109:55 | this.el.src | xss-through-dom.js:109:31:109:70 | "<a src ... oo</a>" | provenance | |
|
||||
| xss-through-dom.js:114:11:114:52 | src | xss-through-dom.js:115:16:115:18 | src | provenance | |
|
||||
| xss-through-dom.js:114:11:114:52 | src | xss-through-dom.js:117:26:117:28 | src | provenance | |
|
||||
| xss-through-dom.js:114:17:114:52 | documen ... k").src | xss-through-dom.js:114:11:114:52 | src | provenance | |
|
||||
| xss-through-dom.js:120:23:120:37 | ev.target.files | xss-through-dom.js:120:23:120:45 | ev.targ ... 0].name | provenance | |
|
||||
| xss-through-dom.js:122:53:122:67 | ev.target.files | xss-through-dom.js:122:53:122:70 | ev.target.files[0] | provenance | |
|
||||
| xss-through-dom.js:122:53:122:70 | ev.target.files[0] | xss-through-dom.js:122:33:122:71 | URL.cre ... les[0]) | provenance | Config |
|
||||
| xss-through-dom.js:130:6:130:68 | linkText | xss-through-dom.js:131:19:131:26 | linkText | provenance | |
|
||||
| xss-through-dom.js:130:6:130:68 | linkText | xss-through-dom.js:132:16:132:23 | linkText | provenance | |
|
||||
| xss-through-dom.js:130:17:130:37 | wSelect ... tring() | xss-through-dom.js:130:6:130:68 | linkText | provenance | |
|
||||
| xss-through-dom.js:130:42:130:62 | dSelect ... tring() | xss-through-dom.js:130:6:130:68 | linkText | provenance | |
|
||||
| xss-through-dom.js:139:11:139:52 | src | xss-through-dom.js:140:19:140:21 | src | provenance | |
|
||||
| xss-through-dom.js:139:11:139:52 | src | xss-through-dom.js:141:25:141:27 | src | provenance | |
|
||||
| xss-through-dom.js:139:11:139:52 | src | xss-through-dom.js:150:24:150:26 | src | provenance | |
|
||||
| xss-through-dom.js:139:17:139:52 | documen ... k").src | xss-through-dom.js:139:11:139:52 | src | provenance | |
|
||||
| xss-through-dom.js:154:25:154:27 | msg | xss-through-dom.js:155:27:155:29 | msg | provenance | |
|
||||
| xss-through-dom.js:159:34:159:52 | $("textarea").val() | xss-through-dom.js:154:25:154:27 | msg | provenance | |
|
||||
nodes
|
||||
| forms.js:8:23:8:28 | values | semmle.label | values |
|
||||
| forms.js:9:31:9:36 | values | semmle.label | values |
|
||||
|
||||
@@ -14,18 +14,18 @@ nodes
|
||||
| typedClient.ts:23:27:23:35 | { id: v } | semmle.label | { id: v } |
|
||||
| typedClient.ts:23:33:23:33 | v | semmle.label | v |
|
||||
edges
|
||||
| typedClient.ts:13:7:13:32 | v | typedClient.ts:14:30:14:30 | v |
|
||||
| typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | typedClient.ts:13:7:13:32 | v |
|
||||
| typedClient.ts:13:22:13:29 | req.body | typedClient.ts:13:22:13:31 | req.body.x |
|
||||
| typedClient.ts:13:22:13:31 | req.body.x | typedClient.ts:13:11:13:32 | JSON.pa ... body.x) |
|
||||
| typedClient.ts:14:30:14:30 | v | typedClient.ts:14:24:14:32 | { id: v } |
|
||||
| typedClient.ts:21:7:21:32 | v | typedClient.ts:22:33:22:33 | v |
|
||||
| typedClient.ts:21:7:21:32 | v | typedClient.ts:23:33:23:33 | v |
|
||||
| typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | typedClient.ts:21:7:21:32 | v |
|
||||
| typedClient.ts:21:22:21:29 | req.body | typedClient.ts:21:22:21:31 | req.body.x |
|
||||
| typedClient.ts:21:22:21:31 | req.body.x | typedClient.ts:21:11:21:32 | JSON.pa ... body.x) |
|
||||
| typedClient.ts:22:33:22:33 | v | typedClient.ts:22:27:22:35 | { id: v } |
|
||||
| typedClient.ts:23:33:23:33 | v | typedClient.ts:23:27:23:35 | { id: v } |
|
||||
| typedClient.ts:13:7:13:32 | v | typedClient.ts:14:30:14:30 | v | provenance | |
|
||||
| typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | typedClient.ts:13:7:13:32 | v | provenance | |
|
||||
| typedClient.ts:13:22:13:29 | req.body | typedClient.ts:13:22:13:31 | req.body.x | provenance | Config |
|
||||
| typedClient.ts:13:22:13:31 | req.body.x | typedClient.ts:13:11:13:32 | JSON.pa ... body.x) | provenance | Config |
|
||||
| typedClient.ts:14:30:14:30 | v | typedClient.ts:14:24:14:32 | { id: v } | provenance | Config |
|
||||
| typedClient.ts:21:7:21:32 | v | typedClient.ts:22:33:22:33 | v | provenance | |
|
||||
| typedClient.ts:21:7:21:32 | v | typedClient.ts:23:33:23:33 | v | provenance | |
|
||||
| typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | typedClient.ts:21:7:21:32 | v | provenance | |
|
||||
| typedClient.ts:21:22:21:29 | req.body | typedClient.ts:21:22:21:31 | req.body.x | provenance | Config |
|
||||
| typedClient.ts:21:22:21:31 | req.body.x | typedClient.ts:21:11:21:32 | JSON.pa ... body.x) | provenance | Config |
|
||||
| typedClient.ts:22:33:22:33 | v | typedClient.ts:22:27:22:35 | { id: v } | provenance | Config |
|
||||
| typedClient.ts:23:33:23:33 | v | typedClient.ts:23:27:23:35 | { id: v } | provenance | Config |
|
||||
subpaths
|
||||
#select
|
||||
| typedClient.ts:14:24:14:32 | { id: v } | typedClient.ts:13:22:13:29 | req.body | typedClient.ts:14:24:14:32 | { id: v } | This query object depends on a $@. | typedClient.ts:13:22:13:29 | req.body | user-provided value |
|
||||
|
||||
@@ -1,44 +1,44 @@
|
||||
edges
|
||||
| NoSQLCodeInjection.js:18:24:18:31 | req.body | NoSQLCodeInjection.js:18:24:18:37 | req.body.query |
|
||||
| NoSQLCodeInjection.js:19:36:19:43 | req.body | NoSQLCodeInjection.js:19:24:19:48 | "name = ... dy.name |
|
||||
| NoSQLCodeInjection.js:22:36:22:43 | req.body | NoSQLCodeInjection.js:22:24:22:48 | "name = ... dy.name |
|
||||
| express.js:7:44:7:62 | req.param("wobble") | express.js:7:24:7:69 | "return ... + "];" |
|
||||
| express.js:9:54:9:72 | req.param("wobble") | express.js:9:34:9:79 | "return ... + "];" |
|
||||
| express.js:12:28:12:46 | req.param("wobble") | express.js:12:8:12:53 | "return ... + "];" |
|
||||
| express.js:26:9:26:35 | taint | express.js:27:34:27:38 | taint |
|
||||
| express.js:26:17:26:35 | req.param("wobble") | express.js:26:9:26:35 | taint |
|
||||
| express.js:34:9:34:35 | taint | express.js:43:15:43:19 | taint |
|
||||
| express.js:34:17:34:35 | req.param("wobble") | express.js:34:9:34:35 | taint |
|
||||
| express.js:49:30:49:32 | msg | express.js:50:10:50:12 | msg |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:8:32:8:38 | tainted |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:10:23:10:29 | tainted |
|
||||
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:20:17:20:23 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:21:16:21:22 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:22:18:22:24 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:23:17:23:23 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:24:18:24:24 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:25:16:25:22 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:26:27:26:33 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:27:21:27:27 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:28:17:28:23 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:29:24:29:30 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:30:21:30:27 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:31:19:31:25 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:32:16:32:22 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:33:17:33:23 | tainted |
|
||||
| template-sinks.js:18:19:18:31 | req.query.foo | template-sinks.js:18:9:18:31 | tainted |
|
||||
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) |
|
||||
| tst.js:14:10:14:33 | documen ... .search | tst.js:14:10:14:74 | documen ... , "$1") |
|
||||
| tst.js:23:11:23:32 | documen ... on.hash | tst.js:23:11:23:45 | documen ... ring(1) |
|
||||
| tst.js:23:11:23:45 | documen ... ring(1) | tst.js:23:6:23:46 | atob(do ... ing(1)) |
|
||||
| tst.js:26:26:26:40 | location.search | tst.js:26:26:26:53 | locatio ... ring(1) |
|
||||
| tst.js:29:9:29:82 | source | tst.js:31:18:31:23 | source |
|
||||
| tst.js:29:9:29:82 | source | tst.js:33:14:33:19 | source |
|
||||
| tst.js:29:9:29:82 | source | tst.js:35:28:35:33 | source |
|
||||
| tst.js:29:9:29:82 | source | tst.js:37:33:37:38 | source |
|
||||
| tst.js:29:18:29:41 | documen ... .search | tst.js:29:18:29:82 | documen ... , "$1") |
|
||||
| tst.js:29:18:29:82 | documen ... , "$1") | tst.js:29:9:29:82 | source |
|
||||
| NoSQLCodeInjection.js:18:24:18:31 | req.body | NoSQLCodeInjection.js:18:24:18:37 | req.body.query | provenance | |
|
||||
| NoSQLCodeInjection.js:19:36:19:43 | req.body | NoSQLCodeInjection.js:19:24:19:48 | "name = ... dy.name | provenance | |
|
||||
| NoSQLCodeInjection.js:22:36:22:43 | req.body | NoSQLCodeInjection.js:22:24:22:48 | "name = ... dy.name | provenance | |
|
||||
| express.js:7:44:7:62 | req.param("wobble") | express.js:7:24:7:69 | "return ... + "];" | provenance | |
|
||||
| express.js:9:54:9:72 | req.param("wobble") | express.js:9:34:9:79 | "return ... + "];" | provenance | |
|
||||
| express.js:12:28:12:46 | req.param("wobble") | express.js:12:8:12:53 | "return ... + "];" | provenance | |
|
||||
| express.js:26:9:26:35 | taint | express.js:27:34:27:38 | taint | provenance | |
|
||||
| express.js:26:17:26:35 | req.param("wobble") | express.js:26:9:26:35 | taint | provenance | |
|
||||
| express.js:34:9:34:35 | taint | express.js:43:15:43:19 | taint | provenance | |
|
||||
| express.js:34:17:34:35 | req.param("wobble") | express.js:34:9:34:35 | taint | provenance | |
|
||||
| express.js:49:30:49:32 | msg | express.js:50:10:50:12 | msg | provenance | |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:8:32:8:38 | tainted | provenance | |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:10:23:10:29 | tainted | provenance | |
|
||||
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:20:17:20:23 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:21:16:21:22 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:22:18:22:24 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:23:17:23:23 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:24:18:24:24 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:25:16:25:22 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:26:27:26:33 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:27:21:27:27 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:28:17:28:23 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:29:24:29:30 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:30:21:30:27 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:31:19:31:25 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:32:16:32:22 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:33:17:33:23 | tainted | provenance | |
|
||||
| template-sinks.js:18:19:18:31 | req.query.foo | template-sinks.js:18:9:18:31 | tainted | provenance | |
|
||||
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) | provenance | |
|
||||
| tst.js:14:10:14:33 | documen ... .search | tst.js:14:10:14:74 | documen ... , "$1") | provenance | |
|
||||
| tst.js:23:11:23:32 | documen ... on.hash | tst.js:23:11:23:45 | documen ... ring(1) | provenance | |
|
||||
| tst.js:23:11:23:45 | documen ... ring(1) | tst.js:23:6:23:46 | atob(do ... ing(1)) | provenance | |
|
||||
| tst.js:26:26:26:40 | location.search | tst.js:26:26:26:53 | locatio ... ring(1) | provenance | |
|
||||
| tst.js:29:9:29:82 | source | tst.js:31:18:31:23 | source | provenance | |
|
||||
| tst.js:29:9:29:82 | source | tst.js:33:14:33:19 | source | provenance | |
|
||||
| tst.js:29:9:29:82 | source | tst.js:35:28:35:33 | source | provenance | |
|
||||
| tst.js:29:9:29:82 | source | tst.js:37:33:37:38 | source | provenance | |
|
||||
| tst.js:29:18:29:41 | documen ... .search | tst.js:29:18:29:82 | documen ... , "$1") | provenance | |
|
||||
| tst.js:29:18:29:82 | documen ... , "$1") | tst.js:29:9:29:82 | source | provenance | |
|
||||
nodes
|
||||
| NoSQLCodeInjection.js:18:24:18:31 | req.body | semmle.label | req.body |
|
||||
| NoSQLCodeInjection.js:18:24:18:37 | req.body.query | semmle.label | req.body.query |
|
||||
|
||||
@@ -1,45 +1,45 @@
|
||||
edges
|
||||
| NoSQLCodeInjection.js:18:24:18:31 | req.body | NoSQLCodeInjection.js:18:24:18:37 | req.body.query |
|
||||
| NoSQLCodeInjection.js:19:36:19:43 | req.body | NoSQLCodeInjection.js:19:24:19:48 | "name = ... dy.name |
|
||||
| NoSQLCodeInjection.js:22:36:22:43 | req.body | NoSQLCodeInjection.js:22:24:22:48 | "name = ... dy.name |
|
||||
| eslint-escope-build.js:20:22:20:22 | c | eslint-escope-build.js:21:16:21:16 | c |
|
||||
| express.js:7:44:7:62 | req.param("wobble") | express.js:7:24:7:69 | "return ... + "];" |
|
||||
| express.js:9:54:9:72 | req.param("wobble") | express.js:9:34:9:79 | "return ... + "];" |
|
||||
| express.js:12:28:12:46 | req.param("wobble") | express.js:12:8:12:53 | "return ... + "];" |
|
||||
| express.js:26:9:26:35 | taint | express.js:27:34:27:38 | taint |
|
||||
| express.js:26:17:26:35 | req.param("wobble") | express.js:26:9:26:35 | taint |
|
||||
| express.js:34:9:34:35 | taint | express.js:43:15:43:19 | taint |
|
||||
| express.js:34:17:34:35 | req.param("wobble") | express.js:34:9:34:35 | taint |
|
||||
| express.js:49:30:49:32 | msg | express.js:50:10:50:12 | msg |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:8:32:8:38 | tainted |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:10:23:10:29 | tainted |
|
||||
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:20:17:20:23 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:21:16:21:22 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:22:18:22:24 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:23:17:23:23 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:24:18:24:24 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:25:16:25:22 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:26:27:26:33 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:27:21:27:27 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:28:17:28:23 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:29:24:29:30 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:30:21:30:27 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:31:19:31:25 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:32:16:32:22 | tainted |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:33:17:33:23 | tainted |
|
||||
| template-sinks.js:18:19:18:31 | req.query.foo | template-sinks.js:18:9:18:31 | tainted |
|
||||
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) |
|
||||
| tst.js:14:10:14:33 | documen ... .search | tst.js:14:10:14:74 | documen ... , "$1") |
|
||||
| tst.js:23:11:23:32 | documen ... on.hash | tst.js:23:11:23:45 | documen ... ring(1) |
|
||||
| tst.js:23:11:23:45 | documen ... ring(1) | tst.js:23:6:23:46 | atob(do ... ing(1)) |
|
||||
| tst.js:26:26:26:40 | location.search | tst.js:26:26:26:53 | locatio ... ring(1) |
|
||||
| tst.js:29:9:29:82 | source | tst.js:31:18:31:23 | source |
|
||||
| tst.js:29:9:29:82 | source | tst.js:33:14:33:19 | source |
|
||||
| tst.js:29:9:29:82 | source | tst.js:35:28:35:33 | source |
|
||||
| tst.js:29:9:29:82 | source | tst.js:37:33:37:38 | source |
|
||||
| tst.js:29:18:29:41 | documen ... .search | tst.js:29:18:29:82 | documen ... , "$1") |
|
||||
| tst.js:29:18:29:82 | documen ... , "$1") | tst.js:29:9:29:82 | source |
|
||||
| NoSQLCodeInjection.js:18:24:18:31 | req.body | NoSQLCodeInjection.js:18:24:18:37 | req.body.query | provenance | |
|
||||
| NoSQLCodeInjection.js:19:36:19:43 | req.body | NoSQLCodeInjection.js:19:24:19:48 | "name = ... dy.name | provenance | |
|
||||
| NoSQLCodeInjection.js:22:36:22:43 | req.body | NoSQLCodeInjection.js:22:24:22:48 | "name = ... dy.name | provenance | |
|
||||
| eslint-escope-build.js:20:22:20:22 | c | eslint-escope-build.js:21:16:21:16 | c | provenance | |
|
||||
| express.js:7:44:7:62 | req.param("wobble") | express.js:7:24:7:69 | "return ... + "];" | provenance | |
|
||||
| express.js:9:54:9:72 | req.param("wobble") | express.js:9:34:9:79 | "return ... + "];" | provenance | |
|
||||
| express.js:12:28:12:46 | req.param("wobble") | express.js:12:8:12:53 | "return ... + "];" | provenance | |
|
||||
| express.js:26:9:26:35 | taint | express.js:27:34:27:38 | taint | provenance | |
|
||||
| express.js:26:17:26:35 | req.param("wobble") | express.js:26:9:26:35 | taint | provenance | |
|
||||
| express.js:34:9:34:35 | taint | express.js:43:15:43:19 | taint | provenance | |
|
||||
| express.js:34:17:34:35 | req.param("wobble") | express.js:34:9:34:35 | taint | provenance | |
|
||||
| express.js:49:30:49:32 | msg | express.js:50:10:50:12 | msg | provenance | |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:8:32:8:38 | tainted | provenance | |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:10:23:10:29 | tainted | provenance | |
|
||||
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:20:17:20:23 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:21:16:21:22 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:22:18:22:24 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:23:17:23:23 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:24:18:24:24 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:25:16:25:22 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:26:27:26:33 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:27:21:27:27 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:28:17:28:23 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:29:24:29:30 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:30:21:30:27 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:31:19:31:25 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:32:16:32:22 | tainted | provenance | |
|
||||
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:33:17:33:23 | tainted | provenance | |
|
||||
| template-sinks.js:18:19:18:31 | req.query.foo | template-sinks.js:18:9:18:31 | tainted | provenance | |
|
||||
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) | provenance | |
|
||||
| tst.js:14:10:14:33 | documen ... .search | tst.js:14:10:14:74 | documen ... , "$1") | provenance | |
|
||||
| tst.js:23:11:23:32 | documen ... on.hash | tst.js:23:11:23:45 | documen ... ring(1) | provenance | |
|
||||
| tst.js:23:11:23:45 | documen ... ring(1) | tst.js:23:6:23:46 | atob(do ... ing(1)) | provenance | |
|
||||
| tst.js:26:26:26:40 | location.search | tst.js:26:26:26:53 | locatio ... ring(1) | provenance | |
|
||||
| tst.js:29:9:29:82 | source | tst.js:31:18:31:23 | source | provenance | |
|
||||
| tst.js:29:9:29:82 | source | tst.js:33:14:33:19 | source | provenance | |
|
||||
| tst.js:29:9:29:82 | source | tst.js:35:28:35:33 | source | provenance | |
|
||||
| tst.js:29:9:29:82 | source | tst.js:37:33:37:38 | source | provenance | |
|
||||
| tst.js:29:18:29:41 | documen ... .search | tst.js:29:18:29:82 | documen ... , "$1") | provenance | |
|
||||
| tst.js:29:18:29:82 | documen ... , "$1") | tst.js:29:9:29:82 | source | provenance | |
|
||||
nodes
|
||||
| NoSQLCodeInjection.js:18:24:18:31 | req.body | semmle.label | req.body |
|
||||
| NoSQLCodeInjection.js:18:24:18:37 | req.body.query | semmle.label | req.body.query |
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
edges
|
||||
| lib/index.js:1:35:1:38 | data | lib/index.js:2:21:2:24 | data |
|
||||
| lib/index.js:5:35:5:38 | name | lib/index.js:6:26:6:29 | name |
|
||||
| lib/index.js:13:38:13:41 | data | lib/index.js:14:21:14:24 | data |
|
||||
| lib/index.js:19:26:19:29 | data | lib/index.js:22:7:22:10 | data |
|
||||
| lib/index.js:1:35:1:38 | data | lib/index.js:2:21:2:24 | data | provenance | |
|
||||
| lib/index.js:5:35:5:38 | name | lib/index.js:6:26:6:29 | name | provenance | |
|
||||
| lib/index.js:13:38:13:41 | data | lib/index.js:14:21:14:24 | data | provenance | |
|
||||
| lib/index.js:19:26:19:29 | data | lib/index.js:22:7:22:10 | data | provenance | |
|
||||
nodes
|
||||
| lib/index.js:1:35:1:38 | data | semmle.label | data |
|
||||
| lib/index.js:2:21:2:24 | data | semmle.label | data |
|
||||
|
||||
@@ -2,10 +2,10 @@ edges
|
||||
| example.js:9:37:9:38 | ev | example.js:10:30:10:31 | ev | provenance | |
|
||||
| example.js:10:9:10:37 | message | example.js:13:12:13:18 | message | provenance | |
|
||||
| example.js:10:19:10:37 | JSON.parse(ev.data) | example.js:10:9:10:37 | message | provenance | |
|
||||
| example.js:10:30:10:31 | ev | example.js:10:30:10:36 | ev.data | provenance | |
|
||||
| example.js:10:30:10:36 | ev.data | example.js:10:19:10:37 | JSON.parse(ev.data) | provenance | |
|
||||
| example.js:13:12:13:18 | message | example.js:13:12:13:23 | message.name | provenance | |
|
||||
| example.js:13:12:13:23 | message.name | example.js:13:5:13:24 | window[message.name] | provenance | |
|
||||
| example.js:10:30:10:31 | ev | example.js:10:30:10:36 | ev.data | provenance | Config |
|
||||
| example.js:10:30:10:36 | ev.data | example.js:10:19:10:37 | JSON.parse(ev.data) | provenance | Config |
|
||||
| example.js:13:12:13:18 | message | example.js:13:12:13:23 | message.name | provenance | Config |
|
||||
| example.js:13:12:13:23 | message.name | example.js:13:5:13:24 | window[message.name] | provenance | Config |
|
||||
| tst.js:3:37:3:38 | ev | tst.js:4:30:4:31 | ev | provenance | |
|
||||
| tst.js:3:37:3:38 | ev | tst.js:15:12:15:13 | ev | provenance | |
|
||||
| tst.js:4:9:4:37 | message | tst.js:5:12:5:18 | message | provenance | |
|
||||
@@ -13,18 +13,18 @@ edges
|
||||
| tst.js:4:9:4:37 | message | tst.js:11:7:11:13 | message | provenance | |
|
||||
| tst.js:4:9:4:37 | message | tst.js:21:17:21:23 | message | provenance | |
|
||||
| tst.js:4:19:4:37 | JSON.parse(ev.data) | tst.js:4:9:4:37 | message | provenance | |
|
||||
| tst.js:4:30:4:31 | ev | tst.js:4:30:4:36 | ev.data | provenance | |
|
||||
| tst.js:4:30:4:36 | ev.data | tst.js:4:19:4:37 | JSON.parse(ev.data) | provenance | |
|
||||
| tst.js:5:12:5:18 | message | tst.js:5:12:5:23 | message.name | provenance | |
|
||||
| tst.js:5:12:5:23 | message.name | tst.js:5:5:5:24 | window[message.name] | provenance | |
|
||||
| tst.js:6:16:6:22 | message | tst.js:6:16:6:27 | message.name | provenance | |
|
||||
| tst.js:6:16:6:27 | message.name | tst.js:6:9:6:28 | window[message.name] | provenance | |
|
||||
| tst.js:11:7:11:13 | message | tst.js:11:7:11:18 | message.name | provenance | |
|
||||
| tst.js:11:7:11:18 | message.name | tst.js:11:5:11:19 | f[message.name] | provenance | |
|
||||
| tst.js:15:12:15:13 | ev | tst.js:15:5:15:14 | window[ev] | provenance | |
|
||||
| tst.js:21:12:21:28 | '' + message.name | tst.js:21:5:21:29 | window[ ... e.name] | provenance | |
|
||||
| tst.js:21:17:21:23 | message | tst.js:21:17:21:28 | message.name | provenance | |
|
||||
| tst.js:21:17:21:28 | message.name | tst.js:21:12:21:28 | '' + message.name | provenance | |
|
||||
| tst.js:4:30:4:31 | ev | tst.js:4:30:4:36 | ev.data | provenance | Config |
|
||||
| tst.js:4:30:4:36 | ev.data | tst.js:4:19:4:37 | JSON.parse(ev.data) | provenance | Config |
|
||||
| tst.js:5:12:5:18 | message | tst.js:5:12:5:23 | message.name | provenance | Config |
|
||||
| tst.js:5:12:5:23 | message.name | tst.js:5:5:5:24 | window[message.name] | provenance | Config |
|
||||
| tst.js:6:16:6:22 | message | tst.js:6:16:6:27 | message.name | provenance | Config |
|
||||
| tst.js:6:16:6:27 | message.name | tst.js:6:9:6:28 | window[message.name] | provenance | Config |
|
||||
| tst.js:11:7:11:13 | message | tst.js:11:7:11:18 | message.name | provenance | Config |
|
||||
| tst.js:11:7:11:18 | message.name | tst.js:11:5:11:19 | f[message.name] | provenance | Config |
|
||||
| tst.js:15:12:15:13 | ev | tst.js:15:5:15:14 | window[ev] | provenance | Config |
|
||||
| tst.js:21:12:21:28 | '' + message.name | tst.js:21:5:21:29 | window[ ... e.name] | provenance | Config |
|
||||
| tst.js:21:17:21:23 | message | tst.js:21:17:21:28 | message.name | provenance | Config |
|
||||
| tst.js:21:17:21:28 | message.name | tst.js:21:12:21:28 | '' + message.name | provenance | Config |
|
||||
nodes
|
||||
| example.js:9:37:9:38 | ev | semmle.label | ev |
|
||||
| example.js:10:9:10:37 | message | semmle.label | message |
|
||||
|
||||
@@ -16,9 +16,9 @@ nodes
|
||||
| tst.js:303:10:303:34 | s().rep ... /g, '') | semmle.label | s().rep ... /g, '') |
|
||||
| tst.js:309:10:318:3 | s().rep ... ;";\\n\\t}) | semmle.label | s().rep ... ;";\\n\\t}) |
|
||||
edges
|
||||
| tst.js:274:6:274:94 | arr | tst.js:275:9:275:11 | arr |
|
||||
| tst.js:274:12:274:94 | s().val ... g , '') | tst.js:274:6:274:94 | arr |
|
||||
| tst.js:275:9:275:11 | arr | tst.js:275:9:275:21 | arr.join(" ") |
|
||||
| tst.js:274:6:274:94 | arr | tst.js:275:9:275:11 | arr | provenance | |
|
||||
| tst.js:274:12:274:94 | s().val ... g , '') | tst.js:274:6:274:94 | arr | provenance | |
|
||||
| tst.js:275:9:275:11 | arr | tst.js:275:9:275:21 | arr.join(" ") | provenance | |
|
||||
subpaths
|
||||
#select
|
||||
| tst.js:243:9:243:31 | s().rep ... ]/g,'') | tst.js:243:9:243:31 | s().rep ... ]/g,'') | tst.js:243:9:243:31 | s().rep ... ]/g,'') | Cross-site scripting vulnerability as the output of $@ may contain double quotes when it reaches this attribute definition. | tst.js:243:9:243:31 | s().rep ... ]/g,'') | this final HTML sanitizer step |
|
||||
|
||||
@@ -1,69 +1,69 @@
|
||||
edges
|
||||
| logInjectionBad.js:7:25:7:32 | username | logInjectionBad.js:8:38:8:45 | username |
|
||||
| logInjectionBad.js:19:9:19:36 | q | logInjectionBad.js:20:20:20:20 | q |
|
||||
| logInjectionBad.js:19:13:19:36 | url.par ... , true) | logInjectionBad.js:19:9:19:36 | q |
|
||||
| logInjectionBad.js:19:23:19:29 | req.url | logInjectionBad.js:19:13:19:36 | url.par ... , true) |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:22:34:22:41 | username |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:23:37:23:44 | username |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:24:35:24:42 | username |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:25:36:25:43 | username |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:28:24:28:31 | username |
|
||||
| logInjectionBad.js:20:20:20:20 | q | logInjectionBad.js:20:9:20:35 | username |
|
||||
| logInjectionBad.js:22:34:22:41 | username | logInjectionBad.js:22:18:22:43 | `[INFO] ... rname}` |
|
||||
| logInjectionBad.js:28:9:28:32 | exceptional return of check_u ... ername) | logInjectionBad.js:29:14:29:18 | error |
|
||||
| logInjectionBad.js:28:24:28:31 | username | logInjectionBad.js:7:25:7:32 | username |
|
||||
| logInjectionBad.js:28:24:28:31 | username | logInjectionBad.js:28:9:28:32 | exceptional return of check_u ... ername) |
|
||||
| logInjectionBad.js:29:14:29:18 | error | logInjectionBad.js:30:42:30:46 | error |
|
||||
| logInjectionBad.js:30:42:30:46 | error | logInjectionBad.js:30:23:30:49 | `[ERROR ... rror}"` |
|
||||
| logInjectionBad.js:46:9:46:36 | q | logInjectionBad.js:47:20:47:20 | q |
|
||||
| logInjectionBad.js:46:13:46:36 | url.par ... , true) | logInjectionBad.js:46:9:46:36 | q |
|
||||
| logInjectionBad.js:46:23:46:29 | req.url | logInjectionBad.js:46:13:46:36 | url.par ... , true) |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:49:46:49:53 | username |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:50:39:50:46 | username |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:51:48:51:55 | username |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:52:37:52:44 | username |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:53:27:53:34 | username |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:54:43:54:50 | username |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:55:48:55:55 | username |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:56:47:56:54 | username |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:57:40:57:47 | username |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:58:50:58:57 | username |
|
||||
| logInjectionBad.js:47:20:47:20 | q | logInjectionBad.js:47:9:47:35 | username |
|
||||
| logInjectionBad.js:49:46:49:53 | username | logInjectionBad.js:49:18:49:54 | ansiCol ... ername) |
|
||||
| logInjectionBad.js:50:39:50:46 | username | logInjectionBad.js:50:18:50:47 | colors. ... ername) |
|
||||
| logInjectionBad.js:51:27:51:56 | colors. ... ername) | logInjectionBad.js:51:18:51:61 | wrapAns ... e), 20) |
|
||||
| logInjectionBad.js:51:48:51:55 | username | logInjectionBad.js:51:27:51:56 | colors. ... ername) |
|
||||
| logInjectionBad.js:52:27:52:46 | bold(blue(username)) | logInjectionBad.js:52:17:52:47 | underli ... name))) |
|
||||
| logInjectionBad.js:52:32:52:45 | blue(username) | logInjectionBad.js:52:27:52:46 | bold(blue(username)) |
|
||||
| logInjectionBad.js:52:37:52:44 | username | logInjectionBad.js:52:32:52:45 | blue(username) |
|
||||
| logInjectionBad.js:53:27:53:34 | username | logInjectionBad.js:53:17:53:76 | highlig ... true}) |
|
||||
| logInjectionBad.js:54:43:54:50 | username | logInjectionBad.js:54:17:54:51 | clc.red ... ername) |
|
||||
| logInjectionBad.js:55:27:55:56 | colors. ... ername) | logInjectionBad.js:55:17:55:65 | sliceAn ... 20, 30) |
|
||||
| logInjectionBad.js:55:48:55:55 | username | logInjectionBad.js:55:27:55:56 | colors. ... ername) |
|
||||
| logInjectionBad.js:56:47:56:54 | username | logInjectionBad.js:56:17:56:55 | kleur.b ... ername) |
|
||||
| logInjectionBad.js:57:40:57:47 | username | logInjectionBad.js:57:17:57:48 | chalk.u ... ername) |
|
||||
| logInjectionBad.js:58:27:58:58 | chalk.u ... ername) | logInjectionBad.js:58:17:58:59 | stripAn ... rname)) |
|
||||
| logInjectionBad.js:58:50:58:57 | username | logInjectionBad.js:58:27:58:58 | chalk.u ... ername) |
|
||||
| logInjectionBad.js:63:9:63:36 | q | logInjectionBad.js:64:20:64:20 | q |
|
||||
| logInjectionBad.js:63:13:63:36 | url.par ... , true) | logInjectionBad.js:63:9:63:36 | q |
|
||||
| logInjectionBad.js:63:23:63:29 | req.url | logInjectionBad.js:63:13:63:36 | url.par ... , true) |
|
||||
| logInjectionBad.js:64:9:64:35 | username | logInjectionBad.js:66:35:66:42 | username |
|
||||
| logInjectionBad.js:64:20:64:20 | q | logInjectionBad.js:64:9:64:35 | username |
|
||||
| logInjectionBad.js:66:35:66:42 | username | logInjectionBad.js:66:17:66:43 | prettyj ... ername) |
|
||||
| logInjectionBad.js:72:9:72:36 | q | logInjectionBad.js:73:20:73:20 | q |
|
||||
| logInjectionBad.js:72:13:72:36 | url.par ... , true) | logInjectionBad.js:72:9:72:36 | q |
|
||||
| logInjectionBad.js:72:23:72:29 | req.url | logInjectionBad.js:72:13:72:36 | url.par ... , true) |
|
||||
| logInjectionBad.js:73:9:73:35 | username | logInjectionBad.js:75:15:75:22 | username |
|
||||
| logInjectionBad.js:73:9:73:35 | username | logInjectionBad.js:75:15:75:22 | username |
|
||||
| logInjectionBad.js:73:20:73:20 | q | logInjectionBad.js:73:9:73:35 | username |
|
||||
| logInjectionBad.js:75:15:75:22 | username | logInjectionBad.js:77:5:85:5 | functio ... ;\\n } [username] |
|
||||
| logInjectionBad.js:75:15:75:22 | username | logInjectionBad.js:87:5:94:5 | functio ... ;\\n } [username] |
|
||||
| logInjectionBad.js:75:15:75:22 | username | logInjectionBad.js:96:5:103:5 | functio ... ;\\n } [username] |
|
||||
| logInjectionBad.js:75:15:75:22 | username | logInjectionBad.js:105:5:118:5 | functio ... ;\\n } [username] |
|
||||
| logInjectionBad.js:77:5:85:5 | functio ... ;\\n } [username] | logInjectionBad.js:82:30:82:37 | username |
|
||||
| logInjectionBad.js:87:5:94:5 | functio ... ;\\n } [username] | logInjectionBad.js:91:26:91:33 | username |
|
||||
| logInjectionBad.js:96:5:103:5 | functio ... ;\\n } [username] | logInjectionBad.js:99:26:99:33 | username |
|
||||
| logInjectionBad.js:105:5:118:5 | functio ... ;\\n } [username] | logInjectionBad.js:113:37:113:44 | username |
|
||||
| logInjectionBad.js:7:25:7:32 | username | logInjectionBad.js:8:38:8:45 | username | provenance | |
|
||||
| logInjectionBad.js:19:9:19:36 | q | logInjectionBad.js:20:20:20:20 | q | provenance | |
|
||||
| logInjectionBad.js:19:13:19:36 | url.par ... , true) | logInjectionBad.js:19:9:19:36 | q | provenance | |
|
||||
| logInjectionBad.js:19:23:19:29 | req.url | logInjectionBad.js:19:13:19:36 | url.par ... , true) | provenance | |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:22:34:22:41 | username | provenance | |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:23:37:23:44 | username | provenance | |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:24:35:24:42 | username | provenance | |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:25:36:25:43 | username | provenance | |
|
||||
| logInjectionBad.js:20:9:20:35 | username | logInjectionBad.js:28:24:28:31 | username | provenance | |
|
||||
| logInjectionBad.js:20:20:20:20 | q | logInjectionBad.js:20:9:20:35 | username | provenance | |
|
||||
| logInjectionBad.js:22:34:22:41 | username | logInjectionBad.js:22:18:22:43 | `[INFO] ... rname}` | provenance | |
|
||||
| logInjectionBad.js:28:9:28:32 | exceptional return of check_u ... ername) | logInjectionBad.js:29:14:29:18 | error | provenance | |
|
||||
| logInjectionBad.js:28:24:28:31 | username | logInjectionBad.js:7:25:7:32 | username | provenance | |
|
||||
| logInjectionBad.js:28:24:28:31 | username | logInjectionBad.js:28:9:28:32 | exceptional return of check_u ... ername) | provenance | |
|
||||
| logInjectionBad.js:29:14:29:18 | error | logInjectionBad.js:30:42:30:46 | error | provenance | |
|
||||
| logInjectionBad.js:30:42:30:46 | error | logInjectionBad.js:30:23:30:49 | `[ERROR ... rror}"` | provenance | |
|
||||
| logInjectionBad.js:46:9:46:36 | q | logInjectionBad.js:47:20:47:20 | q | provenance | |
|
||||
| logInjectionBad.js:46:13:46:36 | url.par ... , true) | logInjectionBad.js:46:9:46:36 | q | provenance | |
|
||||
| logInjectionBad.js:46:23:46:29 | req.url | logInjectionBad.js:46:13:46:36 | url.par ... , true) | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:49:46:49:53 | username | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:50:39:50:46 | username | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:51:48:51:55 | username | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:52:37:52:44 | username | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:53:27:53:34 | username | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:54:43:54:50 | username | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:55:48:55:55 | username | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:56:47:56:54 | username | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:57:40:57:47 | username | provenance | |
|
||||
| logInjectionBad.js:47:9:47:35 | username | logInjectionBad.js:58:50:58:57 | username | provenance | |
|
||||
| logInjectionBad.js:47:20:47:20 | q | logInjectionBad.js:47:9:47:35 | username | provenance | |
|
||||
| logInjectionBad.js:49:46:49:53 | username | logInjectionBad.js:49:18:49:54 | ansiCol ... ername) | provenance | |
|
||||
| logInjectionBad.js:50:39:50:46 | username | logInjectionBad.js:50:18:50:47 | colors. ... ername) | provenance | |
|
||||
| logInjectionBad.js:51:27:51:56 | colors. ... ername) | logInjectionBad.js:51:18:51:61 | wrapAns ... e), 20) | provenance | |
|
||||
| logInjectionBad.js:51:48:51:55 | username | logInjectionBad.js:51:27:51:56 | colors. ... ername) | provenance | |
|
||||
| logInjectionBad.js:52:27:52:46 | bold(blue(username)) | logInjectionBad.js:52:17:52:47 | underli ... name))) | provenance | |
|
||||
| logInjectionBad.js:52:32:52:45 | blue(username) | logInjectionBad.js:52:27:52:46 | bold(blue(username)) | provenance | |
|
||||
| logInjectionBad.js:52:37:52:44 | username | logInjectionBad.js:52:32:52:45 | blue(username) | provenance | |
|
||||
| logInjectionBad.js:53:27:53:34 | username | logInjectionBad.js:53:17:53:76 | highlig ... true}) | provenance | |
|
||||
| logInjectionBad.js:54:43:54:50 | username | logInjectionBad.js:54:17:54:51 | clc.red ... ername) | provenance | |
|
||||
| logInjectionBad.js:55:27:55:56 | colors. ... ername) | logInjectionBad.js:55:17:55:65 | sliceAn ... 20, 30) | provenance | |
|
||||
| logInjectionBad.js:55:48:55:55 | username | logInjectionBad.js:55:27:55:56 | colors. ... ername) | provenance | |
|
||||
| logInjectionBad.js:56:47:56:54 | username | logInjectionBad.js:56:17:56:55 | kleur.b ... ername) | provenance | |
|
||||
| logInjectionBad.js:57:40:57:47 | username | logInjectionBad.js:57:17:57:48 | chalk.u ... ername) | provenance | |
|
||||
| logInjectionBad.js:58:27:58:58 | chalk.u ... ername) | logInjectionBad.js:58:17:58:59 | stripAn ... rname)) | provenance | |
|
||||
| logInjectionBad.js:58:50:58:57 | username | logInjectionBad.js:58:27:58:58 | chalk.u ... ername) | provenance | |
|
||||
| logInjectionBad.js:63:9:63:36 | q | logInjectionBad.js:64:20:64:20 | q | provenance | |
|
||||
| logInjectionBad.js:63:13:63:36 | url.par ... , true) | logInjectionBad.js:63:9:63:36 | q | provenance | |
|
||||
| logInjectionBad.js:63:23:63:29 | req.url | logInjectionBad.js:63:13:63:36 | url.par ... , true) | provenance | |
|
||||
| logInjectionBad.js:64:9:64:35 | username | logInjectionBad.js:66:35:66:42 | username | provenance | |
|
||||
| logInjectionBad.js:64:20:64:20 | q | logInjectionBad.js:64:9:64:35 | username | provenance | |
|
||||
| logInjectionBad.js:66:35:66:42 | username | logInjectionBad.js:66:17:66:43 | prettyj ... ername) | provenance | |
|
||||
| logInjectionBad.js:72:9:72:36 | q | logInjectionBad.js:73:20:73:20 | q | provenance | |
|
||||
| logInjectionBad.js:72:13:72:36 | url.par ... , true) | logInjectionBad.js:72:9:72:36 | q | provenance | |
|
||||
| logInjectionBad.js:72:23:72:29 | req.url | logInjectionBad.js:72:13:72:36 | url.par ... , true) | provenance | |
|
||||
| logInjectionBad.js:73:9:73:35 | username | logInjectionBad.js:75:15:75:22 | username | provenance | |
|
||||
| logInjectionBad.js:73:9:73:35 | username | logInjectionBad.js:75:15:75:22 | username | provenance | |
|
||||
| logInjectionBad.js:73:20:73:20 | q | logInjectionBad.js:73:9:73:35 | username | provenance | |
|
||||
| logInjectionBad.js:75:15:75:22 | username | logInjectionBad.js:77:5:85:5 | functio ... ;\\n } [username] | provenance | |
|
||||
| logInjectionBad.js:75:15:75:22 | username | logInjectionBad.js:87:5:94:5 | functio ... ;\\n } [username] | provenance | |
|
||||
| logInjectionBad.js:75:15:75:22 | username | logInjectionBad.js:96:5:103:5 | functio ... ;\\n } [username] | provenance | |
|
||||
| logInjectionBad.js:75:15:75:22 | username | logInjectionBad.js:105:5:118:5 | functio ... ;\\n } [username] | provenance | |
|
||||
| logInjectionBad.js:77:5:85:5 | functio ... ;\\n } [username] | logInjectionBad.js:82:30:82:37 | username | provenance | |
|
||||
| logInjectionBad.js:87:5:94:5 | functio ... ;\\n } [username] | logInjectionBad.js:91:26:91:33 | username | provenance | |
|
||||
| logInjectionBad.js:96:5:103:5 | functio ... ;\\n } [username] | logInjectionBad.js:99:26:99:33 | username | provenance | |
|
||||
| logInjectionBad.js:105:5:118:5 | functio ... ;\\n } [username] | logInjectionBad.js:113:37:113:44 | username | provenance | |
|
||||
nodes
|
||||
| logInjectionBad.js:7:25:7:32 | username | semmle.label | username |
|
||||
| logInjectionBad.js:8:38:8:45 | username | semmle.label | username |
|
||||
|
||||
@@ -1,51 +1,51 @@
|
||||
edges
|
||||
| FileAccessToHttp.js:4:5:4:47 | content | FileAccessToHttp.js:9:23:9:29 | content |
|
||||
| FileAccessToHttp.js:4:15:4:47 | fs.read ... "utf8") | FileAccessToHttp.js:4:5:4:47 | content |
|
||||
| FileAccessToHttp.js:5:11:10:1 | [post update] {\\n hos ... ent }\\n} [headers, Referer] | FileAccessToHttp.js:5:11:10:1 | {\\n hos ... ent }\\n} |
|
||||
| FileAccessToHttp.js:9:12:9:31 | { Referer: content } [Referer] | FileAccessToHttp.js:5:11:10:1 | [post update] {\\n hos ... ent }\\n} [headers, Referer] |
|
||||
| FileAccessToHttp.js:9:23:9:29 | content | FileAccessToHttp.js:9:12:9:31 | { Referer: content } [Referer] |
|
||||
| bufferRead.js:12:13:12:43 | buffer | bufferRead.js:13:21:13:26 | buffer |
|
||||
| bufferRead.js:12:13:12:43 | buffer | bufferRead.js:13:32:13:37 | buffer |
|
||||
| bufferRead.js:12:22:12:43 | new Buf ... s.size) | bufferRead.js:12:13:12:43 | buffer |
|
||||
| bufferRead.js:13:21:13:26 | buffer | bufferRead.js:13:32:13:37 | buffer |
|
||||
| bufferRead.js:13:32:13:37 | buffer | bufferRead.js:15:26:15:31 | buffer |
|
||||
| bufferRead.js:15:15:15:62 | postData | bufferRead.js:33:21:33:28 | postData |
|
||||
| bufferRead.js:15:26:15:31 | buffer | bufferRead.js:15:26:15:62 | buffer. ... esRead) |
|
||||
| bufferRead.js:15:26:15:62 | buffer. ... esRead) | bufferRead.js:15:15:15:62 | postData |
|
||||
| readFileSync.js:5:5:5:39 | data | readFileSync.js:7:11:7:14 | data |
|
||||
| readFileSync.js:5:12:5:39 | fs.read ... t.txt") | readFileSync.js:5:5:5:39 | data |
|
||||
| readFileSync.js:7:7:7:25 | s | readFileSync.js:26:18:26:18 | s |
|
||||
| readFileSync.js:7:11:7:14 | data | readFileSync.js:7:11:7:25 | data.toString() |
|
||||
| readFileSync.js:7:11:7:25 | data.toString() | readFileSync.js:7:7:7:25 | s |
|
||||
| readStreamRead.js:13:13:13:35 | chunk | readStreamRead.js:30:19:30:23 | chunk |
|
||||
| readStreamRead.js:13:21:13:35 | readable.read() | readStreamRead.js:13:13:13:35 | chunk |
|
||||
| request.js:6:19:6:26 | jsonData | request.js:8:12:8:19 | jsonData |
|
||||
| request.js:8:11:8:20 | [post update] {jsonData} [jsonData] | request.js:8:11:8:20 | {jsonData} |
|
||||
| request.js:8:12:8:19 | jsonData | request.js:8:11:8:20 | [post update] {jsonData} [jsonData] |
|
||||
| request.js:13:18:13:24 | xmlData | request.js:22:11:22:17 | xmlData |
|
||||
| request.js:16:11:23:3 | [post update] {\\n u ... ody\\n } [body] | request.js:16:11:23:3 | {\\n u ... ody\\n } |
|
||||
| request.js:22:11:22:17 | xmlData | request.js:16:11:23:3 | [post update] {\\n u ... ody\\n } [body] |
|
||||
| request.js:28:52:28:55 | data | request.js:35:14:35:17 | data |
|
||||
| request.js:35:14:35:17 | data | request.js:6:19:6:26 | jsonData |
|
||||
| request.js:43:51:43:54 | data | request.js:50:13:50:16 | data |
|
||||
| request.js:50:13:50:16 | data | request.js:13:18:13:24 | xmlData |
|
||||
| sentAsHeaders.js:10:79:10:84 | buffer | sentAsHeaders.js:11:23:11:28 | buffer |
|
||||
| sentAsHeaders.js:11:13:11:59 | content | sentAsHeaders.js:12:19:12:25 | content |
|
||||
| sentAsHeaders.js:11:23:11:28 | buffer | sentAsHeaders.js:11:23:11:59 | buffer. ... esRead) |
|
||||
| sentAsHeaders.js:11:23:11:59 | buffer. ... esRead) | sentAsHeaders.js:11:13:11:59 | content |
|
||||
| sentAsHeaders.js:12:9:12:81 | content | sentAsHeaders.js:18:47:18:53 | content |
|
||||
| sentAsHeaders.js:12:9:12:81 | content | sentAsHeaders.js:24:47:24:53 | content |
|
||||
| sentAsHeaders.js:12:19:12:25 | content | sentAsHeaders.js:12:19:12:74 | content ... =", "") |
|
||||
| sentAsHeaders.js:12:19:12:74 | content ... =", "") | sentAsHeaders.js:12:19:12:81 | content ... .trim() |
|
||||
| sentAsHeaders.js:12:19:12:81 | content ... .trim() | sentAsHeaders.js:12:9:12:81 | content |
|
||||
| sentAsHeaders.js:14:20:19:9 | [post update] {\\n ... } [headers, Referer] | sentAsHeaders.js:14:20:19:9 | {\\n ... } |
|
||||
| sentAsHeaders.js:18:20:18:55 | { Refer ... ntent } [Referer] | sentAsHeaders.js:14:20:19:9 | [post update] {\\n ... } [headers, Referer] |
|
||||
| sentAsHeaders.js:18:31:18:53 | "http:/ ... content | sentAsHeaders.js:18:20:18:55 | { Refer ... ntent } [Referer] |
|
||||
| sentAsHeaders.js:18:47:18:53 | content | sentAsHeaders.js:18:31:18:53 | "http:/ ... content |
|
||||
| sentAsHeaders.js:20:20:25:9 | [post update] {\\n ... } [headers, Referer] | sentAsHeaders.js:20:20:25:9 | {\\n ... } |
|
||||
| sentAsHeaders.js:24:20:24:55 | { Refer ... ntent } [Referer] | sentAsHeaders.js:20:20:25:9 | [post update] {\\n ... } [headers, Referer] |
|
||||
| sentAsHeaders.js:24:31:24:53 | "http:/ ... content | sentAsHeaders.js:24:20:24:55 | { Refer ... ntent } [Referer] |
|
||||
| sentAsHeaders.js:24:47:24:53 | content | sentAsHeaders.js:24:31:24:53 | "http:/ ... content |
|
||||
| FileAccessToHttp.js:4:5:4:47 | content | FileAccessToHttp.js:9:23:9:29 | content | provenance | |
|
||||
| FileAccessToHttp.js:4:15:4:47 | fs.read ... "utf8") | FileAccessToHttp.js:4:5:4:47 | content | provenance | |
|
||||
| FileAccessToHttp.js:5:11:10:1 | [post update] {\\n hos ... ent }\\n} [headers, Referer] | FileAccessToHttp.js:5:11:10:1 | {\\n hos ... ent }\\n} | provenance | |
|
||||
| FileAccessToHttp.js:9:12:9:31 | { Referer: content } [Referer] | FileAccessToHttp.js:5:11:10:1 | [post update] {\\n hos ... ent }\\n} [headers, Referer] | provenance | |
|
||||
| FileAccessToHttp.js:9:23:9:29 | content | FileAccessToHttp.js:9:12:9:31 | { Referer: content } [Referer] | provenance | |
|
||||
| bufferRead.js:12:13:12:43 | buffer | bufferRead.js:13:21:13:26 | buffer | provenance | |
|
||||
| bufferRead.js:12:13:12:43 | buffer | bufferRead.js:13:32:13:37 | buffer | provenance | |
|
||||
| bufferRead.js:12:22:12:43 | new Buf ... s.size) | bufferRead.js:12:13:12:43 | buffer | provenance | |
|
||||
| bufferRead.js:13:21:13:26 | buffer | bufferRead.js:13:32:13:37 | buffer | provenance | |
|
||||
| bufferRead.js:13:32:13:37 | buffer | bufferRead.js:15:26:15:31 | buffer | provenance | |
|
||||
| bufferRead.js:15:15:15:62 | postData | bufferRead.js:33:21:33:28 | postData | provenance | |
|
||||
| bufferRead.js:15:26:15:31 | buffer | bufferRead.js:15:26:15:62 | buffer. ... esRead) | provenance | |
|
||||
| bufferRead.js:15:26:15:62 | buffer. ... esRead) | bufferRead.js:15:15:15:62 | postData | provenance | |
|
||||
| readFileSync.js:5:5:5:39 | data | readFileSync.js:7:11:7:14 | data | provenance | |
|
||||
| readFileSync.js:5:12:5:39 | fs.read ... t.txt") | readFileSync.js:5:5:5:39 | data | provenance | |
|
||||
| readFileSync.js:7:7:7:25 | s | readFileSync.js:26:18:26:18 | s | provenance | |
|
||||
| readFileSync.js:7:11:7:14 | data | readFileSync.js:7:11:7:25 | data.toString() | provenance | |
|
||||
| readFileSync.js:7:11:7:25 | data.toString() | readFileSync.js:7:7:7:25 | s | provenance | |
|
||||
| readStreamRead.js:13:13:13:35 | chunk | readStreamRead.js:30:19:30:23 | chunk | provenance | |
|
||||
| readStreamRead.js:13:21:13:35 | readable.read() | readStreamRead.js:13:13:13:35 | chunk | provenance | |
|
||||
| request.js:6:19:6:26 | jsonData | request.js:8:12:8:19 | jsonData | provenance | |
|
||||
| request.js:8:11:8:20 | [post update] {jsonData} [jsonData] | request.js:8:11:8:20 | {jsonData} | provenance | |
|
||||
| request.js:8:12:8:19 | jsonData | request.js:8:11:8:20 | [post update] {jsonData} [jsonData] | provenance | |
|
||||
| request.js:13:18:13:24 | xmlData | request.js:22:11:22:17 | xmlData | provenance | |
|
||||
| request.js:16:11:23:3 | [post update] {\\n u ... ody\\n } [body] | request.js:16:11:23:3 | {\\n u ... ody\\n } | provenance | |
|
||||
| request.js:22:11:22:17 | xmlData | request.js:16:11:23:3 | [post update] {\\n u ... ody\\n } [body] | provenance | |
|
||||
| request.js:28:52:28:55 | data | request.js:35:14:35:17 | data | provenance | |
|
||||
| request.js:35:14:35:17 | data | request.js:6:19:6:26 | jsonData | provenance | |
|
||||
| request.js:43:51:43:54 | data | request.js:50:13:50:16 | data | provenance | |
|
||||
| request.js:50:13:50:16 | data | request.js:13:18:13:24 | xmlData | provenance | |
|
||||
| sentAsHeaders.js:10:79:10:84 | buffer | sentAsHeaders.js:11:23:11:28 | buffer | provenance | |
|
||||
| sentAsHeaders.js:11:13:11:59 | content | sentAsHeaders.js:12:19:12:25 | content | provenance | |
|
||||
| sentAsHeaders.js:11:23:11:28 | buffer | sentAsHeaders.js:11:23:11:59 | buffer. ... esRead) | provenance | |
|
||||
| sentAsHeaders.js:11:23:11:59 | buffer. ... esRead) | sentAsHeaders.js:11:13:11:59 | content | provenance | |
|
||||
| sentAsHeaders.js:12:9:12:81 | content | sentAsHeaders.js:18:47:18:53 | content | provenance | |
|
||||
| sentAsHeaders.js:12:9:12:81 | content | sentAsHeaders.js:24:47:24:53 | content | provenance | |
|
||||
| sentAsHeaders.js:12:19:12:25 | content | sentAsHeaders.js:12:19:12:74 | content ... =", "") | provenance | |
|
||||
| sentAsHeaders.js:12:19:12:74 | content ... =", "") | sentAsHeaders.js:12:19:12:81 | content ... .trim() | provenance | |
|
||||
| sentAsHeaders.js:12:19:12:81 | content ... .trim() | sentAsHeaders.js:12:9:12:81 | content | provenance | |
|
||||
| sentAsHeaders.js:14:20:19:9 | [post update] {\\n ... } [headers, Referer] | sentAsHeaders.js:14:20:19:9 | {\\n ... } | provenance | |
|
||||
| sentAsHeaders.js:18:20:18:55 | { Refer ... ntent } [Referer] | sentAsHeaders.js:14:20:19:9 | [post update] {\\n ... } [headers, Referer] | provenance | |
|
||||
| sentAsHeaders.js:18:31:18:53 | "http:/ ... content | sentAsHeaders.js:18:20:18:55 | { Refer ... ntent } [Referer] | provenance | |
|
||||
| sentAsHeaders.js:18:47:18:53 | content | sentAsHeaders.js:18:31:18:53 | "http:/ ... content | provenance | |
|
||||
| sentAsHeaders.js:20:20:25:9 | [post update] {\\n ... } [headers, Referer] | sentAsHeaders.js:20:20:25:9 | {\\n ... } | provenance | |
|
||||
| sentAsHeaders.js:24:20:24:55 | { Refer ... ntent } [Referer] | sentAsHeaders.js:20:20:25:9 | [post update] {\\n ... } [headers, Referer] | provenance | |
|
||||
| sentAsHeaders.js:24:31:24:53 | "http:/ ... content | sentAsHeaders.js:24:20:24:55 | { Refer ... ntent } [Referer] | provenance | |
|
||||
| sentAsHeaders.js:24:47:24:53 | content | sentAsHeaders.js:24:31:24:53 | "http:/ ... content | provenance | |
|
||||
nodes
|
||||
| FileAccessToHttp.js:4:5:4:47 | content | semmle.label | content |
|
||||
| FileAccessToHttp.js:4:15:4:47 | fs.read ... "utf8") | semmle.label | fs.read ... "utf8") |
|
||||
|
||||
@@ -1,11 +1,11 @@
|
||||
edges
|
||||
| node.js:8:10:8:12 | err | node.js:11:13:11:15 | err |
|
||||
| node.js:11:13:11:15 | err | node.js:11:13:11:21 | err.stack |
|
||||
| tst.js:6:12:6:12 | e | tst.js:7:13:7:13 | e |
|
||||
| tst.js:6:12:6:12 | e | tst.js:8:15:8:15 | e |
|
||||
| tst.js:8:15:8:15 | e | tst.js:16:20:16:20 | e |
|
||||
| tst.js:16:20:16:20 | e | tst.js:17:11:17:11 | e |
|
||||
| tst.js:17:11:17:11 | e | tst.js:17:11:17:17 | e.stack |
|
||||
| node.js:8:10:8:12 | err | node.js:11:13:11:15 | err | provenance | |
|
||||
| node.js:11:13:11:15 | err | node.js:11:13:11:21 | err.stack | provenance | |
|
||||
| tst.js:6:12:6:12 | e | tst.js:7:13:7:13 | e | provenance | |
|
||||
| tst.js:6:12:6:12 | e | tst.js:8:15:8:15 | e | provenance | |
|
||||
| tst.js:8:15:8:15 | e | tst.js:16:20:16:20 | e | provenance | |
|
||||
| tst.js:16:20:16:20 | e | tst.js:17:11:17:11 | e | provenance | |
|
||||
| tst.js:17:11:17:11 | e | tst.js:17:11:17:17 | e.stack | provenance | |
|
||||
nodes
|
||||
| node.js:8:10:8:12 | err | semmle.label | err |
|
||||
| node.js:11:13:11:15 | err | semmle.label | err |
|
||||
|
||||
@@ -1,70 +1,70 @@
|
||||
edges
|
||||
| passwords.js:7:20:7:20 | x | passwords.js:8:21:8:21 | x |
|
||||
| passwords.js:10:11:10:18 | password | passwords.js:7:20:7:20 | x |
|
||||
| passwords.js:14:31:14:38 | password | passwords.js:14:17:14:38 | name + ... assword |
|
||||
| passwords.js:16:29:16:36 | password | passwords.js:16:17:16:38 | `${name ... sword}` |
|
||||
| passwords.js:18:9:20:5 | obj1 [password] | passwords.js:21:17:21:20 | obj1 [password] |
|
||||
| passwords.js:18:16:20:5 | {\\n ... x\\n } [password] | passwords.js:18:9:20:5 | obj1 [password] |
|
||||
| passwords.js:19:19:19:19 | x | passwords.js:18:16:20:5 | {\\n ... x\\n } [password] |
|
||||
| passwords.js:21:17:21:20 | obj1 [password] | passwords.js:21:17:21:20 | obj1 |
|
||||
| passwords.js:23:9:25:5 | obj2 [x] | passwords.js:26:17:26:20 | obj2 [x] |
|
||||
| passwords.js:23:16:25:5 | {\\n ... d\\n } [x] | passwords.js:23:9:25:5 | obj2 [x] |
|
||||
| passwords.js:24:12:24:19 | password | passwords.js:23:16:25:5 | {\\n ... d\\n } [x] |
|
||||
| passwords.js:26:17:26:20 | obj2 [x] | passwords.js:26:17:26:20 | obj2 |
|
||||
| passwords.js:28:9:28:17 | obj3 [x] | passwords.js:29:17:29:20 | obj3 [x] |
|
||||
| passwords.js:29:17:29:20 | obj3 [x] | passwords.js:29:17:29:20 | obj3 |
|
||||
| passwords.js:30:5:30:8 | [post update] obj3 [x] | passwords.js:28:9:28:17 | obj3 [x] |
|
||||
| passwords.js:30:14:30:21 | password | passwords.js:30:5:30:8 | [post update] obj3 [x] |
|
||||
| passwords.js:77:9:77:55 | temp [encryptedPassword] | passwords.js:78:17:78:20 | temp [encryptedPassword] |
|
||||
| passwords.js:77:16:77:55 | { encry ... sword } [encryptedPassword] | passwords.js:77:9:77:55 | temp [encryptedPassword] |
|
||||
| passwords.js:77:37:77:53 | req.body.password | passwords.js:77:16:77:55 | { encry ... sword } [encryptedPassword] |
|
||||
| passwords.js:78:17:78:20 | temp [encryptedPassword] | passwords.js:78:17:78:38 | temp.en ... assword |
|
||||
| passwords.js:80:9:80:25 | secret | passwords.js:81:24:81:29 | secret |
|
||||
| passwords.js:80:18:80:25 | password | passwords.js:80:9:80:25 | secret |
|
||||
| passwords.js:81:24:81:29 | secret | passwords.js:81:17:81:31 | `pw: ${secret}` |
|
||||
| passwords.js:93:39:93:46 | password | passwords.js:93:21:93:46 | "Passwo ... assword |
|
||||
| passwords.js:98:39:98:46 | password | passwords.js:98:21:98:46 | "Passwo ... assword |
|
||||
| passwords.js:105:39:105:46 | password | passwords.js:105:21:105:46 | "Passwo ... assword |
|
||||
| passwords.js:110:39:110:46 | password | passwords.js:110:21:110:46 | "Passwo ... assword |
|
||||
| passwords.js:114:43:114:50 | password | passwords.js:114:25:114:50 | "Passwo ... assword |
|
||||
| passwords.js:119:39:119:46 | password | passwords.js:119:21:119:46 | "Passwo ... assword |
|
||||
| passwords.js:122:31:122:38 | password | passwords.js:122:31:122:49 | password.toString() |
|
||||
| passwords.js:122:31:122:49 | password.toString() | passwords.js:122:17:122:49 | name + ... tring() |
|
||||
| passwords.js:123:31:123:38 | password | passwords.js:123:31:123:48 | password.valueOf() |
|
||||
| passwords.js:123:31:123:48 | password.valueOf() | passwords.js:123:17:123:48 | name + ... lueOf() |
|
||||
| passwords.js:127:9:132:5 | config [password] | passwords.js:135:17:135:22 | config [password] |
|
||||
| passwords.js:127:9:132:5 | config [x] | passwords.js:135:17:135:22 | config [x] |
|
||||
| passwords.js:127:9:132:5 | config [x] | passwords.js:136:17:136:22 | config [x] |
|
||||
| passwords.js:127:9:132:5 | config [y] | passwords.js:135:17:135:22 | config [y] |
|
||||
| passwords.js:127:9:132:5 | config [y] | passwords.js:137:17:137:22 | config [y] |
|
||||
| passwords.js:127:18:132:5 | {\\n ... )\\n } [password] | passwords.js:127:9:132:5 | config [password] |
|
||||
| passwords.js:127:18:132:5 | {\\n ... )\\n } [x] | passwords.js:127:9:132:5 | config [x] |
|
||||
| passwords.js:127:18:132:5 | {\\n ... )\\n } [y] | passwords.js:127:9:132:5 | config [y] |
|
||||
| passwords.js:128:19:128:19 | x | passwords.js:127:18:132:5 | {\\n ... )\\n } [password] |
|
||||
| passwords.js:130:12:130:19 | password | passwords.js:127:18:132:5 | {\\n ... )\\n } [x] |
|
||||
| passwords.js:131:12:131:24 | getPassword() | passwords.js:127:18:132:5 | {\\n ... )\\n } [y] |
|
||||
| passwords.js:135:17:135:22 | config [password] | passwords.js:135:17:135:22 | config |
|
||||
| passwords.js:135:17:135:22 | config [x] | passwords.js:135:17:135:22 | config |
|
||||
| passwords.js:135:17:135:22 | config [y] | passwords.js:135:17:135:22 | config |
|
||||
| passwords.js:136:17:136:22 | config [x] | passwords.js:136:17:136:24 | config.x |
|
||||
| passwords.js:137:17:137:22 | config [y] | passwords.js:137:17:137:24 | config.y |
|
||||
| passwords.js:146:9:148:5 | config [x] | passwords.js:149:21:149:26 | config [x] |
|
||||
| passwords.js:146:18:148:5 | {\\n ... d\\n } [x] | passwords.js:146:9:148:5 | config [x] |
|
||||
| passwords.js:147:12:147:19 | password | passwords.js:146:18:148:5 | {\\n ... d\\n } [x] |
|
||||
| passwords.js:149:21:149:26 | config [x] | passwords.js:149:21:149:28 | config.x |
|
||||
| passwords.js:149:21:149:28 | config.x | passwords.js:142:26:142:34 | arguments |
|
||||
| passwords.js:150:21:150:31 | process.env | passwords.js:142:26:142:34 | arguments |
|
||||
| passwords.js:152:9:152:63 | procdesc | passwords.js:154:21:154:28 | procdesc |
|
||||
| passwords.js:152:20:152:44 | Util.in ... ss.env) | passwords.js:152:20:152:63 | Util.in ... /g, '') |
|
||||
| passwords.js:152:20:152:63 | Util.in ... /g, '') | passwords.js:152:9:152:63 | procdesc |
|
||||
| passwords.js:152:33:152:43 | process.env | passwords.js:152:20:152:44 | Util.in ... ss.env) |
|
||||
| passwords.js:154:21:154:28 | procdesc | passwords.js:142:26:142:34 | arguments |
|
||||
| passwords.js:163:14:163:21 | password | passwords.js:163:14:163:41 | passwor ... g, "*") |
|
||||
| passwords.js:164:14:164:21 | password | passwords.js:164:14:164:42 | passwor ... g, "*") |
|
||||
| passwords.js:169:17:169:24 | password | passwords.js:169:17:169:45 | passwor ... g, "*") |
|
||||
| passwords.js:170:11:170:18 | password | passwords.js:170:11:170:39 | passwor ... g, "*") |
|
||||
| passwords_in_server_5.js:4:7:4:24 | req.query.password | passwords_in_server_5.js:7:12:7:12 | x |
|
||||
| passwords_in_server_5.js:7:12:7:12 | x | passwords_in_server_5.js:8:17:8:17 | x |
|
||||
| passwords.js:7:20:7:20 | x | passwords.js:8:21:8:21 | x | provenance | |
|
||||
| passwords.js:10:11:10:18 | password | passwords.js:7:20:7:20 | x | provenance | |
|
||||
| passwords.js:14:31:14:38 | password | passwords.js:14:17:14:38 | name + ... assword | provenance | |
|
||||
| passwords.js:16:29:16:36 | password | passwords.js:16:17:16:38 | `${name ... sword}` | provenance | |
|
||||
| passwords.js:18:9:20:5 | obj1 [password] | passwords.js:21:17:21:20 | obj1 [password] | provenance | |
|
||||
| passwords.js:18:16:20:5 | {\\n ... x\\n } [password] | passwords.js:18:9:20:5 | obj1 [password] | provenance | |
|
||||
| passwords.js:19:19:19:19 | x | passwords.js:18:16:20:5 | {\\n ... x\\n } [password] | provenance | |
|
||||
| passwords.js:21:17:21:20 | obj1 [password] | passwords.js:21:17:21:20 | obj1 | provenance | |
|
||||
| passwords.js:23:9:25:5 | obj2 [x] | passwords.js:26:17:26:20 | obj2 [x] | provenance | |
|
||||
| passwords.js:23:16:25:5 | {\\n ... d\\n } [x] | passwords.js:23:9:25:5 | obj2 [x] | provenance | |
|
||||
| passwords.js:24:12:24:19 | password | passwords.js:23:16:25:5 | {\\n ... d\\n } [x] | provenance | |
|
||||
| passwords.js:26:17:26:20 | obj2 [x] | passwords.js:26:17:26:20 | obj2 | provenance | |
|
||||
| passwords.js:28:9:28:17 | obj3 [x] | passwords.js:29:17:29:20 | obj3 [x] | provenance | |
|
||||
| passwords.js:29:17:29:20 | obj3 [x] | passwords.js:29:17:29:20 | obj3 | provenance | |
|
||||
| passwords.js:30:5:30:8 | [post update] obj3 [x] | passwords.js:28:9:28:17 | obj3 [x] | provenance | |
|
||||
| passwords.js:30:14:30:21 | password | passwords.js:30:5:30:8 | [post update] obj3 [x] | provenance | |
|
||||
| passwords.js:77:9:77:55 | temp [encryptedPassword] | passwords.js:78:17:78:20 | temp [encryptedPassword] | provenance | |
|
||||
| passwords.js:77:16:77:55 | { encry ... sword } [encryptedPassword] | passwords.js:77:9:77:55 | temp [encryptedPassword] | provenance | |
|
||||
| passwords.js:77:37:77:53 | req.body.password | passwords.js:77:16:77:55 | { encry ... sword } [encryptedPassword] | provenance | |
|
||||
| passwords.js:78:17:78:20 | temp [encryptedPassword] | passwords.js:78:17:78:38 | temp.en ... assword | provenance | |
|
||||
| passwords.js:80:9:80:25 | secret | passwords.js:81:24:81:29 | secret | provenance | |
|
||||
| passwords.js:80:18:80:25 | password | passwords.js:80:9:80:25 | secret | provenance | |
|
||||
| passwords.js:81:24:81:29 | secret | passwords.js:81:17:81:31 | `pw: ${secret}` | provenance | |
|
||||
| passwords.js:93:39:93:46 | password | passwords.js:93:21:93:46 | "Passwo ... assword | provenance | |
|
||||
| passwords.js:98:39:98:46 | password | passwords.js:98:21:98:46 | "Passwo ... assword | provenance | |
|
||||
| passwords.js:105:39:105:46 | password | passwords.js:105:21:105:46 | "Passwo ... assword | provenance | |
|
||||
| passwords.js:110:39:110:46 | password | passwords.js:110:21:110:46 | "Passwo ... assword | provenance | |
|
||||
| passwords.js:114:43:114:50 | password | passwords.js:114:25:114:50 | "Passwo ... assword | provenance | |
|
||||
| passwords.js:119:39:119:46 | password | passwords.js:119:21:119:46 | "Passwo ... assword | provenance | |
|
||||
| passwords.js:122:31:122:38 | password | passwords.js:122:31:122:49 | password.toString() | provenance | |
|
||||
| passwords.js:122:31:122:49 | password.toString() | passwords.js:122:17:122:49 | name + ... tring() | provenance | |
|
||||
| passwords.js:123:31:123:38 | password | passwords.js:123:31:123:48 | password.valueOf() | provenance | |
|
||||
| passwords.js:123:31:123:48 | password.valueOf() | passwords.js:123:17:123:48 | name + ... lueOf() | provenance | |
|
||||
| passwords.js:127:9:132:5 | config [password] | passwords.js:135:17:135:22 | config [password] | provenance | |
|
||||
| passwords.js:127:9:132:5 | config [x] | passwords.js:135:17:135:22 | config [x] | provenance | |
|
||||
| passwords.js:127:9:132:5 | config [x] | passwords.js:136:17:136:22 | config [x] | provenance | |
|
||||
| passwords.js:127:9:132:5 | config [y] | passwords.js:135:17:135:22 | config [y] | provenance | |
|
||||
| passwords.js:127:9:132:5 | config [y] | passwords.js:137:17:137:22 | config [y] | provenance | |
|
||||
| passwords.js:127:18:132:5 | {\\n ... )\\n } [password] | passwords.js:127:9:132:5 | config [password] | provenance | |
|
||||
| passwords.js:127:18:132:5 | {\\n ... )\\n } [x] | passwords.js:127:9:132:5 | config [x] | provenance | |
|
||||
| passwords.js:127:18:132:5 | {\\n ... )\\n } [y] | passwords.js:127:9:132:5 | config [y] | provenance | |
|
||||
| passwords.js:128:19:128:19 | x | passwords.js:127:18:132:5 | {\\n ... )\\n } [password] | provenance | |
|
||||
| passwords.js:130:12:130:19 | password | passwords.js:127:18:132:5 | {\\n ... )\\n } [x] | provenance | |
|
||||
| passwords.js:131:12:131:24 | getPassword() | passwords.js:127:18:132:5 | {\\n ... )\\n } [y] | provenance | |
|
||||
| passwords.js:135:17:135:22 | config [password] | passwords.js:135:17:135:22 | config | provenance | |
|
||||
| passwords.js:135:17:135:22 | config [x] | passwords.js:135:17:135:22 | config | provenance | |
|
||||
| passwords.js:135:17:135:22 | config [y] | passwords.js:135:17:135:22 | config | provenance | |
|
||||
| passwords.js:136:17:136:22 | config [x] | passwords.js:136:17:136:24 | config.x | provenance | |
|
||||
| passwords.js:137:17:137:22 | config [y] | passwords.js:137:17:137:24 | config.y | provenance | |
|
||||
| passwords.js:146:9:148:5 | config [x] | passwords.js:149:21:149:26 | config [x] | provenance | |
|
||||
| passwords.js:146:18:148:5 | {\\n ... d\\n } [x] | passwords.js:146:9:148:5 | config [x] | provenance | |
|
||||
| passwords.js:147:12:147:19 | password | passwords.js:146:18:148:5 | {\\n ... d\\n } [x] | provenance | |
|
||||
| passwords.js:149:21:149:26 | config [x] | passwords.js:149:21:149:28 | config.x | provenance | |
|
||||
| passwords.js:149:21:149:28 | config.x | passwords.js:142:26:142:34 | arguments | provenance | Config |
|
||||
| passwords.js:150:21:150:31 | process.env | passwords.js:142:26:142:34 | arguments | provenance | Config |
|
||||
| passwords.js:152:9:152:63 | procdesc | passwords.js:154:21:154:28 | procdesc | provenance | |
|
||||
| passwords.js:152:20:152:44 | Util.in ... ss.env) | passwords.js:152:20:152:63 | Util.in ... /g, '') | provenance | |
|
||||
| passwords.js:152:20:152:63 | Util.in ... /g, '') | passwords.js:152:9:152:63 | procdesc | provenance | |
|
||||
| passwords.js:152:33:152:43 | process.env | passwords.js:152:20:152:44 | Util.in ... ss.env) | provenance | |
|
||||
| passwords.js:154:21:154:28 | procdesc | passwords.js:142:26:142:34 | arguments | provenance | Config |
|
||||
| passwords.js:163:14:163:21 | password | passwords.js:163:14:163:41 | passwor ... g, "*") | provenance | |
|
||||
| passwords.js:164:14:164:21 | password | passwords.js:164:14:164:42 | passwor ... g, "*") | provenance | |
|
||||
| passwords.js:169:17:169:24 | password | passwords.js:169:17:169:45 | passwor ... g, "*") | provenance | |
|
||||
| passwords.js:170:11:170:18 | password | passwords.js:170:11:170:39 | passwor ... g, "*") | provenance | |
|
||||
| passwords_in_server_5.js:4:7:4:24 | req.query.password | passwords_in_server_5.js:7:12:7:12 | x | provenance | |
|
||||
| passwords_in_server_5.js:7:12:7:12 | x | passwords_in_server_5.js:8:17:8:17 | x | provenance | |
|
||||
nodes
|
||||
| passwords.js:2:17:2:24 | password | semmle.label | password |
|
||||
| passwords.js:3:17:3:26 | o.password | semmle.label | o.password |
|
||||
|
||||
@@ -1,9 +1,9 @@
|
||||
edges
|
||||
| CleartextStorage2.js:5:7:5:58 | pw | CleartextStorage2.js:7:33:7:34 | pw |
|
||||
| CleartextStorage2.js:5:12:5:58 | url.par ... assword | CleartextStorage2.js:5:7:5:58 | pw |
|
||||
| CleartextStorage2.js:7:33:7:34 | pw | CleartextStorage2.js:7:19:7:34 | 'password=' + pw |
|
||||
| CleartextStorage.js:5:7:5:40 | pw | CleartextStorage.js:7:26:7:27 | pw |
|
||||
| CleartextStorage.js:5:12:5:40 | req.par ... sword") | CleartextStorage.js:5:7:5:40 | pw |
|
||||
| CleartextStorage2.js:5:7:5:58 | pw | CleartextStorage2.js:7:33:7:34 | pw | provenance | |
|
||||
| CleartextStorage2.js:5:12:5:58 | url.par ... assword | CleartextStorage2.js:5:7:5:58 | pw | provenance | |
|
||||
| CleartextStorage2.js:7:33:7:34 | pw | CleartextStorage2.js:7:19:7:34 | 'password=' + pw | provenance | |
|
||||
| CleartextStorage.js:5:7:5:40 | pw | CleartextStorage.js:7:26:7:27 | pw | provenance | |
|
||||
| CleartextStorage.js:5:12:5:40 | req.par ... sword") | CleartextStorage.js:5:7:5:40 | pw | provenance | |
|
||||
nodes
|
||||
| CleartextStorage2.js:5:7:5:58 | pw | semmle.label | pw |
|
||||
| CleartextStorage2.js:5:12:5:58 | url.par ... assword | semmle.label | url.par ... assword |
|
||||
|
||||
@@ -1,36 +1,36 @@
|
||||
edges
|
||||
| tst.js:6:31:6:43 | Math.random() | tst.js:6:20:6:43 | "prefix ... andom() | provenance | |
|
||||
| tst.js:6:31:6:43 | Math.random() | tst.js:6:20:6:43 | "prefix ... andom() | provenance | Config |
|
||||
| tst.js:19:9:19:36 | suffix | tst.js:20:31:20:36 | suffix | provenance | |
|
||||
| tst.js:19:18:19:30 | Math.random() | tst.js:19:18:19:36 | Math.random() % 255 | provenance | |
|
||||
| tst.js:19:18:19:30 | Math.random() | tst.js:19:18:19:36 | Math.random() % 255 | provenance | Config |
|
||||
| tst.js:19:18:19:36 | Math.random() % 255 | tst.js:19:9:19:36 | suffix | provenance | |
|
||||
| tst.js:20:31:20:36 | suffix | tst.js:20:20:20:36 | "prefix" + suffix | provenance | |
|
||||
| tst.js:20:31:20:36 | suffix | tst.js:20:20:20:36 | "prefix" + suffix | provenance | Config |
|
||||
| tst.js:28:9:28:26 | pw | tst.js:29:20:29:21 | pw | provenance | |
|
||||
| tst.js:28:14:28:26 | Math.random() | tst.js:28:9:28:26 | pw | provenance | |
|
||||
| tst.js:41:21:41:33 | Math.random() | tst.js:41:20:41:33 | !Math.random() | provenance | |
|
||||
| tst.js:61:22:61:34 | Math.random() | tst.js:61:17:61:34 | '' + Math.random() | provenance | |
|
||||
| tst.js:66:29:66:41 | Math.random() | tst.js:66:18:66:42 | Math.fl ... ndom()) | provenance | |
|
||||
| tst.js:41:21:41:33 | Math.random() | tst.js:41:20:41:33 | !Math.random() | provenance | Config |
|
||||
| tst.js:61:22:61:34 | Math.random() | tst.js:61:17:61:34 | '' + Math.random() | provenance | Config |
|
||||
| tst.js:66:29:66:41 | Math.random() | tst.js:66:18:66:42 | Math.fl ... ndom()) | provenance | Config |
|
||||
| tst.js:71:9:71:48 | rand | tst.js:72:34:72:37 | rand | provenance | |
|
||||
| tst.js:71:16:71:48 | Math.fl ... 999999) | tst.js:71:9:71:48 | rand | provenance | |
|
||||
| tst.js:71:27:71:39 | Math.random() | tst.js:71:27:71:47 | Math.ra ... 9999999 | provenance | |
|
||||
| tst.js:71:27:71:47 | Math.ra ... 9999999 | tst.js:71:16:71:48 | Math.fl ... 999999) | provenance | |
|
||||
| tst.js:71:27:71:39 | Math.random() | tst.js:71:27:71:47 | Math.ra ... 9999999 | provenance | Config |
|
||||
| tst.js:71:27:71:47 | Math.ra ... 9999999 | tst.js:71:16:71:48 | Math.fl ... 999999) | provenance | Config |
|
||||
| tst.js:72:9:72:48 | concat | tst.js:73:23:73:28 | concat | provenance | |
|
||||
| tst.js:72:18:72:48 | ts.toSt ... tring() | tst.js:72:9:72:48 | concat | provenance | |
|
||||
| tst.js:72:34:72:37 | rand | tst.js:72:34:72:48 | rand.toString() | provenance | |
|
||||
| tst.js:72:34:72:48 | rand.toString() | tst.js:72:18:72:48 | ts.toSt ... tring() | provenance | |
|
||||
| tst.js:72:34:72:37 | rand | tst.js:72:34:72:48 | rand.toString() | provenance | Config |
|
||||
| tst.js:72:34:72:48 | rand.toString() | tst.js:72:18:72:48 | ts.toSt ... tring() | provenance | Config |
|
||||
| tst.js:77:16:77:21 | secret | tst.js:77:16:77:21 | secret | provenance | |
|
||||
| tst.js:80:7:80:19 | Math.random() | tst.js:77:16:77:21 | secret | provenance | |
|
||||
| tst.js:115:27:115:39 | Math.random() | tst.js:115:27:115:55 | Math.ra ... 000_000 | provenance | |
|
||||
| tst.js:115:27:115:55 | Math.ra ... 000_000 | tst.js:115:16:115:56 | Math.fl ... 00_000) | provenance | |
|
||||
| tst.js:116:33:116:45 | Math.random() | tst.js:116:33:116:61 | Math.ra ... 000_000 | provenance | |
|
||||
| tst.js:116:33:116:61 | Math.ra ... 000_000 | tst.js:116:22:116:62 | Math.fl ... 00_000) | provenance | |
|
||||
| tst.js:117:26:117:38 | Math.random() | tst.js:117:26:117:54 | Math.ra ... 000_000 | provenance | |
|
||||
| tst.js:117:26:117:54 | Math.ra ... 000_000 | tst.js:117:15:117:55 | Math.fl ... 00_000) | provenance | |
|
||||
| tst.js:118:34:118:46 | Math.random() | tst.js:118:34:118:62 | Math.ra ... 000_000 | provenance | |
|
||||
| tst.js:118:34:118:62 | Math.ra ... 000_000 | tst.js:118:23:118:63 | Math.fl ... 00_000) | provenance | |
|
||||
| tst.js:136:21:136:67 | chars[M ... ength)] | tst.js:136:9:136:67 | password | provenance | |
|
||||
| tst.js:136:27:136:66 | Math.fl ... length) | tst.js:136:21:136:67 | chars[M ... ength)] | provenance | |
|
||||
| tst.js:136:38:136:50 | Math.random() | tst.js:136:38:136:65 | Math.ra ... .length | provenance | |
|
||||
| tst.js:136:38:136:65 | Math.ra ... .length | tst.js:136:27:136:66 | Math.fl ... length) | provenance | |
|
||||
| tst.js:115:27:115:39 | Math.random() | tst.js:115:27:115:55 | Math.ra ... 000_000 | provenance | Config |
|
||||
| tst.js:115:27:115:55 | Math.ra ... 000_000 | tst.js:115:16:115:56 | Math.fl ... 00_000) | provenance | Config |
|
||||
| tst.js:116:33:116:45 | Math.random() | tst.js:116:33:116:61 | Math.ra ... 000_000 | provenance | Config |
|
||||
| tst.js:116:33:116:61 | Math.ra ... 000_000 | tst.js:116:22:116:62 | Math.fl ... 00_000) | provenance | Config |
|
||||
| tst.js:117:26:117:38 | Math.random() | tst.js:117:26:117:54 | Math.ra ... 000_000 | provenance | Config |
|
||||
| tst.js:117:26:117:54 | Math.ra ... 000_000 | tst.js:117:15:117:55 | Math.fl ... 00_000) | provenance | Config |
|
||||
| tst.js:118:34:118:46 | Math.random() | tst.js:118:34:118:62 | Math.ra ... 000_000 | provenance | Config |
|
||||
| tst.js:118:34:118:62 | Math.ra ... 000_000 | tst.js:118:23:118:63 | Math.fl ... 00_000) | provenance | Config |
|
||||
| tst.js:136:21:136:67 | chars[M ... ength)] | tst.js:136:9:136:67 | password | provenance | Config |
|
||||
| tst.js:136:27:136:66 | Math.fl ... length) | tst.js:136:21:136:67 | chars[M ... ength)] | provenance | Config |
|
||||
| tst.js:136:38:136:50 | Math.random() | tst.js:136:38:136:65 | Math.ra ... .length | provenance | Config |
|
||||
| tst.js:136:38:136:65 | Math.ra ... .length | tst.js:136:27:136:66 | Math.fl ... length) | provenance | Config |
|
||||
nodes
|
||||
| tst.js:2:20:2:32 | Math.random() | semmle.label | Math.random() |
|
||||
| tst.js:6:20:6:43 | "prefix ... andom() | semmle.label | "prefix ... andom() |
|
||||
|
||||
@@ -1,7 +1,7 @@
|
||||
edges
|
||||
| tst.js:12:9:12:54 | origin | tst.js:13:50:13:55 | origin |
|
||||
| tst.js:12:18:12:41 | url.par ... , true) | tst.js:12:9:12:54 | origin |
|
||||
| tst.js:12:28:12:34 | req.url | tst.js:12:18:12:41 | url.par ... , true) |
|
||||
| tst.js:12:9:12:54 | origin | tst.js:13:50:13:55 | origin | provenance | |
|
||||
| tst.js:12:18:12:41 | url.par ... , true) | tst.js:12:9:12:54 | origin | provenance | |
|
||||
| tst.js:12:28:12:34 | req.url | tst.js:12:18:12:41 | url.par ... , true) | provenance | |
|
||||
nodes
|
||||
| tst.js:12:9:12:54 | origin | semmle.label | origin |
|
||||
| tst.js:12:18:12:41 | url.par ... , true) | semmle.label | url.par ... , true) |
|
||||
|
||||
@@ -1,16 +1,16 @@
|
||||
edges
|
||||
| insecure-temporary-file.js:7:9:11:5 | tmpLocation | insecure-temporary-file.js:13:22:13:32 | tmpLocation |
|
||||
| insecure-temporary-file.js:7:23:11:5 | path.jo ... )\\n ) | insecure-temporary-file.js:7:9:11:5 | tmpLocation |
|
||||
| insecure-temporary-file.js:8:21:8:31 | os.tmpdir() | insecure-temporary-file.js:7:23:11:5 | path.jo ... )\\n ) |
|
||||
| insecure-temporary-file.js:15:9:15:34 | tmpPath | insecure-temporary-file.js:17:32:17:38 | tmpPath |
|
||||
| insecure-temporary-file.js:15:9:15:34 | tmpPath | insecure-temporary-file.js:23:32:23:38 | tmpPath |
|
||||
| insecure-temporary-file.js:15:19:15:34 | "/tmp/something" | insecure-temporary-file.js:15:9:15:34 | tmpPath |
|
||||
| insecure-temporary-file.js:17:32:17:38 | tmpPath | insecure-temporary-file.js:17:22:17:49 | path.jo ... /foo/") |
|
||||
| insecure-temporary-file.js:23:32:23:38 | tmpPath | insecure-temporary-file.js:23:22:23:49 | path.jo ... /foo/") |
|
||||
| insecure-temporary-file.js:25:11:25:92 | tmpPath2 | insecure-temporary-file.js:26:22:26:29 | tmpPath2 |
|
||||
| insecure-temporary-file.js:25:11:25:92 | tmpPath2 | insecure-temporary-file.js:28:17:28:24 | tmpPath2 |
|
||||
| insecure-temporary-file.js:25:22:25:92 | path.jo ... )}.md`) | insecure-temporary-file.js:25:11:25:92 | tmpPath2 |
|
||||
| insecure-temporary-file.js:25:32:25:42 | os.tmpdir() | insecure-temporary-file.js:25:22:25:92 | path.jo ... )}.md`) |
|
||||
| insecure-temporary-file.js:7:9:11:5 | tmpLocation | insecure-temporary-file.js:13:22:13:32 | tmpLocation | provenance | |
|
||||
| insecure-temporary-file.js:7:23:11:5 | path.jo ... )\\n ) | insecure-temporary-file.js:7:9:11:5 | tmpLocation | provenance | |
|
||||
| insecure-temporary-file.js:8:21:8:31 | os.tmpdir() | insecure-temporary-file.js:7:23:11:5 | path.jo ... )\\n ) | provenance | |
|
||||
| insecure-temporary-file.js:15:9:15:34 | tmpPath | insecure-temporary-file.js:17:32:17:38 | tmpPath | provenance | |
|
||||
| insecure-temporary-file.js:15:9:15:34 | tmpPath | insecure-temporary-file.js:23:32:23:38 | tmpPath | provenance | |
|
||||
| insecure-temporary-file.js:15:19:15:34 | "/tmp/something" | insecure-temporary-file.js:15:9:15:34 | tmpPath | provenance | |
|
||||
| insecure-temporary-file.js:17:32:17:38 | tmpPath | insecure-temporary-file.js:17:22:17:49 | path.jo ... /foo/") | provenance | |
|
||||
| insecure-temporary-file.js:23:32:23:38 | tmpPath | insecure-temporary-file.js:23:22:23:49 | path.jo ... /foo/") | provenance | |
|
||||
| insecure-temporary-file.js:25:11:25:92 | tmpPath2 | insecure-temporary-file.js:26:22:26:29 | tmpPath2 | provenance | |
|
||||
| insecure-temporary-file.js:25:11:25:92 | tmpPath2 | insecure-temporary-file.js:28:17:28:24 | tmpPath2 | provenance | |
|
||||
| insecure-temporary-file.js:25:22:25:92 | path.jo ... )}.md`) | insecure-temporary-file.js:25:11:25:92 | tmpPath2 | provenance | |
|
||||
| insecure-temporary-file.js:25:32:25:42 | os.tmpdir() | insecure-temporary-file.js:25:22:25:92 | path.jo ... )}.md`) | provenance | |
|
||||
nodes
|
||||
| insecure-temporary-file.js:7:9:11:5 | tmpLocation | semmle.label | tmpLocation |
|
||||
| insecure-temporary-file.js:7:23:11:5 | path.jo ... )\\n ) | semmle.label | path.jo ... )\\n ) |
|
||||
|
||||
@@ -1,355 +1,355 @@
|
||||
edges
|
||||
| lib/closure.js:3:21:3:21 | x | lib/closure.js:4:16:4:16 | x |
|
||||
| lib/indirect.js:1:32:1:32 | x | lib/indirect.js:2:16:2:16 | x |
|
||||
| lib/lib.js:3:28:3:31 | name | lib/lib.js:4:14:4:17 | name |
|
||||
| lib/lib.js:7:19:7:22 | name | lib/lib.js:8:13:8:16 | name |
|
||||
| lib/lib.js:32:32:32:40 | arguments | lib/lib.js:35:1:37:1 | 'arguments' object of function usedWithArguments |
|
||||
| lib/lib.js:35:1:37:1 | 'arguments' object of function usedWithArguments | lib/lib.js:35:28:35:31 | name |
|
||||
| lib/lib.js:35:28:35:31 | name | lib/lib.js:36:13:36:16 | name |
|
||||
| lib/lib.js:41:32:41:35 | name | lib/lib.js:42:17:42:20 | name |
|
||||
| lib/lib.js:41:32:41:35 | name | lib/lib.js:44:12:44:15 | name |
|
||||
| lib/lib.js:44:5:44:25 | name | lib/lib.js:45:17:45:20 | name |
|
||||
| lib/lib.js:44:12:44:15 | name | lib/lib.js:44:12:44:25 | name.substr(1) |
|
||||
| lib/lib.js:44:12:44:25 | name.substr(1) | lib/lib.js:44:5:44:25 | name |
|
||||
| lib/lib.js:52:22:52:25 | name | lib/lib.js:53:16:53:19 | name |
|
||||
| lib/moduleLib/moduleLib.js:1:28:1:31 | name | lib/moduleLib/moduleLib.js:2:13:2:16 | name |
|
||||
| lib/otherLib/js/src/index.js:1:28:1:31 | name | lib/otherLib/js/src/index.js:2:13:2:16 | name |
|
||||
| lib/snapdragon.js:3:34:3:38 | input | lib/snapdragon.js:9:12:9:16 | input |
|
||||
| lib/snapdragon.js:9:12:9:16 | input | lib/snapdragon.js:7:15:7:18 | this |
|
||||
| lib/snapdragon.js:12:34:12:38 | input | lib/snapdragon.js:17:20:17:24 | input |
|
||||
| lib/snapdragon.js:17:20:17:24 | input | lib/snapdragon.js:15:13:15:16 | this |
|
||||
| lib/snapdragon.js:20:34:20:38 | input | lib/snapdragon.js:25:22:25:26 | input |
|
||||
| lib/snapdragon.js:22:44:22:47 | node | lib/snapdragon.js:23:5:23:8 | node |
|
||||
| lib/snapdragon.js:23:5:23:8 | node | lib/snapdragon.js:23:5:23:12 | node.val |
|
||||
| lib/snapdragon.js:25:22:25:26 | input | lib/snapdragon.js:22:44:22:47 | node |
|
||||
| lib/subLib4/factory.js:7:27:7:30 | name | lib/subLib4/factory.js:8:13:8:16 | name |
|
||||
| lib/subLib5/feature.js:1:28:1:31 | name | lib/subLib5/feature.js:2:13:2:16 | name |
|
||||
| lib/subLib5/main.js:1:28:1:31 | name | lib/subLib5/main.js:2:13:2:16 | name |
|
||||
| lib/subLib5/subclass.js:4:10:4:13 | name | lib/subLib5/subclass.js:5:16:5:19 | name |
|
||||
| lib/subLib6/index.js:1:32:1:35 | name | lib/subLib6/index.js:2:14:2:17 | name |
|
||||
| lib/sublib/factory.js:12:26:12:29 | name | lib/sublib/factory.js:13:24:13:27 | name |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:7:2:7:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:7:2:7:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:8:2:8:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:8:2:8:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:9:2:9:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:9:2:9:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:10:2:10:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:11:2:11:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:11:2:11:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:12:2:12:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:12:2:12:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:13:2:13:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:14:2:14:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:15:2:15:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:15:2:15:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:16:2:16:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:16:2:16:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:17:23:17:29 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:17:23:17:29 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:18:2:18:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:18:2:18:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:19:2:19:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:19:2:19:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:20:2:20:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:20:2:20:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:21:6:21:12 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:25:2:25:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:25:2:25:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:26:2:26:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:27:77:27:83 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:28:76:28:82 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:30:2:30:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:30:2:30:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:31:2:31:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:32:2:32:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:33:2:33:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:33:2:33:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:34:2:34:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:36:2:36:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:36:2:36:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:37:2:37:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:37:2:37:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:38:2:38:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:38:2:38:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:40:2:40:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:40:2:40:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:41:2:41:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:43:2:43:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:43:2:43:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:44:2:44:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:46:2:46:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:47:2:47:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:48:2:48:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:48:2:48:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:50:14:50:20 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:50:14:50:20 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:51:26:51:32 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:51:26:51:32 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:52:22:52:28 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:52:22:52:28 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:53:21:53:27 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:53:21:53:27 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:54:22:54:28 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:54:22:54:28 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:55:23:55:29 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:55:23:55:29 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:56:22:56:28 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:56:22:56:28 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:57:25:57:31 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:57:25:57:31 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:58:21:58:27 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:58:21:58:27 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:59:23:59:29 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:59:23:59:29 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:60:17:60:23 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:61:18:61:24 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:62:17:62:23 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:62:17:62:23 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:63:21:63:27 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:63:21:63:27 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:64:24:64:30 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:64:24:64:30 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:65:24:65:30 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:65:24:65:30 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:66:19:66:25 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:66:19:66:25 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:67:18:67:24 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:67:18:67:24 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:71:2:71:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:71:2:71:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:73:2:73:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:73:2:73:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:75:2:75:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:75:2:75:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:77:2:77:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:77:2:77:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:80:2:80:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:80:2:80:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:81:2:81:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:81:2:81:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:82:2:82:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:83:2:83:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:84:2:84:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:86:2:86:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:86:2:86:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:88:2:88:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:88:2:88:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:89:2:89:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:89:2:89:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:90:2:90:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:90:2:90:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:91:2:91:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:92:2:92:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:94:2:94:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:94:2:94:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:95:2:95:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:95:2:95:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:96:2:96:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:96:2:96:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:98:2:98:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:98:2:98:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:100:2:100:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:100:2:100:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:101:2:101:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:101:2:101:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:102:2:102:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:102:2:102:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:103:2:103:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:103:2:103:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:104:2:104:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:104:2:104:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:105:2:105:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:107:2:107:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:107:2:107:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:108:2:108:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:108:2:108:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:109:2:109:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:109:2:109:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:111:2:111:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:111:2:111:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:112:2:112:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:112:2:112:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:114:2:114:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:114:2:114:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:116:2:116:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:116:2:116:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:118:2:118:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:118:2:118:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:127:2:127:8 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:129:17:129:23 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:132:18:132:24 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:135:21:135:27 | tainted |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:138:5:138:11 | tainted |
|
||||
| polynomial-redos.js:5:16:5:32 | req.query.tainted | polynomial-redos.js:5:6:5:32 | tainted |
|
||||
| polynomial-redos.js:7:2:7:8 | tainted | polynomial-redos.js:8:2:8:8 | tainted |
|
||||
| polynomial-redos.js:7:2:7:8 | tainted | polynomial-redos.js:8:2:8:8 | tainted |
|
||||
| polynomial-redos.js:8:2:8:8 | tainted | polynomial-redos.js:9:2:9:8 | tainted |
|
||||
| polynomial-redos.js:8:2:8:8 | tainted | polynomial-redos.js:9:2:9:8 | tainted |
|
||||
| polynomial-redos.js:9:2:9:8 | tainted | polynomial-redos.js:10:2:10:8 | tainted |
|
||||
| polynomial-redos.js:10:2:10:8 | tainted | polynomial-redos.js:11:2:11:8 | tainted |
|
||||
| polynomial-redos.js:10:2:10:8 | tainted | polynomial-redos.js:11:2:11:8 | tainted |
|
||||
| polynomial-redos.js:11:2:11:8 | tainted | polynomial-redos.js:12:2:12:8 | tainted |
|
||||
| polynomial-redos.js:11:2:11:8 | tainted | polynomial-redos.js:12:2:12:8 | tainted |
|
||||
| polynomial-redos.js:12:2:12:8 | tainted | polynomial-redos.js:13:2:13:8 | tainted |
|
||||
| polynomial-redos.js:13:2:13:8 | tainted | polynomial-redos.js:14:2:14:8 | tainted |
|
||||
| polynomial-redos.js:14:2:14:8 | tainted | polynomial-redos.js:15:2:15:8 | tainted |
|
||||
| polynomial-redos.js:14:2:14:8 | tainted | polynomial-redos.js:15:2:15:8 | tainted |
|
||||
| polynomial-redos.js:15:2:15:8 | tainted | polynomial-redos.js:16:2:16:8 | tainted |
|
||||
| polynomial-redos.js:15:2:15:8 | tainted | polynomial-redos.js:16:2:16:8 | tainted |
|
||||
| polynomial-redos.js:16:2:16:8 | tainted | polynomial-redos.js:17:23:17:29 | tainted |
|
||||
| polynomial-redos.js:16:2:16:8 | tainted | polynomial-redos.js:17:23:17:29 | tainted |
|
||||
| polynomial-redos.js:17:23:17:29 | tainted | polynomial-redos.js:18:2:18:8 | tainted |
|
||||
| polynomial-redos.js:17:23:17:29 | tainted | polynomial-redos.js:18:2:18:8 | tainted |
|
||||
| polynomial-redos.js:18:2:18:8 | tainted | polynomial-redos.js:19:2:19:8 | tainted |
|
||||
| polynomial-redos.js:18:2:18:8 | tainted | polynomial-redos.js:19:2:19:8 | tainted |
|
||||
| polynomial-redos.js:19:2:19:8 | tainted | polynomial-redos.js:20:2:20:8 | tainted |
|
||||
| polynomial-redos.js:19:2:19:8 | tainted | polynomial-redos.js:20:2:20:8 | tainted |
|
||||
| polynomial-redos.js:20:2:20:8 | tainted | polynomial-redos.js:21:6:21:12 | tainted |
|
||||
| polynomial-redos.js:21:6:21:12 | tainted | polynomial-redos.js:25:2:25:8 | tainted |
|
||||
| polynomial-redos.js:21:6:21:12 | tainted | polynomial-redos.js:25:2:25:8 | tainted |
|
||||
| polynomial-redos.js:25:2:25:8 | tainted | polynomial-redos.js:26:2:26:8 | tainted |
|
||||
| polynomial-redos.js:26:2:26:8 | tainted | polynomial-redos.js:27:77:27:83 | tainted |
|
||||
| polynomial-redos.js:27:77:27:83 | tainted | polynomial-redos.js:28:76:28:82 | tainted |
|
||||
| polynomial-redos.js:28:76:28:82 | tainted | polynomial-redos.js:30:2:30:8 | tainted |
|
||||
| polynomial-redos.js:28:76:28:82 | tainted | polynomial-redos.js:30:2:30:8 | tainted |
|
||||
| polynomial-redos.js:30:2:30:8 | tainted | polynomial-redos.js:31:2:31:8 | tainted |
|
||||
| polynomial-redos.js:31:2:31:8 | tainted | polynomial-redos.js:32:2:32:8 | tainted |
|
||||
| polynomial-redos.js:32:2:32:8 | tainted | polynomial-redos.js:33:2:33:8 | tainted |
|
||||
| polynomial-redos.js:32:2:32:8 | tainted | polynomial-redos.js:33:2:33:8 | tainted |
|
||||
| polynomial-redos.js:33:2:33:8 | tainted | polynomial-redos.js:34:2:34:8 | tainted |
|
||||
| polynomial-redos.js:34:2:34:8 | tainted | polynomial-redos.js:36:2:36:8 | tainted |
|
||||
| polynomial-redos.js:34:2:34:8 | tainted | polynomial-redos.js:36:2:36:8 | tainted |
|
||||
| polynomial-redos.js:36:2:36:8 | tainted | polynomial-redos.js:37:2:37:8 | tainted |
|
||||
| polynomial-redos.js:36:2:36:8 | tainted | polynomial-redos.js:37:2:37:8 | tainted |
|
||||
| polynomial-redos.js:37:2:37:8 | tainted | polynomial-redos.js:38:2:38:8 | tainted |
|
||||
| polynomial-redos.js:37:2:37:8 | tainted | polynomial-redos.js:38:2:38:8 | tainted |
|
||||
| polynomial-redos.js:38:2:38:8 | tainted | polynomial-redos.js:40:2:40:8 | tainted |
|
||||
| polynomial-redos.js:38:2:38:8 | tainted | polynomial-redos.js:40:2:40:8 | tainted |
|
||||
| polynomial-redos.js:40:2:40:8 | tainted | polynomial-redos.js:41:2:41:8 | tainted |
|
||||
| polynomial-redos.js:41:2:41:8 | tainted | polynomial-redos.js:43:2:43:8 | tainted |
|
||||
| polynomial-redos.js:41:2:41:8 | tainted | polynomial-redos.js:43:2:43:8 | tainted |
|
||||
| polynomial-redos.js:43:2:43:8 | tainted | polynomial-redos.js:44:2:44:8 | tainted |
|
||||
| polynomial-redos.js:44:2:44:8 | tainted | polynomial-redos.js:46:2:46:8 | tainted |
|
||||
| polynomial-redos.js:46:2:46:8 | tainted | polynomial-redos.js:47:2:47:8 | tainted |
|
||||
| polynomial-redos.js:47:2:47:8 | tainted | polynomial-redos.js:48:2:48:8 | tainted |
|
||||
| polynomial-redos.js:47:2:47:8 | tainted | polynomial-redos.js:48:2:48:8 | tainted |
|
||||
| polynomial-redos.js:48:2:48:8 | tainted | polynomial-redos.js:50:14:50:20 | tainted |
|
||||
| polynomial-redos.js:48:2:48:8 | tainted | polynomial-redos.js:50:14:50:20 | tainted |
|
||||
| polynomial-redos.js:50:14:50:20 | tainted | polynomial-redos.js:51:26:51:32 | tainted |
|
||||
| polynomial-redos.js:50:14:50:20 | tainted | polynomial-redos.js:51:26:51:32 | tainted |
|
||||
| polynomial-redos.js:51:26:51:32 | tainted | polynomial-redos.js:52:22:52:28 | tainted |
|
||||
| polynomial-redos.js:51:26:51:32 | tainted | polynomial-redos.js:52:22:52:28 | tainted |
|
||||
| polynomial-redos.js:52:22:52:28 | tainted | polynomial-redos.js:53:21:53:27 | tainted |
|
||||
| polynomial-redos.js:52:22:52:28 | tainted | polynomial-redos.js:53:21:53:27 | tainted |
|
||||
| polynomial-redos.js:53:21:53:27 | tainted | polynomial-redos.js:54:22:54:28 | tainted |
|
||||
| polynomial-redos.js:53:21:53:27 | tainted | polynomial-redos.js:54:22:54:28 | tainted |
|
||||
| polynomial-redos.js:54:22:54:28 | tainted | polynomial-redos.js:55:23:55:29 | tainted |
|
||||
| polynomial-redos.js:54:22:54:28 | tainted | polynomial-redos.js:55:23:55:29 | tainted |
|
||||
| polynomial-redos.js:55:23:55:29 | tainted | polynomial-redos.js:56:22:56:28 | tainted |
|
||||
| polynomial-redos.js:55:23:55:29 | tainted | polynomial-redos.js:56:22:56:28 | tainted |
|
||||
| polynomial-redos.js:56:22:56:28 | tainted | polynomial-redos.js:57:25:57:31 | tainted |
|
||||
| polynomial-redos.js:56:22:56:28 | tainted | polynomial-redos.js:57:25:57:31 | tainted |
|
||||
| polynomial-redos.js:57:25:57:31 | tainted | polynomial-redos.js:58:21:58:27 | tainted |
|
||||
| polynomial-redos.js:57:25:57:31 | tainted | polynomial-redos.js:58:21:58:27 | tainted |
|
||||
| polynomial-redos.js:58:21:58:27 | tainted | polynomial-redos.js:59:23:59:29 | tainted |
|
||||
| polynomial-redos.js:58:21:58:27 | tainted | polynomial-redos.js:59:23:59:29 | tainted |
|
||||
| polynomial-redos.js:59:23:59:29 | tainted | polynomial-redos.js:60:17:60:23 | tainted |
|
||||
| polynomial-redos.js:60:17:60:23 | tainted | polynomial-redos.js:61:18:61:24 | tainted |
|
||||
| polynomial-redos.js:61:18:61:24 | tainted | polynomial-redos.js:62:17:62:23 | tainted |
|
||||
| polynomial-redos.js:61:18:61:24 | tainted | polynomial-redos.js:62:17:62:23 | tainted |
|
||||
| polynomial-redos.js:62:17:62:23 | tainted | polynomial-redos.js:63:21:63:27 | tainted |
|
||||
| polynomial-redos.js:62:17:62:23 | tainted | polynomial-redos.js:63:21:63:27 | tainted |
|
||||
| polynomial-redos.js:63:21:63:27 | tainted | polynomial-redos.js:64:24:64:30 | tainted |
|
||||
| polynomial-redos.js:63:21:63:27 | tainted | polynomial-redos.js:64:24:64:30 | tainted |
|
||||
| polynomial-redos.js:64:24:64:30 | tainted | polynomial-redos.js:65:24:65:30 | tainted |
|
||||
| polynomial-redos.js:64:24:64:30 | tainted | polynomial-redos.js:65:24:65:30 | tainted |
|
||||
| polynomial-redos.js:65:24:65:30 | tainted | polynomial-redos.js:66:19:66:25 | tainted |
|
||||
| polynomial-redos.js:65:24:65:30 | tainted | polynomial-redos.js:66:19:66:25 | tainted |
|
||||
| polynomial-redos.js:66:19:66:25 | tainted | polynomial-redos.js:67:18:67:24 | tainted |
|
||||
| polynomial-redos.js:66:19:66:25 | tainted | polynomial-redos.js:67:18:67:24 | tainted |
|
||||
| polynomial-redos.js:67:18:67:24 | tainted | polynomial-redos.js:71:2:71:8 | tainted |
|
||||
| polynomial-redos.js:67:18:67:24 | tainted | polynomial-redos.js:71:2:71:8 | tainted |
|
||||
| polynomial-redos.js:71:2:71:8 | tainted | polynomial-redos.js:73:2:73:8 | tainted |
|
||||
| polynomial-redos.js:71:2:71:8 | tainted | polynomial-redos.js:73:2:73:8 | tainted |
|
||||
| polynomial-redos.js:73:2:73:8 | tainted | polynomial-redos.js:75:2:75:8 | tainted |
|
||||
| polynomial-redos.js:73:2:73:8 | tainted | polynomial-redos.js:75:2:75:8 | tainted |
|
||||
| polynomial-redos.js:75:2:75:8 | tainted | polynomial-redos.js:77:2:77:8 | tainted |
|
||||
| polynomial-redos.js:75:2:75:8 | tainted | polynomial-redos.js:77:2:77:8 | tainted |
|
||||
| polynomial-redos.js:77:2:77:8 | tainted | polynomial-redos.js:80:2:80:8 | tainted |
|
||||
| polynomial-redos.js:77:2:77:8 | tainted | polynomial-redos.js:80:2:80:8 | tainted |
|
||||
| polynomial-redos.js:80:2:80:8 | tainted | polynomial-redos.js:81:2:81:8 | tainted |
|
||||
| polynomial-redos.js:80:2:80:8 | tainted | polynomial-redos.js:81:2:81:8 | tainted |
|
||||
| polynomial-redos.js:81:2:81:8 | tainted | polynomial-redos.js:82:2:82:8 | tainted |
|
||||
| polynomial-redos.js:82:2:82:8 | tainted | polynomial-redos.js:83:2:83:8 | tainted |
|
||||
| polynomial-redos.js:83:2:83:8 | tainted | polynomial-redos.js:84:2:84:8 | tainted |
|
||||
| polynomial-redos.js:84:2:84:8 | tainted | polynomial-redos.js:86:2:86:8 | tainted |
|
||||
| polynomial-redos.js:84:2:84:8 | tainted | polynomial-redos.js:86:2:86:8 | tainted |
|
||||
| polynomial-redos.js:86:2:86:8 | tainted | polynomial-redos.js:88:2:88:8 | tainted |
|
||||
| polynomial-redos.js:86:2:86:8 | tainted | polynomial-redos.js:88:2:88:8 | tainted |
|
||||
| polynomial-redos.js:88:2:88:8 | tainted | polynomial-redos.js:89:2:89:8 | tainted |
|
||||
| polynomial-redos.js:88:2:88:8 | tainted | polynomial-redos.js:89:2:89:8 | tainted |
|
||||
| polynomial-redos.js:89:2:89:8 | tainted | polynomial-redos.js:90:2:90:8 | tainted |
|
||||
| polynomial-redos.js:89:2:89:8 | tainted | polynomial-redos.js:90:2:90:8 | tainted |
|
||||
| polynomial-redos.js:90:2:90:8 | tainted | polynomial-redos.js:91:2:91:8 | tainted |
|
||||
| polynomial-redos.js:91:2:91:8 | tainted | polynomial-redos.js:92:2:92:8 | tainted |
|
||||
| polynomial-redos.js:92:2:92:8 | tainted | polynomial-redos.js:94:2:94:8 | tainted |
|
||||
| polynomial-redos.js:92:2:92:8 | tainted | polynomial-redos.js:94:2:94:8 | tainted |
|
||||
| polynomial-redos.js:94:2:94:8 | tainted | polynomial-redos.js:95:2:95:8 | tainted |
|
||||
| polynomial-redos.js:94:2:94:8 | tainted | polynomial-redos.js:95:2:95:8 | tainted |
|
||||
| polynomial-redos.js:95:2:95:8 | tainted | polynomial-redos.js:96:2:96:8 | tainted |
|
||||
| polynomial-redos.js:95:2:95:8 | tainted | polynomial-redos.js:96:2:96:8 | tainted |
|
||||
| polynomial-redos.js:96:2:96:8 | tainted | polynomial-redos.js:98:2:98:8 | tainted |
|
||||
| polynomial-redos.js:96:2:96:8 | tainted | polynomial-redos.js:98:2:98:8 | tainted |
|
||||
| polynomial-redos.js:98:2:98:8 | tainted | polynomial-redos.js:100:2:100:8 | tainted |
|
||||
| polynomial-redos.js:98:2:98:8 | tainted | polynomial-redos.js:100:2:100:8 | tainted |
|
||||
| polynomial-redos.js:100:2:100:8 | tainted | polynomial-redos.js:101:2:101:8 | tainted |
|
||||
| polynomial-redos.js:100:2:100:8 | tainted | polynomial-redos.js:101:2:101:8 | tainted |
|
||||
| polynomial-redos.js:101:2:101:8 | tainted | polynomial-redos.js:102:2:102:8 | tainted |
|
||||
| polynomial-redos.js:101:2:101:8 | tainted | polynomial-redos.js:102:2:102:8 | tainted |
|
||||
| polynomial-redos.js:102:2:102:8 | tainted | polynomial-redos.js:103:2:103:8 | tainted |
|
||||
| polynomial-redos.js:102:2:102:8 | tainted | polynomial-redos.js:103:2:103:8 | tainted |
|
||||
| polynomial-redos.js:103:2:103:8 | tainted | polynomial-redos.js:104:2:104:8 | tainted |
|
||||
| polynomial-redos.js:103:2:103:8 | tainted | polynomial-redos.js:104:2:104:8 | tainted |
|
||||
| polynomial-redos.js:104:2:104:8 | tainted | polynomial-redos.js:105:2:105:8 | tainted |
|
||||
| polynomial-redos.js:105:2:105:8 | tainted | polynomial-redos.js:107:2:107:8 | tainted |
|
||||
| polynomial-redos.js:105:2:105:8 | tainted | polynomial-redos.js:107:2:107:8 | tainted |
|
||||
| polynomial-redos.js:107:2:107:8 | tainted | polynomial-redos.js:108:2:108:8 | tainted |
|
||||
| polynomial-redos.js:107:2:107:8 | tainted | polynomial-redos.js:108:2:108:8 | tainted |
|
||||
| polynomial-redos.js:108:2:108:8 | tainted | polynomial-redos.js:109:2:109:8 | tainted |
|
||||
| polynomial-redos.js:108:2:108:8 | tainted | polynomial-redos.js:109:2:109:8 | tainted |
|
||||
| polynomial-redos.js:109:2:109:8 | tainted | polynomial-redos.js:111:2:111:8 | tainted |
|
||||
| polynomial-redos.js:109:2:109:8 | tainted | polynomial-redos.js:111:2:111:8 | tainted |
|
||||
| polynomial-redos.js:111:2:111:8 | tainted | polynomial-redos.js:112:2:112:8 | tainted |
|
||||
| polynomial-redos.js:111:2:111:8 | tainted | polynomial-redos.js:112:2:112:8 | tainted |
|
||||
| polynomial-redos.js:112:2:112:8 | tainted | polynomial-redos.js:114:2:114:8 | tainted |
|
||||
| polynomial-redos.js:112:2:112:8 | tainted | polynomial-redos.js:114:2:114:8 | tainted |
|
||||
| polynomial-redos.js:114:2:114:8 | tainted | polynomial-redos.js:116:2:116:8 | tainted |
|
||||
| polynomial-redos.js:114:2:114:8 | tainted | polynomial-redos.js:116:2:116:8 | tainted |
|
||||
| polynomial-redos.js:116:2:116:8 | tainted | polynomial-redos.js:118:2:118:8 | tainted |
|
||||
| polynomial-redos.js:116:2:116:8 | tainted | polynomial-redos.js:118:2:118:8 | tainted |
|
||||
| polynomial-redos.js:118:2:118:8 | tainted | polynomial-redos.js:120:2:125:3 | (functi ... OK\\n\\t}) [tainted] |
|
||||
| polynomial-redos.js:118:2:118:8 | tainted | polynomial-redos.js:121:18:121:24 | tainted |
|
||||
| polynomial-redos.js:118:2:118:8 | tainted | polynomial-redos.js:127:2:127:8 | tainted |
|
||||
| polynomial-redos.js:120:2:125:3 | (functi ... OK\\n\\t}) [tainted] | polynomial-redos.js:121:18:121:24 | tainted |
|
||||
| polynomial-redos.js:121:7:121:55 | replaced | polynomial-redos.js:123:13:123:20 | replaced |
|
||||
| polynomial-redos.js:121:18:121:24 | tainted | polynomial-redos.js:121:18:121:55 | tainted ... /g, '') |
|
||||
| polynomial-redos.js:121:18:121:55 | tainted ... /g, '') | polynomial-redos.js:121:7:121:55 | replaced |
|
||||
| polynomial-redos.js:123:3:123:20 | result | polynomial-redos.js:124:12:124:17 | result |
|
||||
| polynomial-redos.js:123:13:123:20 | replaced | polynomial-redos.js:123:3:123:20 | result |
|
||||
| polynomial-redos.js:127:2:127:8 | tainted | polynomial-redos.js:129:17:129:23 | tainted |
|
||||
| polynomial-redos.js:129:6:129:42 | modified | polynomial-redos.js:130:2:130:9 | modified |
|
||||
| polynomial-redos.js:129:17:129:23 | tainted | polynomial-redos.js:129:17:129:42 | tainted ... g, "b") |
|
||||
| polynomial-redos.js:129:17:129:23 | tainted | polynomial-redos.js:132:18:132:24 | tainted |
|
||||
| polynomial-redos.js:129:17:129:42 | tainted ... g, "b") | polynomial-redos.js:129:6:129:42 | modified |
|
||||
| polynomial-redos.js:132:6:132:50 | modified2 | polynomial-redos.js:133:2:133:10 | modified2 |
|
||||
| polynomial-redos.js:132:18:132:24 | tainted | polynomial-redos.js:132:18:132:50 | tainted ... g, "e") |
|
||||
| polynomial-redos.js:132:18:132:24 | tainted | polynomial-redos.js:135:21:135:27 | tainted |
|
||||
| polynomial-redos.js:132:18:132:50 | tainted ... g, "e") | polynomial-redos.js:132:6:132:50 | modified2 |
|
||||
| polynomial-redos.js:135:9:135:47 | modified3 | polynomial-redos.js:136:5:136:13 | modified3 |
|
||||
| polynomial-redos.js:135:21:135:27 | tainted | polynomial-redos.js:135:21:135:47 | tainted ... /g, "") |
|
||||
| polynomial-redos.js:135:21:135:27 | tainted | polynomial-redos.js:138:5:138:11 | tainted |
|
||||
| polynomial-redos.js:135:21:135:47 | tainted ... /g, "") | polynomial-redos.js:135:9:135:47 | modified3 |
|
||||
| lib/closure.js:3:21:3:21 | x | lib/closure.js:4:16:4:16 | x | provenance | |
|
||||
| lib/indirect.js:1:32:1:32 | x | lib/indirect.js:2:16:2:16 | x | provenance | |
|
||||
| lib/lib.js:3:28:3:31 | name | lib/lib.js:4:14:4:17 | name | provenance | |
|
||||
| lib/lib.js:7:19:7:22 | name | lib/lib.js:8:13:8:16 | name | provenance | |
|
||||
| lib/lib.js:32:32:32:40 | arguments | lib/lib.js:35:1:37:1 | 'arguments' object of function usedWithArguments | provenance | |
|
||||
| lib/lib.js:35:1:37:1 | 'arguments' object of function usedWithArguments | lib/lib.js:35:28:35:31 | name | provenance | |
|
||||
| lib/lib.js:35:28:35:31 | name | lib/lib.js:36:13:36:16 | name | provenance | |
|
||||
| lib/lib.js:41:32:41:35 | name | lib/lib.js:42:17:42:20 | name | provenance | |
|
||||
| lib/lib.js:41:32:41:35 | name | lib/lib.js:44:12:44:15 | name | provenance | |
|
||||
| lib/lib.js:44:5:44:25 | name | lib/lib.js:45:17:45:20 | name | provenance | |
|
||||
| lib/lib.js:44:12:44:15 | name | lib/lib.js:44:12:44:25 | name.substr(1) | provenance | |
|
||||
| lib/lib.js:44:12:44:25 | name.substr(1) | lib/lib.js:44:5:44:25 | name | provenance | |
|
||||
| lib/lib.js:52:22:52:25 | name | lib/lib.js:53:16:53:19 | name | provenance | |
|
||||
| lib/moduleLib/moduleLib.js:1:28:1:31 | name | lib/moduleLib/moduleLib.js:2:13:2:16 | name | provenance | |
|
||||
| lib/otherLib/js/src/index.js:1:28:1:31 | name | lib/otherLib/js/src/index.js:2:13:2:16 | name | provenance | |
|
||||
| lib/snapdragon.js:3:34:3:38 | input | lib/snapdragon.js:9:12:9:16 | input | provenance | |
|
||||
| lib/snapdragon.js:9:12:9:16 | input | lib/snapdragon.js:7:15:7:18 | this | provenance | |
|
||||
| lib/snapdragon.js:12:34:12:38 | input | lib/snapdragon.js:17:20:17:24 | input | provenance | |
|
||||
| lib/snapdragon.js:17:20:17:24 | input | lib/snapdragon.js:15:13:15:16 | this | provenance | |
|
||||
| lib/snapdragon.js:20:34:20:38 | input | lib/snapdragon.js:25:22:25:26 | input | provenance | |
|
||||
| lib/snapdragon.js:22:44:22:47 | node | lib/snapdragon.js:23:5:23:8 | node | provenance | |
|
||||
| lib/snapdragon.js:23:5:23:8 | node | lib/snapdragon.js:23:5:23:12 | node.val | provenance | |
|
||||
| lib/snapdragon.js:25:22:25:26 | input | lib/snapdragon.js:22:44:22:47 | node | provenance | |
|
||||
| lib/subLib4/factory.js:7:27:7:30 | name | lib/subLib4/factory.js:8:13:8:16 | name | provenance | |
|
||||
| lib/subLib5/feature.js:1:28:1:31 | name | lib/subLib5/feature.js:2:13:2:16 | name | provenance | |
|
||||
| lib/subLib5/main.js:1:28:1:31 | name | lib/subLib5/main.js:2:13:2:16 | name | provenance | |
|
||||
| lib/subLib5/subclass.js:4:10:4:13 | name | lib/subLib5/subclass.js:5:16:5:19 | name | provenance | |
|
||||
| lib/subLib6/index.js:1:32:1:35 | name | lib/subLib6/index.js:2:14:2:17 | name | provenance | |
|
||||
| lib/sublib/factory.js:12:26:12:29 | name | lib/sublib/factory.js:13:24:13:27 | name | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:7:2:7:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:7:2:7:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:8:2:8:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:8:2:8:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:9:2:9:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:9:2:9:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:10:2:10:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:11:2:11:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:11:2:11:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:12:2:12:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:12:2:12:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:13:2:13:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:14:2:14:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:15:2:15:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:15:2:15:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:16:2:16:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:16:2:16:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:17:23:17:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:17:23:17:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:18:2:18:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:18:2:18:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:19:2:19:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:19:2:19:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:20:2:20:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:20:2:20:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:21:6:21:12 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:25:2:25:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:25:2:25:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:26:2:26:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:27:77:27:83 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:28:76:28:82 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:30:2:30:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:30:2:30:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:31:2:31:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:32:2:32:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:33:2:33:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:33:2:33:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:34:2:34:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:36:2:36:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:36:2:36:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:37:2:37:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:37:2:37:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:38:2:38:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:38:2:38:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:40:2:40:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:40:2:40:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:41:2:41:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:43:2:43:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:43:2:43:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:44:2:44:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:46:2:46:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:47:2:47:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:48:2:48:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:48:2:48:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:50:14:50:20 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:50:14:50:20 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:51:26:51:32 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:51:26:51:32 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:52:22:52:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:52:22:52:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:53:21:53:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:53:21:53:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:54:22:54:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:54:22:54:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:55:23:55:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:55:23:55:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:56:22:56:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:56:22:56:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:57:25:57:31 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:57:25:57:31 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:58:21:58:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:58:21:58:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:59:23:59:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:59:23:59:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:60:17:60:23 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:61:18:61:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:62:17:62:23 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:62:17:62:23 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:63:21:63:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:63:21:63:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:64:24:64:30 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:64:24:64:30 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:65:24:65:30 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:65:24:65:30 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:66:19:66:25 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:66:19:66:25 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:67:18:67:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:67:18:67:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:71:2:71:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:71:2:71:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:73:2:73:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:73:2:73:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:75:2:75:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:75:2:75:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:77:2:77:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:77:2:77:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:80:2:80:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:80:2:80:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:81:2:81:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:81:2:81:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:82:2:82:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:83:2:83:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:84:2:84:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:86:2:86:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:86:2:86:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:88:2:88:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:88:2:88:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:89:2:89:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:89:2:89:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:90:2:90:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:90:2:90:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:91:2:91:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:92:2:92:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:94:2:94:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:94:2:94:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:95:2:95:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:95:2:95:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:96:2:96:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:96:2:96:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:98:2:98:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:98:2:98:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:100:2:100:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:100:2:100:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:101:2:101:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:101:2:101:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:102:2:102:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:102:2:102:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:103:2:103:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:103:2:103:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:104:2:104:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:104:2:104:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:105:2:105:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:107:2:107:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:107:2:107:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:108:2:108:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:108:2:108:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:109:2:109:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:109:2:109:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:111:2:111:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:111:2:111:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:112:2:112:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:112:2:112:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:114:2:114:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:114:2:114:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:116:2:116:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:116:2:116:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:118:2:118:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:118:2:118:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:127:2:127:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:129:17:129:23 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:132:18:132:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:135:21:135:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:6:5:32 | tainted | polynomial-redos.js:138:5:138:11 | tainted | provenance | |
|
||||
| polynomial-redos.js:5:16:5:32 | req.query.tainted | polynomial-redos.js:5:6:5:32 | tainted | provenance | |
|
||||
| polynomial-redos.js:7:2:7:8 | tainted | polynomial-redos.js:8:2:8:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:7:2:7:8 | tainted | polynomial-redos.js:8:2:8:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:8:2:8:8 | tainted | polynomial-redos.js:9:2:9:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:8:2:8:8 | tainted | polynomial-redos.js:9:2:9:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:9:2:9:8 | tainted | polynomial-redos.js:10:2:10:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:10:2:10:8 | tainted | polynomial-redos.js:11:2:11:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:10:2:10:8 | tainted | polynomial-redos.js:11:2:11:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:11:2:11:8 | tainted | polynomial-redos.js:12:2:12:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:11:2:11:8 | tainted | polynomial-redos.js:12:2:12:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:12:2:12:8 | tainted | polynomial-redos.js:13:2:13:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:13:2:13:8 | tainted | polynomial-redos.js:14:2:14:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:14:2:14:8 | tainted | polynomial-redos.js:15:2:15:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:14:2:14:8 | tainted | polynomial-redos.js:15:2:15:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:15:2:15:8 | tainted | polynomial-redos.js:16:2:16:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:15:2:15:8 | tainted | polynomial-redos.js:16:2:16:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:16:2:16:8 | tainted | polynomial-redos.js:17:23:17:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:16:2:16:8 | tainted | polynomial-redos.js:17:23:17:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:17:23:17:29 | tainted | polynomial-redos.js:18:2:18:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:17:23:17:29 | tainted | polynomial-redos.js:18:2:18:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:18:2:18:8 | tainted | polynomial-redos.js:19:2:19:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:18:2:18:8 | tainted | polynomial-redos.js:19:2:19:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:19:2:19:8 | tainted | polynomial-redos.js:20:2:20:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:19:2:19:8 | tainted | polynomial-redos.js:20:2:20:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:20:2:20:8 | tainted | polynomial-redos.js:21:6:21:12 | tainted | provenance | |
|
||||
| polynomial-redos.js:21:6:21:12 | tainted | polynomial-redos.js:25:2:25:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:21:6:21:12 | tainted | polynomial-redos.js:25:2:25:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:25:2:25:8 | tainted | polynomial-redos.js:26:2:26:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:26:2:26:8 | tainted | polynomial-redos.js:27:77:27:83 | tainted | provenance | |
|
||||
| polynomial-redos.js:27:77:27:83 | tainted | polynomial-redos.js:28:76:28:82 | tainted | provenance | |
|
||||
| polynomial-redos.js:28:76:28:82 | tainted | polynomial-redos.js:30:2:30:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:28:76:28:82 | tainted | polynomial-redos.js:30:2:30:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:30:2:30:8 | tainted | polynomial-redos.js:31:2:31:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:31:2:31:8 | tainted | polynomial-redos.js:32:2:32:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:32:2:32:8 | tainted | polynomial-redos.js:33:2:33:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:32:2:32:8 | tainted | polynomial-redos.js:33:2:33:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:33:2:33:8 | tainted | polynomial-redos.js:34:2:34:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:34:2:34:8 | tainted | polynomial-redos.js:36:2:36:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:34:2:34:8 | tainted | polynomial-redos.js:36:2:36:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:36:2:36:8 | tainted | polynomial-redos.js:37:2:37:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:36:2:36:8 | tainted | polynomial-redos.js:37:2:37:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:37:2:37:8 | tainted | polynomial-redos.js:38:2:38:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:37:2:37:8 | tainted | polynomial-redos.js:38:2:38:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:38:2:38:8 | tainted | polynomial-redos.js:40:2:40:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:38:2:38:8 | tainted | polynomial-redos.js:40:2:40:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:40:2:40:8 | tainted | polynomial-redos.js:41:2:41:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:41:2:41:8 | tainted | polynomial-redos.js:43:2:43:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:41:2:41:8 | tainted | polynomial-redos.js:43:2:43:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:43:2:43:8 | tainted | polynomial-redos.js:44:2:44:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:44:2:44:8 | tainted | polynomial-redos.js:46:2:46:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:46:2:46:8 | tainted | polynomial-redos.js:47:2:47:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:47:2:47:8 | tainted | polynomial-redos.js:48:2:48:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:47:2:47:8 | tainted | polynomial-redos.js:48:2:48:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:48:2:48:8 | tainted | polynomial-redos.js:50:14:50:20 | tainted | provenance | |
|
||||
| polynomial-redos.js:48:2:48:8 | tainted | polynomial-redos.js:50:14:50:20 | tainted | provenance | |
|
||||
| polynomial-redos.js:50:14:50:20 | tainted | polynomial-redos.js:51:26:51:32 | tainted | provenance | |
|
||||
| polynomial-redos.js:50:14:50:20 | tainted | polynomial-redos.js:51:26:51:32 | tainted | provenance | |
|
||||
| polynomial-redos.js:51:26:51:32 | tainted | polynomial-redos.js:52:22:52:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:51:26:51:32 | tainted | polynomial-redos.js:52:22:52:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:52:22:52:28 | tainted | polynomial-redos.js:53:21:53:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:52:22:52:28 | tainted | polynomial-redos.js:53:21:53:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:53:21:53:27 | tainted | polynomial-redos.js:54:22:54:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:53:21:53:27 | tainted | polynomial-redos.js:54:22:54:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:54:22:54:28 | tainted | polynomial-redos.js:55:23:55:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:54:22:54:28 | tainted | polynomial-redos.js:55:23:55:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:55:23:55:29 | tainted | polynomial-redos.js:56:22:56:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:55:23:55:29 | tainted | polynomial-redos.js:56:22:56:28 | tainted | provenance | |
|
||||
| polynomial-redos.js:56:22:56:28 | tainted | polynomial-redos.js:57:25:57:31 | tainted | provenance | |
|
||||
| polynomial-redos.js:56:22:56:28 | tainted | polynomial-redos.js:57:25:57:31 | tainted | provenance | |
|
||||
| polynomial-redos.js:57:25:57:31 | tainted | polynomial-redos.js:58:21:58:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:57:25:57:31 | tainted | polynomial-redos.js:58:21:58:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:58:21:58:27 | tainted | polynomial-redos.js:59:23:59:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:58:21:58:27 | tainted | polynomial-redos.js:59:23:59:29 | tainted | provenance | |
|
||||
| polynomial-redos.js:59:23:59:29 | tainted | polynomial-redos.js:60:17:60:23 | tainted | provenance | |
|
||||
| polynomial-redos.js:60:17:60:23 | tainted | polynomial-redos.js:61:18:61:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:61:18:61:24 | tainted | polynomial-redos.js:62:17:62:23 | tainted | provenance | |
|
||||
| polynomial-redos.js:61:18:61:24 | tainted | polynomial-redos.js:62:17:62:23 | tainted | provenance | |
|
||||
| polynomial-redos.js:62:17:62:23 | tainted | polynomial-redos.js:63:21:63:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:62:17:62:23 | tainted | polynomial-redos.js:63:21:63:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:63:21:63:27 | tainted | polynomial-redos.js:64:24:64:30 | tainted | provenance | |
|
||||
| polynomial-redos.js:63:21:63:27 | tainted | polynomial-redos.js:64:24:64:30 | tainted | provenance | |
|
||||
| polynomial-redos.js:64:24:64:30 | tainted | polynomial-redos.js:65:24:65:30 | tainted | provenance | |
|
||||
| polynomial-redos.js:64:24:64:30 | tainted | polynomial-redos.js:65:24:65:30 | tainted | provenance | |
|
||||
| polynomial-redos.js:65:24:65:30 | tainted | polynomial-redos.js:66:19:66:25 | tainted | provenance | |
|
||||
| polynomial-redos.js:65:24:65:30 | tainted | polynomial-redos.js:66:19:66:25 | tainted | provenance | |
|
||||
| polynomial-redos.js:66:19:66:25 | tainted | polynomial-redos.js:67:18:67:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:66:19:66:25 | tainted | polynomial-redos.js:67:18:67:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:67:18:67:24 | tainted | polynomial-redos.js:71:2:71:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:67:18:67:24 | tainted | polynomial-redos.js:71:2:71:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:71:2:71:8 | tainted | polynomial-redos.js:73:2:73:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:71:2:71:8 | tainted | polynomial-redos.js:73:2:73:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:73:2:73:8 | tainted | polynomial-redos.js:75:2:75:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:73:2:73:8 | tainted | polynomial-redos.js:75:2:75:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:75:2:75:8 | tainted | polynomial-redos.js:77:2:77:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:75:2:75:8 | tainted | polynomial-redos.js:77:2:77:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:77:2:77:8 | tainted | polynomial-redos.js:80:2:80:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:77:2:77:8 | tainted | polynomial-redos.js:80:2:80:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:80:2:80:8 | tainted | polynomial-redos.js:81:2:81:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:80:2:80:8 | tainted | polynomial-redos.js:81:2:81:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:81:2:81:8 | tainted | polynomial-redos.js:82:2:82:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:82:2:82:8 | tainted | polynomial-redos.js:83:2:83:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:83:2:83:8 | tainted | polynomial-redos.js:84:2:84:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:84:2:84:8 | tainted | polynomial-redos.js:86:2:86:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:84:2:84:8 | tainted | polynomial-redos.js:86:2:86:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:86:2:86:8 | tainted | polynomial-redos.js:88:2:88:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:86:2:86:8 | tainted | polynomial-redos.js:88:2:88:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:88:2:88:8 | tainted | polynomial-redos.js:89:2:89:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:88:2:88:8 | tainted | polynomial-redos.js:89:2:89:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:89:2:89:8 | tainted | polynomial-redos.js:90:2:90:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:89:2:89:8 | tainted | polynomial-redos.js:90:2:90:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:90:2:90:8 | tainted | polynomial-redos.js:91:2:91:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:91:2:91:8 | tainted | polynomial-redos.js:92:2:92:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:92:2:92:8 | tainted | polynomial-redos.js:94:2:94:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:92:2:92:8 | tainted | polynomial-redos.js:94:2:94:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:94:2:94:8 | tainted | polynomial-redos.js:95:2:95:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:94:2:94:8 | tainted | polynomial-redos.js:95:2:95:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:95:2:95:8 | tainted | polynomial-redos.js:96:2:96:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:95:2:95:8 | tainted | polynomial-redos.js:96:2:96:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:96:2:96:8 | tainted | polynomial-redos.js:98:2:98:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:96:2:96:8 | tainted | polynomial-redos.js:98:2:98:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:98:2:98:8 | tainted | polynomial-redos.js:100:2:100:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:98:2:98:8 | tainted | polynomial-redos.js:100:2:100:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:100:2:100:8 | tainted | polynomial-redos.js:101:2:101:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:100:2:100:8 | tainted | polynomial-redos.js:101:2:101:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:101:2:101:8 | tainted | polynomial-redos.js:102:2:102:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:101:2:101:8 | tainted | polynomial-redos.js:102:2:102:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:102:2:102:8 | tainted | polynomial-redos.js:103:2:103:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:102:2:102:8 | tainted | polynomial-redos.js:103:2:103:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:103:2:103:8 | tainted | polynomial-redos.js:104:2:104:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:103:2:103:8 | tainted | polynomial-redos.js:104:2:104:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:104:2:104:8 | tainted | polynomial-redos.js:105:2:105:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:105:2:105:8 | tainted | polynomial-redos.js:107:2:107:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:105:2:105:8 | tainted | polynomial-redos.js:107:2:107:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:107:2:107:8 | tainted | polynomial-redos.js:108:2:108:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:107:2:107:8 | tainted | polynomial-redos.js:108:2:108:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:108:2:108:8 | tainted | polynomial-redos.js:109:2:109:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:108:2:108:8 | tainted | polynomial-redos.js:109:2:109:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:109:2:109:8 | tainted | polynomial-redos.js:111:2:111:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:109:2:109:8 | tainted | polynomial-redos.js:111:2:111:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:111:2:111:8 | tainted | polynomial-redos.js:112:2:112:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:111:2:111:8 | tainted | polynomial-redos.js:112:2:112:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:112:2:112:8 | tainted | polynomial-redos.js:114:2:114:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:112:2:112:8 | tainted | polynomial-redos.js:114:2:114:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:114:2:114:8 | tainted | polynomial-redos.js:116:2:116:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:114:2:114:8 | tainted | polynomial-redos.js:116:2:116:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:116:2:116:8 | tainted | polynomial-redos.js:118:2:118:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:116:2:116:8 | tainted | polynomial-redos.js:118:2:118:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:118:2:118:8 | tainted | polynomial-redos.js:120:2:125:3 | (functi ... OK\\n\\t}) [tainted] | provenance | |
|
||||
| polynomial-redos.js:118:2:118:8 | tainted | polynomial-redos.js:121:18:121:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:118:2:118:8 | tainted | polynomial-redos.js:127:2:127:8 | tainted | provenance | |
|
||||
| polynomial-redos.js:120:2:125:3 | (functi ... OK\\n\\t}) [tainted] | polynomial-redos.js:121:18:121:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:121:7:121:55 | replaced | polynomial-redos.js:123:13:123:20 | replaced | provenance | |
|
||||
| polynomial-redos.js:121:18:121:24 | tainted | polynomial-redos.js:121:18:121:55 | tainted ... /g, '') | provenance | |
|
||||
| polynomial-redos.js:121:18:121:55 | tainted ... /g, '') | polynomial-redos.js:121:7:121:55 | replaced | provenance | |
|
||||
| polynomial-redos.js:123:3:123:20 | result | polynomial-redos.js:124:12:124:17 | result | provenance | |
|
||||
| polynomial-redos.js:123:13:123:20 | replaced | polynomial-redos.js:123:3:123:20 | result | provenance | |
|
||||
| polynomial-redos.js:127:2:127:8 | tainted | polynomial-redos.js:129:17:129:23 | tainted | provenance | |
|
||||
| polynomial-redos.js:129:6:129:42 | modified | polynomial-redos.js:130:2:130:9 | modified | provenance | |
|
||||
| polynomial-redos.js:129:17:129:23 | tainted | polynomial-redos.js:129:17:129:42 | tainted ... g, "b") | provenance | |
|
||||
| polynomial-redos.js:129:17:129:23 | tainted | polynomial-redos.js:132:18:132:24 | tainted | provenance | |
|
||||
| polynomial-redos.js:129:17:129:42 | tainted ... g, "b") | polynomial-redos.js:129:6:129:42 | modified | provenance | |
|
||||
| polynomial-redos.js:132:6:132:50 | modified2 | polynomial-redos.js:133:2:133:10 | modified2 | provenance | |
|
||||
| polynomial-redos.js:132:18:132:24 | tainted | polynomial-redos.js:132:18:132:50 | tainted ... g, "e") | provenance | |
|
||||
| polynomial-redos.js:132:18:132:24 | tainted | polynomial-redos.js:135:21:135:27 | tainted | provenance | |
|
||||
| polynomial-redos.js:132:18:132:50 | tainted ... g, "e") | polynomial-redos.js:132:6:132:50 | modified2 | provenance | |
|
||||
| polynomial-redos.js:135:9:135:47 | modified3 | polynomial-redos.js:136:5:136:13 | modified3 | provenance | |
|
||||
| polynomial-redos.js:135:21:135:27 | tainted | polynomial-redos.js:135:21:135:47 | tainted ... /g, "") | provenance | |
|
||||
| polynomial-redos.js:135:21:135:27 | tainted | polynomial-redos.js:138:5:138:11 | tainted | provenance | |
|
||||
| polynomial-redos.js:135:21:135:47 | tainted ... /g, "") | polynomial-redos.js:135:9:135:47 | modified3 | provenance | |
|
||||
nodes
|
||||
| lib/closure.js:3:21:3:21 | x | semmle.label | x |
|
||||
| lib/closure.js:4:16:4:16 | x | semmle.label | x |
|
||||
|
||||
@@ -1,17 +1,17 @@
|
||||
edges
|
||||
| tst.js:8:6:8:52 | prop | tst.js:9:8:9:11 | prop |
|
||||
| tst.js:8:6:8:52 | prop | tst.js:13:15:13:18 | prop |
|
||||
| tst.js:8:6:8:52 | prop | tst.js:14:31:14:34 | prop |
|
||||
| tst.js:8:6:8:52 | prop | tst.js:16:10:16:13 | prop |
|
||||
| tst.js:8:13:8:52 | myCoolL ... rolled) | tst.js:8:6:8:52 | prop |
|
||||
| tst.js:8:28:8:51 | req.que ... trolled | tst.js:8:13:8:52 | myCoolL ... rolled) |
|
||||
| tst.js:8:28:8:51 | req.que ... trolled | tst.js:21:25:21:25 | x |
|
||||
| tst.js:21:25:21:25 | x | tst.js:22:15:22:15 | x |
|
||||
| tst.js:22:6:22:15 | result | tst.js:23:9:23:14 | result |
|
||||
| tst.js:22:15:22:15 | x | tst.js:22:6:22:15 | result |
|
||||
| tst.js:23:9:23:14 | result | tst.js:23:9:23:42 | result. ... length) |
|
||||
| tstNonExpr.js:5:7:5:23 | userVal | tstNonExpr.js:8:17:8:23 | userVal |
|
||||
| tstNonExpr.js:5:17:5:23 | req.url | tstNonExpr.js:5:7:5:23 | userVal |
|
||||
| tst.js:8:6:8:52 | prop | tst.js:9:8:9:11 | prop | provenance | |
|
||||
| tst.js:8:6:8:52 | prop | tst.js:13:15:13:18 | prop | provenance | |
|
||||
| tst.js:8:6:8:52 | prop | tst.js:14:31:14:34 | prop | provenance | |
|
||||
| tst.js:8:6:8:52 | prop | tst.js:16:10:16:13 | prop | provenance | |
|
||||
| tst.js:8:13:8:52 | myCoolL ... rolled) | tst.js:8:6:8:52 | prop | provenance | |
|
||||
| tst.js:8:28:8:51 | req.que ... trolled | tst.js:8:13:8:52 | myCoolL ... rolled) | provenance | |
|
||||
| tst.js:8:28:8:51 | req.que ... trolled | tst.js:21:25:21:25 | x | provenance | |
|
||||
| tst.js:21:25:21:25 | x | tst.js:22:15:22:15 | x | provenance | |
|
||||
| tst.js:22:6:22:15 | result | tst.js:23:9:23:14 | result | provenance | |
|
||||
| tst.js:22:15:22:15 | x | tst.js:22:6:22:15 | result | provenance | |
|
||||
| tst.js:23:9:23:14 | result | tst.js:23:9:23:42 | result. ... length) | provenance | |
|
||||
| tstNonExpr.js:5:7:5:23 | userVal | tstNonExpr.js:8:17:8:23 | userVal | provenance | |
|
||||
| tstNonExpr.js:5:17:5:23 | req.url | tstNonExpr.js:5:7:5:23 | userVal | provenance | |
|
||||
nodes
|
||||
| tst.js:8:6:8:52 | prop | semmle.label | prop |
|
||||
| tst.js:8:13:8:52 | myCoolL ... rolled) | semmle.label | myCoolL ... rolled) |
|
||||
|
||||
@@ -21,23 +21,23 @@ nodes
|
||||
| tst.js:7:8:7:11 | test | semmle.label | test |
|
||||
| tst.js:7:8:7:15 | test+"n" | semmle.label | test+"n" |
|
||||
edges
|
||||
| event-stream-orig.js:93:16:93:16 | r | event-stream-orig.js:94:26:94:26 | r |
|
||||
| event-stream-orig.js:94:14:94:34 | Buffer. ... "hex") | event-stream-orig.js:94:14:94:45 | Buffer. ... tring() |
|
||||
| event-stream-orig.js:94:26:94:26 | r | event-stream-orig.js:94:14:94:34 | Buffer. ... "hex") |
|
||||
| event-stream-orig.js:96:17:96:40 | "2e2f74 ... 617461" | event-stream-orig.js:93:16:93:16 | r |
|
||||
| event-stream-orig.js:96:17:96:40 | "2e2f74 ... 617461" | event-stream-orig.js:96:15:96:41 | e("2e2f ... 17461") |
|
||||
| event-stream.js:5:12:5:12 | r | event-stream.js:6:22:6:22 | r |
|
||||
| event-stream.js:6:10:6:30 | Buffer. ... "hex") | event-stream.js:6:10:6:41 | Buffer. ... tring() |
|
||||
| event-stream.js:6:22:6:22 | r | event-stream.js:6:10:6:30 | Buffer. ... "hex") |
|
||||
| event-stream.js:9:13:9:36 | "2e2f74 ... 617461" | event-stream.js:5:12:5:12 | r |
|
||||
| event-stream.js:9:13:9:36 | "2e2f74 ... 617461" | event-stream.js:9:11:9:37 | e("2e2f ... 17461") |
|
||||
| tst.js:1:5:1:88 | totallyHarmlessString | tst.js:2:18:2:38 | totally ... sString |
|
||||
| tst.js:1:29:1:88 | '636f6e ... 6e2729' | tst.js:1:5:1:88 | totallyHarmlessString |
|
||||
| tst.js:2:6:2:46 | Buffer. ... 'hex') | tst.js:2:6:2:57 | Buffer. ... tring() |
|
||||
| tst.js:2:18:2:38 | totally ... sString | tst.js:2:6:2:46 | Buffer. ... 'hex') |
|
||||
| tst.js:5:5:5:23 | test | tst.js:7:8:7:11 | test |
|
||||
| tst.js:5:12:5:23 | "0123456789" | tst.js:5:5:5:23 | test |
|
||||
| tst.js:7:8:7:11 | test | tst.js:7:8:7:15 | test+"n" |
|
||||
| event-stream-orig.js:93:16:93:16 | r | event-stream-orig.js:94:26:94:26 | r | provenance | |
|
||||
| event-stream-orig.js:94:14:94:34 | Buffer. ... "hex") | event-stream-orig.js:94:14:94:45 | Buffer. ... tring() | provenance | Config |
|
||||
| event-stream-orig.js:94:26:94:26 | r | event-stream-orig.js:94:14:94:34 | Buffer. ... "hex") | provenance | Config |
|
||||
| event-stream-orig.js:96:17:96:40 | "2e2f74 ... 617461" | event-stream-orig.js:93:16:93:16 | r | provenance | |
|
||||
| event-stream-orig.js:96:17:96:40 | "2e2f74 ... 617461" | event-stream-orig.js:96:15:96:41 | e("2e2f ... 17461") | provenance | Config |
|
||||
| event-stream.js:5:12:5:12 | r | event-stream.js:6:22:6:22 | r | provenance | |
|
||||
| event-stream.js:6:10:6:30 | Buffer. ... "hex") | event-stream.js:6:10:6:41 | Buffer. ... tring() | provenance | Config |
|
||||
| event-stream.js:6:22:6:22 | r | event-stream.js:6:10:6:30 | Buffer. ... "hex") | provenance | Config |
|
||||
| event-stream.js:9:13:9:36 | "2e2f74 ... 617461" | event-stream.js:5:12:5:12 | r | provenance | |
|
||||
| event-stream.js:9:13:9:36 | "2e2f74 ... 617461" | event-stream.js:9:11:9:37 | e("2e2f ... 17461") | provenance | Config |
|
||||
| tst.js:1:5:1:88 | totallyHarmlessString | tst.js:2:18:2:38 | totally ... sString | provenance | |
|
||||
| tst.js:1:29:1:88 | '636f6e ... 6e2729' | tst.js:1:5:1:88 | totallyHarmlessString | provenance | |
|
||||
| tst.js:2:6:2:46 | Buffer. ... 'hex') | tst.js:2:6:2:57 | Buffer. ... tring() | provenance | Config |
|
||||
| tst.js:2:18:2:38 | totally ... sString | tst.js:2:6:2:46 | Buffer. ... 'hex') | provenance | Config |
|
||||
| tst.js:5:5:5:23 | test | tst.js:7:8:7:11 | test | provenance | |
|
||||
| tst.js:5:12:5:23 | "0123456789" | tst.js:5:5:5:23 | test | provenance | |
|
||||
| tst.js:7:8:7:11 | test | tst.js:7:8:7:15 | test+"n" | provenance | Config |
|
||||
subpaths
|
||||
| event-stream-orig.js:96:17:96:40 | "2e2f74 ... 617461" | event-stream-orig.js:93:16:93:16 | r | event-stream-orig.js:94:14:94:45 | Buffer. ... tring() | event-stream-orig.js:96:15:96:41 | e("2e2f ... 17461") |
|
||||
| event-stream.js:9:13:9:36 | "2e2f74 ... 617461" | event-stream.js:5:12:5:12 | r | event-stream.js:6:10:6:41 | Buffer. ... tring() | event-stream.js:9:11:9:37 | e("2e2f ... 17461") |
|
||||
|
||||
@@ -120,90 +120,90 @@ nodes
|
||||
| typed.ts:55:25:55:35 | redirectUri | semmle.label | redirectUri |
|
||||
| typed.ts:56:33:56:43 | redirectUri | semmle.label | redirectUri |
|
||||
edges
|
||||
| electron.js:4:12:4:22 | window.name | electron.js:7:20:7:29 | getTaint() |
|
||||
| react.js:28:43:28:64 | documen ... on.hash | react.js:28:43:28:74 | documen ... bstr(1) |
|
||||
| react.js:34:43:34:64 | documen ... on.hash | react.js:34:43:34:74 | documen ... bstr(1) |
|
||||
| react.js:40:19:40:40 | documen ... on.hash | react.js:40:19:40:50 | documen ... bstr(1) |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:4:27:4:29 | url |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:16:27:16:29 | url |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:19:27:19:29 | url |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:22:27:22:29 | url |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:25:27:25:29 | url |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:28:27:28:29 | url |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:31:27:31:29 | url |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:37:27:37:29 | url |
|
||||
| sanitizer.js:2:15:2:25 | window.name | sanitizer.js:2:9:2:25 | url |
|
||||
| tst2.js:2:7:2:33 | href | tst2.js:4:21:4:24 | href |
|
||||
| tst2.js:2:14:2:33 | window.location.href | tst2.js:2:7:2:33 | href |
|
||||
| tst2.js:4:21:4:24 | href | tst2.js:4:21:4:55 | href.su ... '?')+1) |
|
||||
| tst6.js:2:7:2:45 | redirect | tst6.js:4:21:4:28 | redirect |
|
||||
| tst6.js:2:7:2:45 | redirect | tst6.js:6:17:6:24 | redirect |
|
||||
| tst6.js:2:18:2:45 | $locati ... irect') | tst6.js:2:7:2:45 | redirect |
|
||||
| tst6.js:8:21:8:48 | $locati ... irect') | tst6.js:8:21:8:56 | $locati ... + "foo" |
|
||||
| tst9.js:2:21:2:42 | documen ... on.hash | tst9.js:2:21:2:55 | documen ... ring(1) |
|
||||
| tst10.js:5:23:5:46 | documen ... .search | tst10.js:5:17:5:46 | '/' + d ... .search |
|
||||
| tst10.js:8:24:8:47 | documen ... .search | tst10.js:8:17:8:47 | '//' + ... .search |
|
||||
| tst10.js:11:27:11:50 | documen ... .search | tst10.js:11:17:11:50 | '//foo' ... .search |
|
||||
| tst10.js:14:33:14:56 | documen ... .search | tst10.js:14:17:14:56 | 'https: ... .search |
|
||||
| tst12.js:3:9:3:50 | urlParts | tst12.js:4:15:4:22 | urlParts |
|
||||
| tst12.js:3:20:3:39 | window.location.hash | tst12.js:3:20:3:50 | window. ... it('?') |
|
||||
| tst12.js:3:20:3:50 | window. ... it('?') | tst12.js:3:9:3:50 | urlParts |
|
||||
| tst12.js:4:9:4:45 | loc | tst12.js:5:23:5:25 | loc |
|
||||
| tst12.js:4:15:4:22 | urlParts | tst12.js:4:9:4:45 | loc |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:4:15:4:21 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:8:21:8:27 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:12:14:12:20 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:16:17:16:23 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:20:14:20:20 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:24:14:24:20 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:28:21:28:27 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:32:17:32:23 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:36:21:36:27 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:40:15:40:21 | payload |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:44:14:44:20 | payload |
|
||||
| tst13.js:2:19:2:42 | documen ... .search | tst13.js:2:19:2:52 | documen ... bstr(1) |
|
||||
| tst13.js:2:19:2:52 | documen ... bstr(1) | tst13.js:2:9:2:52 | payload |
|
||||
| tst13.js:49:32:49:32 | e | tst13.js:50:23:50:23 | e |
|
||||
| tst13.js:52:34:52:34 | e | tst13.js:53:28:53:28 | e |
|
||||
| tst13.js:59:9:59:52 | payload | tst13.js:61:18:61:24 | payload |
|
||||
| tst13.js:59:19:59:42 | documen ... .search | tst13.js:59:19:59:52 | documen ... bstr(1) |
|
||||
| tst13.js:59:19:59:52 | documen ... bstr(1) | tst13.js:59:9:59:52 | payload |
|
||||
| tst13.js:65:9:65:49 | payload | tst13.js:67:21:67:27 | payload |
|
||||
| tst13.js:65:19:65:39 | history ... on.hash | tst13.js:65:19:65:49 | history ... bstr(1) |
|
||||
| tst13.js:65:19:65:49 | history ... bstr(1) | tst13.js:65:9:65:49 | payload |
|
||||
| tst13.js:72:9:72:49 | payload | tst13.js:74:21:74:27 | payload |
|
||||
| tst13.js:72:19:72:39 | history ... on.hash | tst13.js:72:19:72:49 | history ... bstr(1) |
|
||||
| tst13.js:72:19:72:49 | history ... bstr(1) | tst13.js:72:9:72:49 | payload |
|
||||
| tst13.js:78:9:78:48 | url | tst13.js:80:21:80:23 | url |
|
||||
| tst13.js:78:9:78:48 | url | tst13.js:81:28:81:30 | url |
|
||||
| tst13.js:78:9:78:48 | url | tst13.js:82:27:82:29 | url |
|
||||
| tst13.js:78:9:78:48 | url | tst13.js:83:22:83:24 | url |
|
||||
| tst13.js:78:15:78:38 | documen ... .search | tst13.js:78:15:78:48 | documen ... bstr(1) |
|
||||
| tst13.js:78:15:78:48 | documen ... bstr(1) | tst13.js:78:9:78:48 | url |
|
||||
| tst.js:2:19:2:69 | /.*redi ... n.href) | tst.js:2:19:2:72 | /.*redi ... ref)[1] |
|
||||
| tst.js:2:47:2:68 | documen ... on.href | tst.js:2:19:2:69 | /.*redi ... n.href) |
|
||||
| tst.js:6:20:6:56 | indirec ... n.href) | tst.js:6:20:6:59 | indirec ... ref)[1] |
|
||||
| tst.js:6:34:6:55 | documen ... on.href | tst.js:6:20:6:56 | indirec ... n.href) |
|
||||
| tst.js:10:19:10:81 | new Reg ... n.href) | tst.js:10:19:10:84 | new Reg ... ref)[1] |
|
||||
| tst.js:10:59:10:80 | documen ... on.href | tst.js:10:19:10:81 | new Reg ... n.href) |
|
||||
| tst.js:14:20:14:56 | indirec ... n.href) | tst.js:14:20:14:59 | indirec ... ref)[1] |
|
||||
| tst.js:14:34:14:55 | documen ... on.href | tst.js:14:20:14:56 | indirec ... n.href) |
|
||||
| tst.js:18:19:18:81 | new Reg ... n.href) | tst.js:18:19:18:84 | new Reg ... ref)[1] |
|
||||
| tst.js:18:59:18:80 | documen ... on.href | tst.js:18:19:18:81 | new Reg ... n.href) |
|
||||
| tst.js:22:20:22:56 | indirec ... n.href) | tst.js:22:20:22:59 | indirec ... ref)[1] |
|
||||
| tst.js:22:34:22:55 | documen ... on.href | tst.js:22:20:22:56 | indirec ... n.href) |
|
||||
| tst.js:26:22:26:79 | new Reg ... n.href) | tst.js:26:22:26:82 | new Reg ... ref)[1] |
|
||||
| tst.js:26:62:26:78 | win.location.href | tst.js:26:22:26:79 | new Reg ... n.href) |
|
||||
| typed.ts:4:13:4:36 | params | typed.ts:5:25:5:30 | params |
|
||||
| typed.ts:4:22:4:36 | location.search | typed.ts:4:13:4:36 | params |
|
||||
| typed.ts:5:25:5:30 | params | typed.ts:7:24:7:34 | redirectUri |
|
||||
| typed.ts:7:24:7:34 | redirectUri | typed.ts:8:33:8:43 | redirectUri |
|
||||
| typed.ts:25:25:25:34 | loc.search | typed.ts:28:24:28:34 | redirectUri |
|
||||
| typed.ts:28:24:28:34 | redirectUri | typed.ts:29:33:29:43 | redirectUri |
|
||||
| typed.ts:47:25:47:34 | loc.search | typed.ts:51:24:51:34 | redirectUri |
|
||||
| typed.ts:48:26:48:36 | loc2.search | typed.ts:55:25:55:35 | redirectUri |
|
||||
| typed.ts:51:24:51:34 | redirectUri | typed.ts:52:33:52:43 | redirectUri |
|
||||
| typed.ts:55:25:55:35 | redirectUri | typed.ts:56:33:56:43 | redirectUri |
|
||||
| electron.js:4:12:4:22 | window.name | electron.js:7:20:7:29 | getTaint() | provenance | |
|
||||
| react.js:28:43:28:64 | documen ... on.hash | react.js:28:43:28:74 | documen ... bstr(1) | provenance | |
|
||||
| react.js:34:43:34:64 | documen ... on.hash | react.js:34:43:34:74 | documen ... bstr(1) | provenance | |
|
||||
| react.js:40:19:40:40 | documen ... on.hash | react.js:40:19:40:50 | documen ... bstr(1) | provenance | |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:4:27:4:29 | url | provenance | |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:16:27:16:29 | url | provenance | |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:19:27:19:29 | url | provenance | |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:22:27:22:29 | url | provenance | |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:25:27:25:29 | url | provenance | |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:28:27:28:29 | url | provenance | |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:31:27:31:29 | url | provenance | |
|
||||
| sanitizer.js:2:9:2:25 | url | sanitizer.js:37:27:37:29 | url | provenance | |
|
||||
| sanitizer.js:2:15:2:25 | window.name | sanitizer.js:2:9:2:25 | url | provenance | |
|
||||
| tst2.js:2:7:2:33 | href | tst2.js:4:21:4:24 | href | provenance | |
|
||||
| tst2.js:2:14:2:33 | window.location.href | tst2.js:2:7:2:33 | href | provenance | |
|
||||
| tst2.js:4:21:4:24 | href | tst2.js:4:21:4:55 | href.su ... '?')+1) | provenance | Config |
|
||||
| tst6.js:2:7:2:45 | redirect | tst6.js:4:21:4:28 | redirect | provenance | |
|
||||
| tst6.js:2:7:2:45 | redirect | tst6.js:6:17:6:24 | redirect | provenance | |
|
||||
| tst6.js:2:18:2:45 | $locati ... irect') | tst6.js:2:7:2:45 | redirect | provenance | |
|
||||
| tst6.js:8:21:8:48 | $locati ... irect') | tst6.js:8:21:8:56 | $locati ... + "foo" | provenance | |
|
||||
| tst9.js:2:21:2:42 | documen ... on.hash | tst9.js:2:21:2:55 | documen ... ring(1) | provenance | |
|
||||
| tst10.js:5:23:5:46 | documen ... .search | tst10.js:5:17:5:46 | '/' + d ... .search | provenance | |
|
||||
| tst10.js:8:24:8:47 | documen ... .search | tst10.js:8:17:8:47 | '//' + ... .search | provenance | |
|
||||
| tst10.js:11:27:11:50 | documen ... .search | tst10.js:11:17:11:50 | '//foo' ... .search | provenance | |
|
||||
| tst10.js:14:33:14:56 | documen ... .search | tst10.js:14:17:14:56 | 'https: ... .search | provenance | |
|
||||
| tst12.js:3:9:3:50 | urlParts | tst12.js:4:15:4:22 | urlParts | provenance | |
|
||||
| tst12.js:3:20:3:39 | window.location.hash | tst12.js:3:20:3:50 | window. ... it('?') | provenance | |
|
||||
| tst12.js:3:20:3:50 | window. ... it('?') | tst12.js:3:9:3:50 | urlParts | provenance | |
|
||||
| tst12.js:4:9:4:45 | loc | tst12.js:5:23:5:25 | loc | provenance | |
|
||||
| tst12.js:4:15:4:22 | urlParts | tst12.js:4:9:4:45 | loc | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:4:15:4:21 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:8:21:8:27 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:12:14:12:20 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:16:17:16:23 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:20:14:20:20 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:24:14:24:20 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:28:21:28:27 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:32:17:32:23 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:36:21:36:27 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:40:15:40:21 | payload | provenance | |
|
||||
| tst13.js:2:9:2:52 | payload | tst13.js:44:14:44:20 | payload | provenance | |
|
||||
| tst13.js:2:19:2:42 | documen ... .search | tst13.js:2:19:2:52 | documen ... bstr(1) | provenance | |
|
||||
| tst13.js:2:19:2:52 | documen ... bstr(1) | tst13.js:2:9:2:52 | payload | provenance | |
|
||||
| tst13.js:49:32:49:32 | e | tst13.js:50:23:50:23 | e | provenance | |
|
||||
| tst13.js:52:34:52:34 | e | tst13.js:53:28:53:28 | e | provenance | |
|
||||
| tst13.js:59:9:59:52 | payload | tst13.js:61:18:61:24 | payload | provenance | |
|
||||
| tst13.js:59:19:59:42 | documen ... .search | tst13.js:59:19:59:52 | documen ... bstr(1) | provenance | |
|
||||
| tst13.js:59:19:59:52 | documen ... bstr(1) | tst13.js:59:9:59:52 | payload | provenance | |
|
||||
| tst13.js:65:9:65:49 | payload | tst13.js:67:21:67:27 | payload | provenance | |
|
||||
| tst13.js:65:19:65:39 | history ... on.hash | tst13.js:65:19:65:49 | history ... bstr(1) | provenance | |
|
||||
| tst13.js:65:19:65:49 | history ... bstr(1) | tst13.js:65:9:65:49 | payload | provenance | |
|
||||
| tst13.js:72:9:72:49 | payload | tst13.js:74:21:74:27 | payload | provenance | |
|
||||
| tst13.js:72:19:72:39 | history ... on.hash | tst13.js:72:19:72:49 | history ... bstr(1) | provenance | |
|
||||
| tst13.js:72:19:72:49 | history ... bstr(1) | tst13.js:72:9:72:49 | payload | provenance | |
|
||||
| tst13.js:78:9:78:48 | url | tst13.js:80:21:80:23 | url | provenance | |
|
||||
| tst13.js:78:9:78:48 | url | tst13.js:81:28:81:30 | url | provenance | |
|
||||
| tst13.js:78:9:78:48 | url | tst13.js:82:27:82:29 | url | provenance | |
|
||||
| tst13.js:78:9:78:48 | url | tst13.js:83:22:83:24 | url | provenance | |
|
||||
| tst13.js:78:15:78:38 | documen ... .search | tst13.js:78:15:78:48 | documen ... bstr(1) | provenance | |
|
||||
| tst13.js:78:15:78:48 | documen ... bstr(1) | tst13.js:78:9:78:48 | url | provenance | |
|
||||
| tst.js:2:19:2:69 | /.*redi ... n.href) | tst.js:2:19:2:72 | /.*redi ... ref)[1] | provenance | |
|
||||
| tst.js:2:47:2:68 | documen ... on.href | tst.js:2:19:2:69 | /.*redi ... n.href) | provenance | Config |
|
||||
| tst.js:6:20:6:56 | indirec ... n.href) | tst.js:6:20:6:59 | indirec ... ref)[1] | provenance | |
|
||||
| tst.js:6:34:6:55 | documen ... on.href | tst.js:6:20:6:56 | indirec ... n.href) | provenance | Config |
|
||||
| tst.js:10:19:10:81 | new Reg ... n.href) | tst.js:10:19:10:84 | new Reg ... ref)[1] | provenance | |
|
||||
| tst.js:10:59:10:80 | documen ... on.href | tst.js:10:19:10:81 | new Reg ... n.href) | provenance | Config |
|
||||
| tst.js:14:20:14:56 | indirec ... n.href) | tst.js:14:20:14:59 | indirec ... ref)[1] | provenance | |
|
||||
| tst.js:14:34:14:55 | documen ... on.href | tst.js:14:20:14:56 | indirec ... n.href) | provenance | Config |
|
||||
| tst.js:18:19:18:81 | new Reg ... n.href) | tst.js:18:19:18:84 | new Reg ... ref)[1] | provenance | |
|
||||
| tst.js:18:59:18:80 | documen ... on.href | tst.js:18:19:18:81 | new Reg ... n.href) | provenance | Config |
|
||||
| tst.js:22:20:22:56 | indirec ... n.href) | tst.js:22:20:22:59 | indirec ... ref)[1] | provenance | |
|
||||
| tst.js:22:34:22:55 | documen ... on.href | tst.js:22:20:22:56 | indirec ... n.href) | provenance | Config |
|
||||
| tst.js:26:22:26:79 | new Reg ... n.href) | tst.js:26:22:26:82 | new Reg ... ref)[1] | provenance | |
|
||||
| tst.js:26:62:26:78 | win.location.href | tst.js:26:22:26:79 | new Reg ... n.href) | provenance | Config |
|
||||
| typed.ts:4:13:4:36 | params | typed.ts:5:25:5:30 | params | provenance | |
|
||||
| typed.ts:4:22:4:36 | location.search | typed.ts:4:13:4:36 | params | provenance | |
|
||||
| typed.ts:5:25:5:30 | params | typed.ts:7:24:7:34 | redirectUri | provenance | |
|
||||
| typed.ts:7:24:7:34 | redirectUri | typed.ts:8:33:8:43 | redirectUri | provenance | |
|
||||
| typed.ts:25:25:25:34 | loc.search | typed.ts:28:24:28:34 | redirectUri | provenance | |
|
||||
| typed.ts:28:24:28:34 | redirectUri | typed.ts:29:33:29:43 | redirectUri | provenance | |
|
||||
| typed.ts:47:25:47:34 | loc.search | typed.ts:51:24:51:34 | redirectUri | provenance | |
|
||||
| typed.ts:48:26:48:36 | loc2.search | typed.ts:55:25:55:35 | redirectUri | provenance | |
|
||||
| typed.ts:51:24:51:34 | redirectUri | typed.ts:52:33:52:43 | redirectUri | provenance | |
|
||||
| typed.ts:55:25:55:35 | redirectUri | typed.ts:56:33:56:43 | redirectUri | provenance | |
|
||||
subpaths
|
||||
#select
|
||||
| electron.js:7:20:7:29 | getTaint() | electron.js:4:12:4:22 | window.name | electron.js:7:20:7:29 | getTaint() | Untrusted URL redirection depends on a $@. | electron.js:4:12:4:22 | window.name | user-provided value |
|
||||
|
||||
@@ -1,47 +1,47 @@
|
||||
edges
|
||||
| ServerSideUrlRedirectGood2.js:16:7:16:34 | target | ServerSideUrlRedirectGood2.js:18:18:18:23 | target |
|
||||
| ServerSideUrlRedirectGood2.js:16:16:16:34 | req.query["target"] | ServerSideUrlRedirectGood2.js:16:7:16:34 | target |
|
||||
| express.js:27:7:27:34 | target | express.js:30:18:30:23 | target |
|
||||
| express.js:27:7:27:34 | target | express.js:33:18:33:23 | target |
|
||||
| express.js:27:7:27:34 | target | express.js:35:16:35:21 | target |
|
||||
| express.js:27:16:27:34 | req.param("target") | express.js:27:7:27:34 | target |
|
||||
| express.js:40:69:40:87 | req.param('action') | express.js:40:16:40:108 | (req.pa ... ntacts" |
|
||||
| express.js:74:19:74:37 | req.param("target") | express.js:74:16:74:43 | `${req. ... )}/foo` |
|
||||
| express.js:83:7:83:34 | target | express.js:90:18:90:23 | target |
|
||||
| express.js:83:7:83:34 | target | express.js:97:16:97:21 | target |
|
||||
| express.js:83:16:83:34 | req.param("target") | express.js:83:7:83:34 | target |
|
||||
| express.js:118:17:118:30 | req.query.page | express.js:118:16:118:72 | [req.qu ... oin('') |
|
||||
| express.js:134:22:134:36 | req.params.user | express.js:134:16:134:36 | '/' + r ... ms.user |
|
||||
| express.js:135:23:135:37 | req.params.user | express.js:135:16:135:37 | '//' + ... ms.user |
|
||||
| express.js:136:22:136:36 | req.params.user | express.js:136:16:136:36 | 'u' + r ... ms.user |
|
||||
| express.js:150:7:150:34 | target | express.js:155:18:155:23 | target |
|
||||
| express.js:150:7:150:34 | target | express.js:160:18:160:23 | target |
|
||||
| express.js:150:16:150:34 | req.param("target") | express.js:150:7:150:34 | target |
|
||||
| express.js:164:7:164:54 | myThing | express.js:165:16:165:22 | myThing |
|
||||
| express.js:164:17:164:41 | JSON.st ... .query) | express.js:164:17:164:54 | JSON.st ... (1, -1) |
|
||||
| express.js:164:17:164:54 | JSON.st ... (1, -1) | express.js:164:7:164:54 | myThing |
|
||||
| express.js:164:32:164:40 | req.query | express.js:164:17:164:41 | JSON.st ... .query) |
|
||||
| koa.js:6:6:6:27 | url | koa.js:7:15:7:17 | url |
|
||||
| koa.js:6:6:6:27 | url | koa.js:8:18:8:20 | url |
|
||||
| koa.js:6:6:6:27 | url | koa.js:14:16:14:18 | url |
|
||||
| koa.js:6:6:6:27 | url | koa.js:20:16:20:18 | url |
|
||||
| koa.js:6:12:6:27 | ctx.query.target | koa.js:6:6:6:27 | url |
|
||||
| koa.js:8:18:8:20 | url | koa.js:8:15:8:26 | `${url}${x}` |
|
||||
| next.ts:11:31:11:38 | req.body | next.ts:11:31:11:50 | req.body.callbackUrl |
|
||||
| node.js:5:7:5:52 | target | node.js:6:34:6:39 | target |
|
||||
| node.js:5:16:5:39 | url.par ... , true) | node.js:5:7:5:52 | target |
|
||||
| node.js:5:26:5:32 | req.url | node.js:5:16:5:39 | url.par ... , true) |
|
||||
| node.js:10:7:10:52 | target | node.js:14:40:14:45 | target |
|
||||
| node.js:10:16:10:39 | url.par ... , true) | node.js:10:7:10:52 | target |
|
||||
| node.js:10:26:10:32 | req.url | node.js:10:16:10:39 | url.par ... , true) |
|
||||
| node.js:14:40:14:45 | target | node.js:14:34:14:45 | '/' + target |
|
||||
| node.js:28:7:28:52 | target | node.js:31:34:31:39 | target |
|
||||
| node.js:28:16:28:39 | url.par ... , true) | node.js:28:7:28:52 | target |
|
||||
| node.js:28:26:28:32 | req.url | node.js:28:16:28:39 | url.par ... , true) |
|
||||
| node.js:31:34:31:39 | target | node.js:31:34:31:55 | target ... =" + me |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:8:17:8:23 | tainted |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:9:26:9:32 | tainted |
|
||||
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted |
|
||||
| ServerSideUrlRedirectGood2.js:16:7:16:34 | target | ServerSideUrlRedirectGood2.js:18:18:18:23 | target | provenance | |
|
||||
| ServerSideUrlRedirectGood2.js:16:16:16:34 | req.query["target"] | ServerSideUrlRedirectGood2.js:16:7:16:34 | target | provenance | |
|
||||
| express.js:27:7:27:34 | target | express.js:30:18:30:23 | target | provenance | |
|
||||
| express.js:27:7:27:34 | target | express.js:33:18:33:23 | target | provenance | |
|
||||
| express.js:27:7:27:34 | target | express.js:35:16:35:21 | target | provenance | |
|
||||
| express.js:27:16:27:34 | req.param("target") | express.js:27:7:27:34 | target | provenance | |
|
||||
| express.js:40:69:40:87 | req.param('action') | express.js:40:16:40:108 | (req.pa ... ntacts" | provenance | |
|
||||
| express.js:74:19:74:37 | req.param("target") | express.js:74:16:74:43 | `${req. ... )}/foo` | provenance | |
|
||||
| express.js:83:7:83:34 | target | express.js:90:18:90:23 | target | provenance | |
|
||||
| express.js:83:7:83:34 | target | express.js:97:16:97:21 | target | provenance | |
|
||||
| express.js:83:16:83:34 | req.param("target") | express.js:83:7:83:34 | target | provenance | |
|
||||
| express.js:118:17:118:30 | req.query.page | express.js:118:16:118:72 | [req.qu ... oin('') | provenance | |
|
||||
| express.js:134:22:134:36 | req.params.user | express.js:134:16:134:36 | '/' + r ... ms.user | provenance | |
|
||||
| express.js:135:23:135:37 | req.params.user | express.js:135:16:135:37 | '//' + ... ms.user | provenance | |
|
||||
| express.js:136:22:136:36 | req.params.user | express.js:136:16:136:36 | 'u' + r ... ms.user | provenance | |
|
||||
| express.js:150:7:150:34 | target | express.js:155:18:155:23 | target | provenance | |
|
||||
| express.js:150:7:150:34 | target | express.js:160:18:160:23 | target | provenance | |
|
||||
| express.js:150:16:150:34 | req.param("target") | express.js:150:7:150:34 | target | provenance | |
|
||||
| express.js:164:7:164:54 | myThing | express.js:165:16:165:22 | myThing | provenance | |
|
||||
| express.js:164:17:164:41 | JSON.st ... .query) | express.js:164:17:164:54 | JSON.st ... (1, -1) | provenance | |
|
||||
| express.js:164:17:164:54 | JSON.st ... (1, -1) | express.js:164:7:164:54 | myThing | provenance | |
|
||||
| express.js:164:32:164:40 | req.query | express.js:164:17:164:41 | JSON.st ... .query) | provenance | |
|
||||
| koa.js:6:6:6:27 | url | koa.js:7:15:7:17 | url | provenance | |
|
||||
| koa.js:6:6:6:27 | url | koa.js:8:18:8:20 | url | provenance | |
|
||||
| koa.js:6:6:6:27 | url | koa.js:14:16:14:18 | url | provenance | |
|
||||
| koa.js:6:6:6:27 | url | koa.js:20:16:20:18 | url | provenance | |
|
||||
| koa.js:6:12:6:27 | ctx.query.target | koa.js:6:6:6:27 | url | provenance | |
|
||||
| koa.js:8:18:8:20 | url | koa.js:8:15:8:26 | `${url}${x}` | provenance | |
|
||||
| next.ts:11:31:11:38 | req.body | next.ts:11:31:11:50 | req.body.callbackUrl | provenance | |
|
||||
| node.js:5:7:5:52 | target | node.js:6:34:6:39 | target | provenance | |
|
||||
| node.js:5:16:5:39 | url.par ... , true) | node.js:5:7:5:52 | target | provenance | |
|
||||
| node.js:5:26:5:32 | req.url | node.js:5:16:5:39 | url.par ... , true) | provenance | |
|
||||
| node.js:10:7:10:52 | target | node.js:14:40:14:45 | target | provenance | |
|
||||
| node.js:10:16:10:39 | url.par ... , true) | node.js:10:7:10:52 | target | provenance | |
|
||||
| node.js:10:26:10:32 | req.url | node.js:10:16:10:39 | url.par ... , true) | provenance | |
|
||||
| node.js:14:40:14:45 | target | node.js:14:34:14:45 | '/' + target | provenance | |
|
||||
| node.js:28:7:28:52 | target | node.js:31:34:31:39 | target | provenance | |
|
||||
| node.js:28:16:28:39 | url.par ... , true) | node.js:28:7:28:52 | target | provenance | |
|
||||
| node.js:28:26:28:32 | req.url | node.js:28:16:28:39 | url.par ... , true) | provenance | |
|
||||
| node.js:31:34:31:39 | target | node.js:31:34:31:55 | target ... =" + me | provenance | |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:8:17:8:23 | tainted | provenance | |
|
||||
| react-native.js:7:7:7:33 | tainted | react-native.js:9:26:9:32 | tainted | provenance | |
|
||||
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted | provenance | |
|
||||
nodes
|
||||
| ServerSideUrlRedirect.js:5:16:5:34 | req.query["target"] | semmle.label | req.query["target"] |
|
||||
| ServerSideUrlRedirectGood2.js:16:7:16:34 | target | semmle.label | target |
|
||||
|
||||
@@ -1,8 +1,8 @@
|
||||
edges
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:11:55:11:57 | src |
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:14:57:14:59 | src |
|
||||
| domparser.js:2:13:2:36 | documen ... .search | domparser.js:2:7:2:36 | src |
|
||||
| libxml.noent.js:16:27:16:35 | req.files | libxml.noent.js:16:27:16:66 | req.fil ... 'utf8') |
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:11:55:11:57 | src | provenance | |
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:14:57:14:59 | src | provenance | |
|
||||
| domparser.js:2:13:2:36 | documen ... .search | domparser.js:2:7:2:36 | src | provenance | |
|
||||
| libxml.noent.js:16:27:16:35 | req.files | libxml.noent.js:16:27:16:66 | req.fil ... 'utf8') | provenance | |
|
||||
nodes
|
||||
| domparser.js:2:7:2:36 | src | semmle.label | src |
|
||||
| domparser.js:2:13:2:36 | documen ... .search | semmle.label | documen ... .search |
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
edges
|
||||
| tst.js:17:84:17:91 | req.host | tst.js:17:11:17:113 | `Hi, lo ... token}` |
|
||||
| tst.js:18:78:18:85 | req.host | tst.js:18:11:18:127 | `Hi, lo ... reset.` |
|
||||
| tst.js:17:84:17:91 | req.host | tst.js:17:11:17:113 | `Hi, lo ... token}` | provenance | |
|
||||
| tst.js:18:78:18:85 | req.host | tst.js:18:11:18:127 | `Hi, lo ... reset.` | provenance | |
|
||||
nodes
|
||||
| tst.js:17:11:17:113 | `Hi, lo ... token}` | semmle.label | `Hi, lo ... token}` |
|
||||
| tst.js:17:84:17:91 | req.host | semmle.label | req.host |
|
||||
|
||||
@@ -1,15 +1,15 @@
|
||||
edges
|
||||
| XpathInjectionBad.js:6:7:6:38 | userName | XpathInjectionBad.js:9:66:9:73 | userName |
|
||||
| XpathInjectionBad.js:6:18:6:38 | req.par ... rName") | XpathInjectionBad.js:6:7:6:38 | userName |
|
||||
| XpathInjectionBad.js:9:66:9:73 | userName | XpathInjectionBad.js:9:34:9:96 | "//user ... text()" |
|
||||
| tst2.js:1:13:1:34 | documen ... on.hash | tst2.js:1:13:1:47 | documen ... ring(1) |
|
||||
| tst2.js:1:13:1:47 | documen ... ring(1) | tst2.js:2:27:2:31 | query |
|
||||
| tst2.js:1:13:1:47 | documen ... ring(1) | tst2.js:3:19:3:23 | query |
|
||||
| tst.js:6:7:6:37 | tainted | tst.js:7:15:7:21 | tainted |
|
||||
| tst.js:6:7:6:37 | tainted | tst.js:8:16:8:22 | tainted |
|
||||
| tst.js:6:7:6:37 | tainted | tst.js:9:17:9:23 | tainted |
|
||||
| tst.js:6:7:6:37 | tainted | tst.js:11:8:11:14 | tainted |
|
||||
| tst.js:6:17:6:37 | req.par ... rName") | tst.js:6:7:6:37 | tainted |
|
||||
| XpathInjectionBad.js:6:7:6:38 | userName | XpathInjectionBad.js:9:66:9:73 | userName | provenance | |
|
||||
| XpathInjectionBad.js:6:18:6:38 | req.par ... rName") | XpathInjectionBad.js:6:7:6:38 | userName | provenance | |
|
||||
| XpathInjectionBad.js:9:66:9:73 | userName | XpathInjectionBad.js:9:34:9:96 | "//user ... text()" | provenance | |
|
||||
| tst2.js:1:13:1:34 | documen ... on.hash | tst2.js:1:13:1:47 | documen ... ring(1) | provenance | |
|
||||
| tst2.js:1:13:1:47 | documen ... ring(1) | tst2.js:2:27:2:31 | query | provenance | |
|
||||
| tst2.js:1:13:1:47 | documen ... ring(1) | tst2.js:3:19:3:23 | query | provenance | |
|
||||
| tst.js:6:7:6:37 | tainted | tst.js:7:15:7:21 | tainted | provenance | |
|
||||
| tst.js:6:7:6:37 | tainted | tst.js:8:16:8:22 | tainted | provenance | |
|
||||
| tst.js:6:7:6:37 | tainted | tst.js:9:17:9:23 | tainted | provenance | |
|
||||
| tst.js:6:7:6:37 | tainted | tst.js:11:8:11:14 | tainted | provenance | |
|
||||
| tst.js:6:17:6:37 | req.par ... rName") | tst.js:6:7:6:37 | tainted | provenance | |
|
||||
nodes
|
||||
| XpathInjectionBad.js:6:7:6:38 | userName | semmle.label | userName |
|
||||
| XpathInjectionBad.js:6:18:6:38 | req.par ... rName") | semmle.label | req.par ... rName") |
|
||||
|
||||
@@ -1,48 +1,48 @@
|
||||
edges
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:8:31:8:33 | key |
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:19:19:19:21 | key |
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:21:19:21:21 | key |
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:33:12:33:14 | key |
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:54:14:54:16 | key |
|
||||
| RegExpInjection.js:5:13:5:28 | req.param("key") | RegExpInjection.js:5:7:5:28 | key |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:40:23:40:27 | input |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:41:26:41:30 | input |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:42:25:42:29 | input |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:45:24:45:28 | input |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:46:27:46:31 | input |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:47:26:47:30 | input |
|
||||
| RegExpInjection.js:5:39:5:56 | req.param("input") | RegExpInjection.js:5:31:5:56 | input |
|
||||
| RegExpInjection.js:8:31:8:33 | key | RegExpInjection.js:8:23:8:45 | "\\\\b" + ... (.*)\\n" |
|
||||
| RegExpInjection.js:10:17:10:17 | s | RegExpInjection.js:11:26:11:26 | s |
|
||||
| RegExpInjection.js:11:20:11:27 | wrap2(s) | RegExpInjection.js:11:12:11:27 | "\\\\b" + wrap2(s) |
|
||||
| RegExpInjection.js:11:26:11:26 | s | RegExpInjection.js:11:20:11:27 | wrap2(s) |
|
||||
| RegExpInjection.js:11:26:11:26 | s | RegExpInjection.js:14:18:14:18 | s |
|
||||
| RegExpInjection.js:14:18:14:18 | s | RegExpInjection.js:15:12:15:12 | s |
|
||||
| RegExpInjection.js:15:12:15:12 | s | RegExpInjection.js:15:12:15:24 | s + "=(.*)\\n" |
|
||||
| RegExpInjection.js:19:19:19:21 | key | RegExpInjection.js:10:17:10:17 | s |
|
||||
| RegExpInjection.js:19:19:19:21 | key | RegExpInjection.js:19:14:19:22 | wrap(key) |
|
||||
| RegExpInjection.js:21:19:21:21 | key | RegExpInjection.js:10:17:10:17 | s |
|
||||
| RegExpInjection.js:21:19:21:21 | key | RegExpInjection.js:21:14:21:22 | wrap(key) |
|
||||
| RegExpInjection.js:24:12:24:27 | req.param("key") | RegExpInjection.js:27:14:27:21 | getKey() |
|
||||
| RegExpInjection.js:24:12:24:27 | req.param("key") | RegExpInjection.js:34:12:34:19 | getKey() |
|
||||
| RegExpInjection.js:29:21:29:21 | s | RegExpInjection.js:31:23:31:23 | s |
|
||||
| RegExpInjection.js:33:12:33:14 | key | RegExpInjection.js:29:21:29:21 | s |
|
||||
| RegExpInjection.js:34:12:34:19 | getKey() | RegExpInjection.js:29:21:29:21 | s |
|
||||
| RegExpInjection.js:54:14:54:16 | key | RegExpInjection.js:54:14:54:27 | key.split(".") |
|
||||
| RegExpInjection.js:54:14:54:27 | key.split(".") | RegExpInjection.js:54:14:54:42 | key.spl ... x => x) |
|
||||
| RegExpInjection.js:54:14:54:42 | key.spl ... x => x) | RegExpInjection.js:54:14:54:52 | key.spl ... in("-") |
|
||||
| RegExpInjection.js:60:31:60:56 | input | RegExpInjection.js:64:14:64:18 | input |
|
||||
| RegExpInjection.js:60:39:60:56 | req.param("input") | RegExpInjection.js:60:31:60:56 | input |
|
||||
| RegExpInjection.js:82:7:82:32 | input | RegExpInjection.js:87:25:87:29 | input |
|
||||
| RegExpInjection.js:82:15:82:32 | req.param("input") | RegExpInjection.js:82:7:82:32 | input |
|
||||
| RegExpInjection.js:87:25:87:29 | input | RegExpInjection.js:87:25:87:48 | input.r ... g, "\|") |
|
||||
| RegExpInjection.js:87:25:87:48 | input.r ... g, "\|") | RegExpInjection.js:87:14:87:55 | "^.*\\.( ... + ")$" |
|
||||
| RegExpInjection.js:91:20:91:30 | process.env | RegExpInjection.js:91:16:91:50 | `^${pro ... r.app$` |
|
||||
| RegExpInjection.js:93:20:93:31 | process.argv | RegExpInjection.js:93:16:93:49 | `^${pro ... r.app$` |
|
||||
| tst.js:1:46:1:46 | e | tst.js:2:16:2:16 | e |
|
||||
| tst.js:2:9:2:21 | data | tst.js:3:21:3:24 | data |
|
||||
| tst.js:2:16:2:16 | e | tst.js:2:9:2:21 | data |
|
||||
| tst.js:3:21:3:24 | data | tst.js:3:16:3:35 | "^"+ data.name + "$" |
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:8:31:8:33 | key | provenance | |
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:19:19:19:21 | key | provenance | |
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:21:19:21:21 | key | provenance | |
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:33:12:33:14 | key | provenance | |
|
||||
| RegExpInjection.js:5:7:5:28 | key | RegExpInjection.js:54:14:54:16 | key | provenance | |
|
||||
| RegExpInjection.js:5:13:5:28 | req.param("key") | RegExpInjection.js:5:7:5:28 | key | provenance | |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:40:23:40:27 | input | provenance | |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:41:26:41:30 | input | provenance | |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:42:25:42:29 | input | provenance | |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:45:24:45:28 | input | provenance | |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:46:27:46:31 | input | provenance | |
|
||||
| RegExpInjection.js:5:31:5:56 | input | RegExpInjection.js:47:26:47:30 | input | provenance | |
|
||||
| RegExpInjection.js:5:39:5:56 | req.param("input") | RegExpInjection.js:5:31:5:56 | input | provenance | |
|
||||
| RegExpInjection.js:8:31:8:33 | key | RegExpInjection.js:8:23:8:45 | "\\\\b" + ... (.*)\\n" | provenance | |
|
||||
| RegExpInjection.js:10:17:10:17 | s | RegExpInjection.js:11:26:11:26 | s | provenance | |
|
||||
| RegExpInjection.js:11:20:11:27 | wrap2(s) | RegExpInjection.js:11:12:11:27 | "\\\\b" + wrap2(s) | provenance | |
|
||||
| RegExpInjection.js:11:26:11:26 | s | RegExpInjection.js:11:20:11:27 | wrap2(s) | provenance | |
|
||||
| RegExpInjection.js:11:26:11:26 | s | RegExpInjection.js:14:18:14:18 | s | provenance | |
|
||||
| RegExpInjection.js:14:18:14:18 | s | RegExpInjection.js:15:12:15:12 | s | provenance | |
|
||||
| RegExpInjection.js:15:12:15:12 | s | RegExpInjection.js:15:12:15:24 | s + "=(.*)\\n" | provenance | |
|
||||
| RegExpInjection.js:19:19:19:21 | key | RegExpInjection.js:10:17:10:17 | s | provenance | |
|
||||
| RegExpInjection.js:19:19:19:21 | key | RegExpInjection.js:19:14:19:22 | wrap(key) | provenance | |
|
||||
| RegExpInjection.js:21:19:21:21 | key | RegExpInjection.js:10:17:10:17 | s | provenance | |
|
||||
| RegExpInjection.js:21:19:21:21 | key | RegExpInjection.js:21:14:21:22 | wrap(key) | provenance | |
|
||||
| RegExpInjection.js:24:12:24:27 | req.param("key") | RegExpInjection.js:27:14:27:21 | getKey() | provenance | |
|
||||
| RegExpInjection.js:24:12:24:27 | req.param("key") | RegExpInjection.js:34:12:34:19 | getKey() | provenance | |
|
||||
| RegExpInjection.js:29:21:29:21 | s | RegExpInjection.js:31:23:31:23 | s | provenance | |
|
||||
| RegExpInjection.js:33:12:33:14 | key | RegExpInjection.js:29:21:29:21 | s | provenance | |
|
||||
| RegExpInjection.js:34:12:34:19 | getKey() | RegExpInjection.js:29:21:29:21 | s | provenance | |
|
||||
| RegExpInjection.js:54:14:54:16 | key | RegExpInjection.js:54:14:54:27 | key.split(".") | provenance | |
|
||||
| RegExpInjection.js:54:14:54:27 | key.split(".") | RegExpInjection.js:54:14:54:42 | key.spl ... x => x) | provenance | |
|
||||
| RegExpInjection.js:54:14:54:42 | key.spl ... x => x) | RegExpInjection.js:54:14:54:52 | key.spl ... in("-") | provenance | |
|
||||
| RegExpInjection.js:60:31:60:56 | input | RegExpInjection.js:64:14:64:18 | input | provenance | |
|
||||
| RegExpInjection.js:60:39:60:56 | req.param("input") | RegExpInjection.js:60:31:60:56 | input | provenance | |
|
||||
| RegExpInjection.js:82:7:82:32 | input | RegExpInjection.js:87:25:87:29 | input | provenance | |
|
||||
| RegExpInjection.js:82:15:82:32 | req.param("input") | RegExpInjection.js:82:7:82:32 | input | provenance | |
|
||||
| RegExpInjection.js:87:25:87:29 | input | RegExpInjection.js:87:25:87:48 | input.r ... g, "\|") | provenance | |
|
||||
| RegExpInjection.js:87:25:87:48 | input.r ... g, "\|") | RegExpInjection.js:87:14:87:55 | "^.*\\.( ... + ")$" | provenance | |
|
||||
| RegExpInjection.js:91:20:91:30 | process.env | RegExpInjection.js:91:16:91:50 | `^${pro ... r.app$` | provenance | |
|
||||
| RegExpInjection.js:93:20:93:31 | process.argv | RegExpInjection.js:93:16:93:49 | `^${pro ... r.app$` | provenance | |
|
||||
| tst.js:1:46:1:46 | e | tst.js:2:16:2:16 | e | provenance | |
|
||||
| tst.js:2:9:2:21 | data | tst.js:3:21:3:24 | data | provenance | |
|
||||
| tst.js:2:16:2:16 | e | tst.js:2:9:2:21 | data | provenance | |
|
||||
| tst.js:3:21:3:24 | data | tst.js:3:16:3:35 | "^"+ data.name + "$" | provenance | |
|
||||
nodes
|
||||
| RegExpInjection.js:5:7:5:28 | key | semmle.label | key |
|
||||
| RegExpInjection.js:5:13:5:28 | req.param("key") | semmle.label | req.param("key") |
|
||||
|
||||
@@ -60,60 +60,60 @@ nodes
|
||||
| tst.js:49:19:49:22 | name | semmle.label | name |
|
||||
| tst.js:50:5:50:6 | fn | semmle.label | fn |
|
||||
edges
|
||||
| UnsafeDynamicMethodAccess.js:5:37:5:38 | ev | UnsafeDynamicMethodAccess.js:6:30:6:31 | ev |
|
||||
| UnsafeDynamicMethodAccess.js:6:9:6:37 | message | UnsafeDynamicMethodAccess.js:15:9:15:15 | message |
|
||||
| UnsafeDynamicMethodAccess.js:6:19:6:37 | JSON.parse(ev.data) | UnsafeDynamicMethodAccess.js:6:9:6:37 | message |
|
||||
| UnsafeDynamicMethodAccess.js:6:30:6:31 | ev | UnsafeDynamicMethodAccess.js:6:30:6:36 | ev.data |
|
||||
| UnsafeDynamicMethodAccess.js:6:30:6:36 | ev.data | UnsafeDynamicMethodAccess.js:6:19:6:37 | JSON.parse(ev.data) |
|
||||
| UnsafeDynamicMethodAccess.js:15:9:15:15 | message | UnsafeDynamicMethodAccess.js:15:9:15:20 | message.name |
|
||||
| UnsafeDynamicMethodAccess.js:15:9:15:20 | message.name | UnsafeDynamicMethodAccess.js:15:5:15:21 | obj[message.name] |
|
||||
| UnvalidatedDynamicMethodCall2.js:13:9:13:47 | action | UnvalidatedDynamicMethodCall2.js:14:13:14:18 | action |
|
||||
| UnvalidatedDynamicMethodCall2.js:13:18:13:47 | actions ... action) | UnvalidatedDynamicMethodCall2.js:13:9:13:47 | action |
|
||||
| UnvalidatedDynamicMethodCall2.js:13:30:13:46 | req.params.action | UnvalidatedDynamicMethodCall2.js:13:18:13:47 | actions ... action) |
|
||||
| UnvalidatedDynamicMethodCall.js:14:7:14:41 | action | UnvalidatedDynamicMethodCall.js:15:11:15:16 | action |
|
||||
| UnvalidatedDynamicMethodCall.js:14:16:14:41 | actions ... action] | UnvalidatedDynamicMethodCall.js:14:7:14:41 | action |
|
||||
| UnvalidatedDynamicMethodCall.js:14:24:14:40 | req.params.action | UnvalidatedDynamicMethodCall.js:14:16:14:41 | actions ... action] |
|
||||
| UnvalidatedDynamicMethodCallGood4.js:14:13:14:51 | action | UnvalidatedDynamicMethodCallGood4.js:15:17:15:22 | action |
|
||||
| UnvalidatedDynamicMethodCallGood4.js:14:22:14:51 | actions ... action) | UnvalidatedDynamicMethodCallGood4.js:14:13:14:51 | action |
|
||||
| UnvalidatedDynamicMethodCallGood4.js:14:34:14:50 | req.params.action | UnvalidatedDynamicMethodCallGood4.js:14:22:14:51 | actions ... action) |
|
||||
| tst.js:6:39:6:40 | ev | tst.js:7:27:7:28 | ev |
|
||||
| tst.js:6:39:6:40 | ev | tst.js:9:9:9:10 | ev |
|
||||
| tst.js:7:9:7:39 | name | tst.js:11:9:11:12 | name |
|
||||
| tst.js:7:9:7:39 | name | tst.js:17:18:17:21 | name |
|
||||
| tst.js:7:9:7:39 | name | tst.js:21:11:21:14 | name |
|
||||
| tst.js:7:9:7:39 | name | tst.js:26:11:26:14 | name |
|
||||
| tst.js:7:9:7:39 | name | tst.js:28:11:28:14 | name |
|
||||
| tst.js:7:9:7:39 | name | tst.js:34:21:34:24 | name |
|
||||
| tst.js:7:16:7:34 | JSON.parse(ev.data) | tst.js:7:16:7:39 | JSON.pa ... a).name |
|
||||
| tst.js:7:16:7:39 | JSON.pa ... a).name | tst.js:7:9:7:39 | name |
|
||||
| tst.js:7:27:7:28 | ev | tst.js:7:27:7:33 | ev.data |
|
||||
| tst.js:7:27:7:33 | ev.data | tst.js:7:16:7:34 | JSON.parse(ev.data) |
|
||||
| tst.js:9:9:9:10 | ev | tst.js:9:9:9:15 | ev.data |
|
||||
| tst.js:9:9:9:15 | ev.data | tst.js:9:5:9:16 | obj[ev.data] |
|
||||
| tst.js:11:9:11:12 | name | tst.js:11:5:11:13 | obj[name] |
|
||||
| tst.js:17:9:17:22 | fn | tst.js:18:5:18:6 | fn |
|
||||
| tst.js:17:9:17:22 | fn | tst.js:20:7:20:8 | fn |
|
||||
| tst.js:17:9:17:22 | fn | tst.js:22:11:22:12 | fn |
|
||||
| tst.js:17:14:17:22 | obj[name] | tst.js:17:9:17:22 | fn |
|
||||
| tst.js:17:18:17:21 | name | tst.js:17:14:17:22 | obj[name] |
|
||||
| tst.js:21:11:21:14 | name | tst.js:21:7:21:15 | obj[name] |
|
||||
| tst.js:26:11:26:14 | name | tst.js:26:7:26:15 | obj[name] |
|
||||
| tst.js:28:11:28:14 | name | tst.js:28:7:28:15 | obj[name] |
|
||||
| tst.js:34:9:34:24 | key | tst.js:35:9:35:11 | key |
|
||||
| tst.js:34:9:34:24 | key | tst.js:37:11:37:13 | key |
|
||||
| tst.js:34:15:34:24 | "$" + name | tst.js:34:9:34:24 | key |
|
||||
| tst.js:34:21:34:24 | name | tst.js:34:15:34:24 | "$" + name |
|
||||
| tst.js:35:9:35:11 | key | tst.js:35:5:35:12 | obj[key] |
|
||||
| tst.js:37:11:37:13 | key | tst.js:37:7:37:14 | obj[key] |
|
||||
| tst.js:47:39:47:40 | ev | tst.js:48:27:48:28 | ev |
|
||||
| tst.js:48:9:48:39 | name | tst.js:49:19:49:22 | name |
|
||||
| tst.js:48:16:48:34 | JSON.parse(ev.data) | tst.js:48:16:48:39 | JSON.pa ... a).name |
|
||||
| tst.js:48:16:48:39 | JSON.pa ... a).name | tst.js:48:9:48:39 | name |
|
||||
| tst.js:48:27:48:28 | ev | tst.js:48:27:48:33 | ev.data |
|
||||
| tst.js:48:27:48:33 | ev.data | tst.js:48:16:48:34 | JSON.parse(ev.data) |
|
||||
| tst.js:49:9:49:23 | fn | tst.js:50:5:50:6 | fn |
|
||||
| tst.js:49:14:49:23 | obj2[name] | tst.js:49:9:49:23 | fn |
|
||||
| tst.js:49:19:49:22 | name | tst.js:49:14:49:23 | obj2[name] |
|
||||
| UnsafeDynamicMethodAccess.js:5:37:5:38 | ev | UnsafeDynamicMethodAccess.js:6:30:6:31 | ev | provenance | |
|
||||
| UnsafeDynamicMethodAccess.js:6:9:6:37 | message | UnsafeDynamicMethodAccess.js:15:9:15:15 | message | provenance | |
|
||||
| UnsafeDynamicMethodAccess.js:6:19:6:37 | JSON.parse(ev.data) | UnsafeDynamicMethodAccess.js:6:9:6:37 | message | provenance | |
|
||||
| UnsafeDynamicMethodAccess.js:6:30:6:31 | ev | UnsafeDynamicMethodAccess.js:6:30:6:36 | ev.data | provenance | Config |
|
||||
| UnsafeDynamicMethodAccess.js:6:30:6:36 | ev.data | UnsafeDynamicMethodAccess.js:6:19:6:37 | JSON.parse(ev.data) | provenance | Config |
|
||||
| UnsafeDynamicMethodAccess.js:15:9:15:15 | message | UnsafeDynamicMethodAccess.js:15:9:15:20 | message.name | provenance | Config |
|
||||
| UnsafeDynamicMethodAccess.js:15:9:15:20 | message.name | UnsafeDynamicMethodAccess.js:15:5:15:21 | obj[message.name] | provenance | Config |
|
||||
| UnvalidatedDynamicMethodCall2.js:13:9:13:47 | action | UnvalidatedDynamicMethodCall2.js:14:13:14:18 | action | provenance | |
|
||||
| UnvalidatedDynamicMethodCall2.js:13:18:13:47 | actions ... action) | UnvalidatedDynamicMethodCall2.js:13:9:13:47 | action | provenance | |
|
||||
| UnvalidatedDynamicMethodCall2.js:13:30:13:46 | req.params.action | UnvalidatedDynamicMethodCall2.js:13:18:13:47 | actions ... action) | provenance | Config |
|
||||
| UnvalidatedDynamicMethodCall.js:14:7:14:41 | action | UnvalidatedDynamicMethodCall.js:15:11:15:16 | action | provenance | |
|
||||
| UnvalidatedDynamicMethodCall.js:14:16:14:41 | actions ... action] | UnvalidatedDynamicMethodCall.js:14:7:14:41 | action | provenance | |
|
||||
| UnvalidatedDynamicMethodCall.js:14:24:14:40 | req.params.action | UnvalidatedDynamicMethodCall.js:14:16:14:41 | actions ... action] | provenance | Config |
|
||||
| UnvalidatedDynamicMethodCallGood4.js:14:13:14:51 | action | UnvalidatedDynamicMethodCallGood4.js:15:17:15:22 | action | provenance | |
|
||||
| UnvalidatedDynamicMethodCallGood4.js:14:22:14:51 | actions ... action) | UnvalidatedDynamicMethodCallGood4.js:14:13:14:51 | action | provenance | |
|
||||
| UnvalidatedDynamicMethodCallGood4.js:14:34:14:50 | req.params.action | UnvalidatedDynamicMethodCallGood4.js:14:22:14:51 | actions ... action) | provenance | Config |
|
||||
| tst.js:6:39:6:40 | ev | tst.js:7:27:7:28 | ev | provenance | |
|
||||
| tst.js:6:39:6:40 | ev | tst.js:9:9:9:10 | ev | provenance | |
|
||||
| tst.js:7:9:7:39 | name | tst.js:11:9:11:12 | name | provenance | |
|
||||
| tst.js:7:9:7:39 | name | tst.js:17:18:17:21 | name | provenance | |
|
||||
| tst.js:7:9:7:39 | name | tst.js:21:11:21:14 | name | provenance | |
|
||||
| tst.js:7:9:7:39 | name | tst.js:26:11:26:14 | name | provenance | |
|
||||
| tst.js:7:9:7:39 | name | tst.js:28:11:28:14 | name | provenance | |
|
||||
| tst.js:7:9:7:39 | name | tst.js:34:21:34:24 | name | provenance | |
|
||||
| tst.js:7:16:7:34 | JSON.parse(ev.data) | tst.js:7:16:7:39 | JSON.pa ... a).name | provenance | Config |
|
||||
| tst.js:7:16:7:39 | JSON.pa ... a).name | tst.js:7:9:7:39 | name | provenance | |
|
||||
| tst.js:7:27:7:28 | ev | tst.js:7:27:7:33 | ev.data | provenance | Config |
|
||||
| tst.js:7:27:7:33 | ev.data | tst.js:7:16:7:34 | JSON.parse(ev.data) | provenance | Config |
|
||||
| tst.js:9:9:9:10 | ev | tst.js:9:9:9:15 | ev.data | provenance | Config |
|
||||
| tst.js:9:9:9:15 | ev.data | tst.js:9:5:9:16 | obj[ev.data] | provenance | Config |
|
||||
| tst.js:11:9:11:12 | name | tst.js:11:5:11:13 | obj[name] | provenance | Config |
|
||||
| tst.js:17:9:17:22 | fn | tst.js:18:5:18:6 | fn | provenance | |
|
||||
| tst.js:17:9:17:22 | fn | tst.js:20:7:20:8 | fn | provenance | |
|
||||
| tst.js:17:9:17:22 | fn | tst.js:22:11:22:12 | fn | provenance | |
|
||||
| tst.js:17:14:17:22 | obj[name] | tst.js:17:9:17:22 | fn | provenance | |
|
||||
| tst.js:17:18:17:21 | name | tst.js:17:14:17:22 | obj[name] | provenance | Config |
|
||||
| tst.js:21:11:21:14 | name | tst.js:21:7:21:15 | obj[name] | provenance | Config |
|
||||
| tst.js:26:11:26:14 | name | tst.js:26:7:26:15 | obj[name] | provenance | Config |
|
||||
| tst.js:28:11:28:14 | name | tst.js:28:7:28:15 | obj[name] | provenance | Config |
|
||||
| tst.js:34:9:34:24 | key | tst.js:35:9:35:11 | key | provenance | |
|
||||
| tst.js:34:9:34:24 | key | tst.js:37:11:37:13 | key | provenance | |
|
||||
| tst.js:34:15:34:24 | "$" + name | tst.js:34:9:34:24 | key | provenance | |
|
||||
| tst.js:34:21:34:24 | name | tst.js:34:15:34:24 | "$" + name | provenance | Config |
|
||||
| tst.js:35:9:35:11 | key | tst.js:35:5:35:12 | obj[key] | provenance | Config |
|
||||
| tst.js:37:11:37:13 | key | tst.js:37:7:37:14 | obj[key] | provenance | Config |
|
||||
| tst.js:47:39:47:40 | ev | tst.js:48:27:48:28 | ev | provenance | |
|
||||
| tst.js:48:9:48:39 | name | tst.js:49:19:49:22 | name | provenance | |
|
||||
| tst.js:48:16:48:34 | JSON.parse(ev.data) | tst.js:48:16:48:39 | JSON.pa ... a).name | provenance | Config |
|
||||
| tst.js:48:16:48:39 | JSON.pa ... a).name | tst.js:48:9:48:39 | name | provenance | |
|
||||
| tst.js:48:27:48:28 | ev | tst.js:48:27:48:33 | ev.data | provenance | Config |
|
||||
| tst.js:48:27:48:33 | ev.data | tst.js:48:16:48:34 | JSON.parse(ev.data) | provenance | Config |
|
||||
| tst.js:49:9:49:23 | fn | tst.js:50:5:50:6 | fn | provenance | |
|
||||
| tst.js:49:14:49:23 | obj2[name] | tst.js:49:9:49:23 | fn | provenance | |
|
||||
| tst.js:49:19:49:22 | name | tst.js:49:14:49:23 | obj2[name] | provenance | Config |
|
||||
subpaths
|
||||
#select
|
||||
| UnsafeDynamicMethodAccess.js:15:5:15:21 | obj[message.name] | UnsafeDynamicMethodAccess.js:5:37:5:38 | ev | UnsafeDynamicMethodAccess.js:15:5:15:21 | obj[message.name] | Invocation of method with $@ name may dispatch to unexpected target and cause an exception. | UnsafeDynamicMethodAccess.js:5:37:5:38 | ev | user-controlled |
|
||||
|
||||
@@ -1,33 +1,33 @@
|
||||
edges
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay | documentaion-examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) | documentaion-examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) | documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay | documentaion-examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) |
|
||||
| resource-exhaustion.js:5:7:5:42 | s | resource-exhaustion.js:6:20:6:20 | s |
|
||||
| resource-exhaustion.js:5:7:5:42 | s | resource-exhaustion.js:35:12:35:12 | s |
|
||||
| resource-exhaustion.js:5:7:5:42 | s | resource-exhaustion.js:82:17:82:17 | s |
|
||||
| resource-exhaustion.js:5:7:5:42 | s | resource-exhaustion.js:84:18:84:18 | s |
|
||||
| resource-exhaustion.js:5:11:5:34 | url.par ... , true) | resource-exhaustion.js:5:7:5:42 | s |
|
||||
| resource-exhaustion.js:5:21:5:27 | req.url | resource-exhaustion.js:5:11:5:34 | url.par ... , true) |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:14:16:14:16 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:15:22:15:22 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:16:26:16:26 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:20:20:20:20 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:22:18:22:18 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:27:9:27:9 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:28:13:28:13 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:29:9:29:9 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:30:9:30:9 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:31:9:31:9 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:32:9:32:9 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:34:12:34:12 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:81:17:81:17 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:83:18:83:18 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:88:16:88:16 | n |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:92:18:92:18 | n |
|
||||
| resource-exhaustion.js:6:11:6:21 | parseInt(s) | resource-exhaustion.js:6:7:6:21 | n |
|
||||
| resource-exhaustion.js:6:20:6:20 | s | resource-exhaustion.js:6:11:6:21 | parseInt(s) |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay | documentaion-examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay | provenance | |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) | documentaion-examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay | provenance | |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) | documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay | provenance | |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay | documentaion-examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) | provenance | Config |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) | provenance | |
|
||||
| resource-exhaustion.js:5:7:5:42 | s | resource-exhaustion.js:6:20:6:20 | s | provenance | |
|
||||
| resource-exhaustion.js:5:7:5:42 | s | resource-exhaustion.js:35:12:35:12 | s | provenance | |
|
||||
| resource-exhaustion.js:5:7:5:42 | s | resource-exhaustion.js:82:17:82:17 | s | provenance | |
|
||||
| resource-exhaustion.js:5:7:5:42 | s | resource-exhaustion.js:84:18:84:18 | s | provenance | |
|
||||
| resource-exhaustion.js:5:11:5:34 | url.par ... , true) | resource-exhaustion.js:5:7:5:42 | s | provenance | |
|
||||
| resource-exhaustion.js:5:21:5:27 | req.url | resource-exhaustion.js:5:11:5:34 | url.par ... , true) | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:14:16:14:16 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:15:22:15:22 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:16:26:16:26 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:20:20:20:20 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:22:18:22:18 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:27:9:27:9 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:28:13:28:13 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:29:9:29:9 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:30:9:30:9 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:31:9:31:9 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:32:9:32:9 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:34:12:34:12 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:81:17:81:17 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:83:18:83:18 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:88:16:88:16 | n | provenance | |
|
||||
| resource-exhaustion.js:6:7:6:21 | n | resource-exhaustion.js:92:18:92:18 | n | provenance | |
|
||||
| resource-exhaustion.js:6:11:6:21 | parseInt(s) | resource-exhaustion.js:6:7:6:21 | n | provenance | |
|
||||
| resource-exhaustion.js:6:20:6:20 | s | resource-exhaustion.js:6:11:6:21 | parseInt(s) | provenance | Config |
|
||||
nodes
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay | semmle.label | delay |
|
||||
| documentaion-examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) | semmle.label | parseIn ... .delay) |
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
edges
|
||||
| closure.js:2:7:2:36 | src | closure.js:4:24:4:26 | src |
|
||||
| closure.js:2:13:2:36 | documen ... .search | closure.js:2:7:2:36 | src |
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:6:37:6:39 | src |
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:11:55:11:57 | src |
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:14:57:14:59 | src |
|
||||
| domparser.js:2:13:2:36 | documen ... .search | domparser.js:2:7:2:36 | src |
|
||||
| jquery.js:2:7:2:36 | src | jquery.js:5:14:5:16 | src |
|
||||
| jquery.js:2:13:2:36 | documen ... .search | jquery.js:2:7:2:36 | src |
|
||||
| closure.js:2:7:2:36 | src | closure.js:4:24:4:26 | src | provenance | |
|
||||
| closure.js:2:13:2:36 | documen ... .search | closure.js:2:7:2:36 | src | provenance | |
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:6:37:6:39 | src | provenance | |
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:11:55:11:57 | src | provenance | |
|
||||
| domparser.js:2:7:2:36 | src | domparser.js:14:57:14:59 | src | provenance | |
|
||||
| domparser.js:2:13:2:36 | documen ... .search | domparser.js:2:7:2:36 | src | provenance | |
|
||||
| jquery.js:2:7:2:36 | src | jquery.js:5:14:5:16 | src | provenance | |
|
||||
| jquery.js:2:13:2:36 | documen ... .search | jquery.js:2:7:2:36 | src | provenance | |
|
||||
nodes
|
||||
| closure.js:2:7:2:36 | src | semmle.label | src |
|
||||
| closure.js:2:13:2:36 | documen ... .search | semmle.label | documen ... .search |
|
||||
|
||||
@@ -1,19 +1,19 @@
|
||||
edges
|
||||
| example_bypass.js:6:9:6:19 | req.cookies | example_bypass.js:6:9:6:34 | req.coo ... nUserId |
|
||||
| tst.js:13:9:13:19 | req.cookies | tst.js:13:9:13:30 | req.coo ... inThing |
|
||||
| tst.js:24:17:24:17 | v | tst.js:25:16:25:16 | v |
|
||||
| tst.js:27:9:27:37 | v3 | tst.js:28:9:28:10 | v3 |
|
||||
| tst.js:27:14:27:37 | id(req. ... okieId) | tst.js:27:9:27:37 | v3 |
|
||||
| tst.js:27:17:27:27 | req.cookies | tst.js:27:17:27:36 | req.cookies.cookieId |
|
||||
| tst.js:27:17:27:36 | req.cookies.cookieId | tst.js:24:17:24:17 | v |
|
||||
| tst.js:27:17:27:36 | req.cookies.cookieId | tst.js:27:14:27:37 | id(req. ... okieId) |
|
||||
| tst.js:33:13:33:23 | req.cookies | tst.js:33:13:33:32 | req.cookies.cookieId |
|
||||
| tst.js:38:9:38:19 | req.cookies | tst.js:38:9:38:28 | req.cookies.cookieId |
|
||||
| tst.js:61:9:61:19 | req.cookies | tst.js:61:9:61:28 | req.cookies.cookieId |
|
||||
| tst.js:65:14:65:24 | req.cookies | tst.js:65:14:65:33 | req.cookies.cookieId |
|
||||
| tst.js:78:9:78:19 | req.cookies | tst.js:78:9:78:28 | req.cookies.cookieId |
|
||||
| tst.js:78:9:78:19 | req.cookies | tst.js:78:9:78:28 | req.cookies.cookieId |
|
||||
| tst.js:78:9:78:28 | req.cookies.cookieId | tst.js:78:9:78:41 | req.coo ... secret" |
|
||||
| example_bypass.js:6:9:6:19 | req.cookies | example_bypass.js:6:9:6:34 | req.coo ... nUserId | provenance | |
|
||||
| tst.js:13:9:13:19 | req.cookies | tst.js:13:9:13:30 | req.coo ... inThing | provenance | |
|
||||
| tst.js:24:17:24:17 | v | tst.js:25:16:25:16 | v | provenance | |
|
||||
| tst.js:27:9:27:37 | v3 | tst.js:28:9:28:10 | v3 | provenance | |
|
||||
| tst.js:27:14:27:37 | id(req. ... okieId) | tst.js:27:9:27:37 | v3 | provenance | |
|
||||
| tst.js:27:17:27:27 | req.cookies | tst.js:27:17:27:36 | req.cookies.cookieId | provenance | |
|
||||
| tst.js:27:17:27:36 | req.cookies.cookieId | tst.js:24:17:24:17 | v | provenance | |
|
||||
| tst.js:27:17:27:36 | req.cookies.cookieId | tst.js:27:14:27:37 | id(req. ... okieId) | provenance | |
|
||||
| tst.js:33:13:33:23 | req.cookies | tst.js:33:13:33:32 | req.cookies.cookieId | provenance | |
|
||||
| tst.js:38:9:38:19 | req.cookies | tst.js:38:9:38:28 | req.cookies.cookieId | provenance | |
|
||||
| tst.js:61:9:61:19 | req.cookies | tst.js:61:9:61:28 | req.cookies.cookieId | provenance | |
|
||||
| tst.js:65:14:65:24 | req.cookies | tst.js:65:14:65:33 | req.cookies.cookieId | provenance | |
|
||||
| tst.js:78:9:78:19 | req.cookies | tst.js:78:9:78:28 | req.cookies.cookieId | provenance | |
|
||||
| tst.js:78:9:78:19 | req.cookies | tst.js:78:9:78:28 | req.cookies.cookieId | provenance | |
|
||||
| tst.js:78:9:78:28 | req.cookies.cookieId | tst.js:78:9:78:41 | req.coo ... secret" | provenance | Config |
|
||||
nodes
|
||||
| example_bypass.js:6:9:6:19 | req.cookies | semmle.label | req.cookies |
|
||||
| example_bypass.js:6:9:6:34 | req.coo ... nUserId | semmle.label | req.coo ... nUserId |
|
||||
|
||||
@@ -1,22 +1,22 @@
|
||||
edges
|
||||
| LoopBoundInjectionBad.js:8:13:8:20 | req.body | LoopBoundInjectionBad.js:17:18:17:20 | val |
|
||||
| LoopBoundInjectionBad.js:10:15:10:22 | req.body | LoopBoundInjectionBad.js:25:20:25:22 | val |
|
||||
| LoopBoundInjectionBad.js:12:25:12:32 | req.body | LoopBoundInjectionBad.js:35:30:35:32 | val |
|
||||
| LoopBoundInjectionBad.js:14:19:14:26 | req.body | LoopBoundInjectionBad.js:46:24:46:26 | val |
|
||||
| LoopBoundInjectionBad.js:17:18:17:20 | val | LoopBoundInjectionBad.js:20:25:20:27 | val |
|
||||
| LoopBoundInjectionBad.js:25:20:25:22 | val | LoopBoundInjectionBad.js:29:16:29:18 | val |
|
||||
| LoopBoundInjectionBad.js:35:30:35:32 | val | LoopBoundInjectionBad.js:38:15:38:17 | val |
|
||||
| LoopBoundInjectionBad.js:46:24:46:26 | val | LoopBoundInjectionBad.js:51:25:51:27 | val |
|
||||
| LoopBoundInjectionExitBad.js:8:9:8:16 | req.body | LoopBoundInjectionExitBad.js:17:17:17:19 | val |
|
||||
| LoopBoundInjectionExitBad.js:10:9:10:16 | req.body | LoopBoundInjectionExitBad.js:31:17:31:19 | val |
|
||||
| LoopBoundInjectionExitBad.js:12:10:12:17 | req.body | LoopBoundInjectionExitBad.js:46:18:46:20 | val |
|
||||
| LoopBoundInjectionExitBad.js:14:14:14:21 | req.body | LoopBoundInjectionExitBad.js:59:22:59:24 | val |
|
||||
| LoopBoundInjectionExitBad.js:17:17:17:19 | val | LoopBoundInjectionExitBad.js:20:22:20:24 | val |
|
||||
| LoopBoundInjectionExitBad.js:31:17:31:19 | val | LoopBoundInjectionExitBad.js:34:22:34:24 | val |
|
||||
| LoopBoundInjectionExitBad.js:46:18:46:20 | val | LoopBoundInjectionExitBad.js:49:22:49:24 | val |
|
||||
| LoopBoundInjectionExitBad.js:59:22:59:24 | val | LoopBoundInjectionExitBad.js:60:8:60:10 | val |
|
||||
| LoopBoundInjectionLodash.js:9:13:9:20 | req.body | LoopBoundInjectionLodash.js:12:18:12:20 | val |
|
||||
| LoopBoundInjectionLodash.js:12:18:12:20 | val | LoopBoundInjectionLodash.js:13:13:13:15 | val |
|
||||
| LoopBoundInjectionBad.js:8:13:8:20 | req.body | LoopBoundInjectionBad.js:17:18:17:20 | val | provenance | |
|
||||
| LoopBoundInjectionBad.js:10:15:10:22 | req.body | LoopBoundInjectionBad.js:25:20:25:22 | val | provenance | |
|
||||
| LoopBoundInjectionBad.js:12:25:12:32 | req.body | LoopBoundInjectionBad.js:35:30:35:32 | val | provenance | |
|
||||
| LoopBoundInjectionBad.js:14:19:14:26 | req.body | LoopBoundInjectionBad.js:46:24:46:26 | val | provenance | |
|
||||
| LoopBoundInjectionBad.js:17:18:17:20 | val | LoopBoundInjectionBad.js:20:25:20:27 | val | provenance | |
|
||||
| LoopBoundInjectionBad.js:25:20:25:22 | val | LoopBoundInjectionBad.js:29:16:29:18 | val | provenance | |
|
||||
| LoopBoundInjectionBad.js:35:30:35:32 | val | LoopBoundInjectionBad.js:38:15:38:17 | val | provenance | |
|
||||
| LoopBoundInjectionBad.js:46:24:46:26 | val | LoopBoundInjectionBad.js:51:25:51:27 | val | provenance | |
|
||||
| LoopBoundInjectionExitBad.js:8:9:8:16 | req.body | LoopBoundInjectionExitBad.js:17:17:17:19 | val | provenance | |
|
||||
| LoopBoundInjectionExitBad.js:10:9:10:16 | req.body | LoopBoundInjectionExitBad.js:31:17:31:19 | val | provenance | |
|
||||
| LoopBoundInjectionExitBad.js:12:10:12:17 | req.body | LoopBoundInjectionExitBad.js:46:18:46:20 | val | provenance | |
|
||||
| LoopBoundInjectionExitBad.js:14:14:14:21 | req.body | LoopBoundInjectionExitBad.js:59:22:59:24 | val | provenance | |
|
||||
| LoopBoundInjectionExitBad.js:17:17:17:19 | val | LoopBoundInjectionExitBad.js:20:22:20:24 | val | provenance | |
|
||||
| LoopBoundInjectionExitBad.js:31:17:31:19 | val | LoopBoundInjectionExitBad.js:34:22:34:24 | val | provenance | |
|
||||
| LoopBoundInjectionExitBad.js:46:18:46:20 | val | LoopBoundInjectionExitBad.js:49:22:49:24 | val | provenance | |
|
||||
| LoopBoundInjectionExitBad.js:59:22:59:24 | val | LoopBoundInjectionExitBad.js:60:8:60:10 | val | provenance | |
|
||||
| LoopBoundInjectionLodash.js:9:13:9:20 | req.body | LoopBoundInjectionLodash.js:12:18:12:20 | val | provenance | |
|
||||
| LoopBoundInjectionLodash.js:12:18:12:20 | val | LoopBoundInjectionLodash.js:13:13:13:15 | val | provenance | |
|
||||
nodes
|
||||
| LoopBoundInjectionBad.js:8:13:8:20 | req.body | semmle.label | req.body |
|
||||
| LoopBoundInjectionBad.js:10:15:10:22 | req.body | semmle.label | req.body |
|
||||
|
||||
@@ -1,41 +1,41 @@
|
||||
edges
|
||||
| tst.js:5:9:5:27 | foo | tst.js:6:5:6:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:6:5:6:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:8:5:8:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:8:5:8:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:17:7:17:9 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:21:5:21:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:22:5:22:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:23:5:23:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:25:5:25:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:27:5:27:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:27:5:27:7 | foo |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:28:5:28:7 | foo |
|
||||
| tst.js:5:15:5:27 | req.query.foo | tst.js:5:9:5:27 | foo |
|
||||
| tst.js:6:5:6:7 | foo | tst.js:8:5:8:7 | foo |
|
||||
| tst.js:6:5:6:7 | foo | tst.js:8:5:8:7 | foo |
|
||||
| tst.js:8:5:8:7 | foo | tst.js:10:5:12:5 | functio ... K\\n } [foo] |
|
||||
| tst.js:8:5:8:7 | foo | tst.js:17:7:17:9 | foo |
|
||||
| tst.js:10:5:12:5 | functio ... K\\n } [foo] | tst.js:10:14:10:14 | f [foo] |
|
||||
| tst.js:10:5:12:5 | functio ... K\\n } [foo] | tst.js:11:9:11:11 | foo |
|
||||
| tst.js:10:14:10:14 | f [foo] | tst.js:39:12:39:12 | f [foo] |
|
||||
| tst.js:14:16:14:18 | bar | tst.js:15:9:15:11 | bar |
|
||||
| tst.js:17:7:17:9 | foo | tst.js:14:16:14:18 | bar |
|
||||
| tst.js:17:7:17:9 | foo | tst.js:21:5:21:7 | foo |
|
||||
| tst.js:21:5:21:7 | foo | tst.js:22:5:22:7 | foo |
|
||||
| tst.js:22:5:22:7 | foo | tst.js:23:5:23:7 | foo |
|
||||
| tst.js:23:5:23:7 | foo | tst.js:25:5:25:7 | foo |
|
||||
| tst.js:25:5:25:7 | foo | tst.js:27:5:27:7 | foo |
|
||||
| tst.js:25:5:25:7 | foo | tst.js:27:5:27:7 | foo |
|
||||
| tst.js:27:5:27:7 | foo | tst.js:28:5:28:7 | foo |
|
||||
| tst.js:39:12:39:12 | f [foo] | tst.js:11:9:11:11 | foo |
|
||||
| tst.js:45:9:45:35 | foo | tst.js:46:5:46:7 | foo |
|
||||
| tst.js:45:15:45:35 | ctx.req ... ery.foo | tst.js:45:9:45:35 | foo |
|
||||
| tst.js:77:25:77:38 | req.query.path | tst.js:80:23:80:23 | p |
|
||||
| tst.js:80:23:80:23 | p | tst.js:81:9:81:9 | p |
|
||||
| tst.js:80:23:80:23 | p | tst.js:82:9:82:9 | p |
|
||||
| tst.js:103:9:103:29 | data | tst.js:104:5:104:8 | data |
|
||||
| tst.js:103:16:103:29 | req.query.data | tst.js:103:9:103:29 | data |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:6:5:6:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:6:5:6:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:8:5:8:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:8:5:8:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:17:7:17:9 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:21:5:21:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:22:5:22:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:23:5:23:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:25:5:25:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:27:5:27:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:27:5:27:7 | foo | provenance | |
|
||||
| tst.js:5:9:5:27 | foo | tst.js:28:5:28:7 | foo | provenance | |
|
||||
| tst.js:5:15:5:27 | req.query.foo | tst.js:5:9:5:27 | foo | provenance | |
|
||||
| tst.js:6:5:6:7 | foo | tst.js:8:5:8:7 | foo | provenance | |
|
||||
| tst.js:6:5:6:7 | foo | tst.js:8:5:8:7 | foo | provenance | |
|
||||
| tst.js:8:5:8:7 | foo | tst.js:10:5:12:5 | functio ... K\\n } [foo] | provenance | |
|
||||
| tst.js:8:5:8:7 | foo | tst.js:17:7:17:9 | foo | provenance | |
|
||||
| tst.js:10:5:12:5 | functio ... K\\n } [foo] | tst.js:10:14:10:14 | f [foo] | provenance | |
|
||||
| tst.js:10:5:12:5 | functio ... K\\n } [foo] | tst.js:11:9:11:11 | foo | provenance | |
|
||||
| tst.js:10:14:10:14 | f [foo] | tst.js:39:12:39:12 | f [foo] | provenance | |
|
||||
| tst.js:14:16:14:18 | bar | tst.js:15:9:15:11 | bar | provenance | |
|
||||
| tst.js:17:7:17:9 | foo | tst.js:14:16:14:18 | bar | provenance | |
|
||||
| tst.js:17:7:17:9 | foo | tst.js:21:5:21:7 | foo | provenance | |
|
||||
| tst.js:21:5:21:7 | foo | tst.js:22:5:22:7 | foo | provenance | |
|
||||
| tst.js:22:5:22:7 | foo | tst.js:23:5:23:7 | foo | provenance | |
|
||||
| tst.js:23:5:23:7 | foo | tst.js:25:5:25:7 | foo | provenance | |
|
||||
| tst.js:25:5:25:7 | foo | tst.js:27:5:27:7 | foo | provenance | |
|
||||
| tst.js:25:5:25:7 | foo | tst.js:27:5:27:7 | foo | provenance | |
|
||||
| tst.js:27:5:27:7 | foo | tst.js:28:5:28:7 | foo | provenance | |
|
||||
| tst.js:39:12:39:12 | f [foo] | tst.js:11:9:11:11 | foo | provenance | |
|
||||
| tst.js:45:9:45:35 | foo | tst.js:46:5:46:7 | foo | provenance | |
|
||||
| tst.js:45:15:45:35 | ctx.req ... ery.foo | tst.js:45:9:45:35 | foo | provenance | |
|
||||
| tst.js:77:25:77:38 | req.query.path | tst.js:80:23:80:23 | p | provenance | |
|
||||
| tst.js:80:23:80:23 | p | tst.js:81:9:81:9 | p | provenance | |
|
||||
| tst.js:80:23:80:23 | p | tst.js:82:9:82:9 | p | provenance | |
|
||||
| tst.js:103:9:103:29 | data | tst.js:104:5:104:8 | data | provenance | |
|
||||
| tst.js:103:16:103:29 | req.query.data | tst.js:103:9:103:29 | data | provenance | |
|
||||
nodes
|
||||
| tst.js:5:9:5:27 | foo | semmle.label | foo |
|
||||
| tst.js:5:15:5:27 | req.query.foo | semmle.label | req.query.foo |
|
||||
|
||||
@@ -1,12 +1,12 @@
|
||||
edges
|
||||
| HttpToFileAccess.js:5:18:5:18 | d | HttpToFileAccess.js:6:37:6:37 | d |
|
||||
| tst.js:15:26:15:26 | c | tst.js:16:33:16:33 | c |
|
||||
| tst.js:15:26:15:26 | c | tst.js:16:33:16:33 | c |
|
||||
| tst.js:15:26:15:26 | c | tst.js:19:25:19:25 | c |
|
||||
| tst.js:15:26:15:26 | c | tst.js:19:25:19:25 | c |
|
||||
| tst.js:16:33:16:33 | c | tst.js:19:25:19:25 | c |
|
||||
| tst.js:16:33:16:33 | c | tst.js:19:25:19:25 | c |
|
||||
| tst.js:19:25:19:25 | c | tst.js:24:22:24:22 | c |
|
||||
| HttpToFileAccess.js:5:18:5:18 | d | HttpToFileAccess.js:6:37:6:37 | d | provenance | |
|
||||
| tst.js:15:26:15:26 | c | tst.js:16:33:16:33 | c | provenance | |
|
||||
| tst.js:15:26:15:26 | c | tst.js:16:33:16:33 | c | provenance | |
|
||||
| tst.js:15:26:15:26 | c | tst.js:19:25:19:25 | c | provenance | |
|
||||
| tst.js:15:26:15:26 | c | tst.js:19:25:19:25 | c | provenance | |
|
||||
| tst.js:16:33:16:33 | c | tst.js:19:25:19:25 | c | provenance | |
|
||||
| tst.js:16:33:16:33 | c | tst.js:19:25:19:25 | c | provenance | |
|
||||
| tst.js:19:25:19:25 | c | tst.js:24:22:24:22 | c | provenance | |
|
||||
nodes
|
||||
| HttpToFileAccess.js:5:18:5:18 | d | semmle.label | d |
|
||||
| HttpToFileAccess.js:6:37:6:37 | d | semmle.label | d |
|
||||
|
||||
@@ -1,106 +1,106 @@
|
||||
edges
|
||||
| lib.js:1:38:1:40 | obj | lib.js:6:7:6:9 | obj |
|
||||
| lib.js:1:43:1:46 | path | lib.js:2:21:2:24 | path |
|
||||
| lib.js:2:7:2:27 | currentPath | lib.js:11:21:11:31 | currentPath |
|
||||
| lib.js:2:21:2:24 | path | lib.js:2:21:2:27 | path[0] |
|
||||
| lib.js:2:21:2:27 | path[0] | lib.js:2:7:2:27 | currentPath |
|
||||
| lib.js:11:17:11:32 | obj[currentPath] | lib.js:1:38:1:40 | obj |
|
||||
| lib.js:11:21:11:31 | currentPath | lib.js:11:17:11:32 | obj[currentPath] |
|
||||
| lib.js:14:38:14:41 | path | lib.js:15:7:15:10 | path |
|
||||
| lib.js:15:7:15:10 | path | lib.js:15:7:15:13 | path[0] |
|
||||
| lib.js:15:7:15:13 | path[0] | lib.js:15:3:15:14 | obj[path[0]] |
|
||||
| lib.js:20:7:20:25 | path | lib.js:22:7:22:10 | path |
|
||||
| lib.js:20:14:20:22 | arguments | lib.js:20:14:20:25 | arguments[1] |
|
||||
| lib.js:20:14:20:25 | arguments[1] | lib.js:20:7:20:25 | path |
|
||||
| lib.js:22:7:22:10 | path | lib.js:22:7:22:13 | path[0] |
|
||||
| lib.js:22:7:22:13 | path[0] | lib.js:22:3:22:14 | obj[path[0]] |
|
||||
| lib.js:25:44:25:47 | path | lib.js:26:14:26:17 | path |
|
||||
| lib.js:26:14:26:17 | path | lib.js:26:14:26:20 | path[0] |
|
||||
| lib.js:26:14:26:20 | path[0] | lib.js:26:10:26:21 | obj[path[0]] |
|
||||
| lib.js:30:9:30:52 | args | lib.js:32:14:32:17 | args |
|
||||
| lib.js:30:16:30:52 | Array.p ... uments) | lib.js:30:9:30:52 | args |
|
||||
| lib.js:30:16:30:52 | reflective call | lib.js:30:16:30:52 | Array.p ... uments) |
|
||||
| lib.js:30:43:30:51 | arguments | lib.js:30:16:30:52 | reflective call |
|
||||
| lib.js:32:7:32:20 | path | lib.js:34:7:34:10 | path |
|
||||
| lib.js:32:14:32:17 | args | lib.js:32:14:32:20 | args[1] |
|
||||
| lib.js:32:14:32:20 | args[1] | lib.js:32:7:32:20 | path |
|
||||
| lib.js:34:7:34:10 | path | lib.js:34:7:34:13 | path[0] |
|
||||
| lib.js:34:7:34:13 | path[0] | lib.js:34:3:34:14 | obj[path[0]] |
|
||||
| lib.js:38:9:38:36 | args | lib.js:40:14:40:17 | args |
|
||||
| lib.js:38:16:38:36 | Array.f ... uments) | lib.js:38:9:38:36 | args |
|
||||
| lib.js:38:27:38:35 | arguments | lib.js:38:16:38:36 | Array.f ... uments) |
|
||||
| lib.js:40:7:40:20 | path | lib.js:42:7:42:10 | path |
|
||||
| lib.js:40:14:40:17 | args | lib.js:40:14:40:20 | args[1] |
|
||||
| lib.js:40:14:40:20 | args[1] | lib.js:40:7:40:20 | path |
|
||||
| lib.js:42:7:42:10 | path | lib.js:42:7:42:13 | path[0] |
|
||||
| lib.js:42:7:42:13 | path[0] | lib.js:42:3:42:14 | obj[path[0]] |
|
||||
| lib.js:83:7:83:25 | path | lib.js:86:19:86:22 | path |
|
||||
| lib.js:83:14:83:22 | arguments | lib.js:83:14:83:25 | arguments[1] |
|
||||
| lib.js:83:14:83:25 | arguments[1] | lib.js:83:7:83:25 | path |
|
||||
| lib.js:86:7:86:26 | proto | lib.js:87:10:87:14 | proto |
|
||||
| lib.js:86:15:86:26 | obj[path[0]] | lib.js:86:7:86:26 | proto |
|
||||
| lib.js:86:19:86:22 | path | lib.js:86:19:86:25 | path[0] |
|
||||
| lib.js:86:19:86:25 | path[0] | lib.js:86:15:86:26 | obj[path[0]] |
|
||||
| lib.js:90:43:90:46 | path | lib.js:91:24:91:27 | path |
|
||||
| lib.js:91:7:91:28 | maybeProto | lib.js:92:3:92:12 | maybeProto |
|
||||
| lib.js:91:7:91:28 | maybeProto | lib.js:95:3:95:12 | maybeProto |
|
||||
| lib.js:91:20:91:28 | obj[path] | lib.js:91:7:91:28 | maybeProto |
|
||||
| lib.js:91:24:91:27 | path | lib.js:91:20:91:28 | obj[path] |
|
||||
| lib.js:104:7:104:24 | one | lib.js:108:7:108:9 | one |
|
||||
| lib.js:104:13:104:21 | arguments | lib.js:104:13:104:24 | arguments[1] |
|
||||
| lib.js:104:13:104:24 | arguments[1] | lib.js:104:7:104:24 | one |
|
||||
| lib.js:108:7:108:9 | one | lib.js:108:3:108:10 | obj[one] |
|
||||
| lib.js:118:29:118:32 | path | lib.js:119:17:119:20 | path |
|
||||
| lib.js:119:17:119:20 | path | lib.js:119:17:119:23 | path[0] |
|
||||
| lib.js:119:17:119:23 | path[0] | lib.js:119:13:119:24 | obj[path[0]] |
|
||||
| lib.js:127:14:127:17 | path | lib.js:128:13:128:16 | path |
|
||||
| lib.js:128:13:128:16 | path | lib.js:128:13:128:19 | path[0] |
|
||||
| lib.js:128:13:128:19 | path[0] | lib.js:128:9:128:20 | obj[path[0]] |
|
||||
| otherlib/src/otherlibimpl.js:1:37:1:40 | path | otherlib/src/otherlibimpl.js:2:7:2:10 | path |
|
||||
| otherlib/src/otherlibimpl.js:2:7:2:10 | path | otherlib/src/otherlibimpl.js:2:7:2:13 | path[0] |
|
||||
| otherlib/src/otherlibimpl.js:2:7:2:13 | path[0] | otherlib/src/otherlibimpl.js:2:3:2:14 | obj[path[0]] |
|
||||
| sublib/other.js:5:28:5:31 | path | sublib/other.js:6:11:6:14 | path |
|
||||
| sublib/other.js:6:11:6:14 | path | sublib/other.js:6:11:6:17 | path[0] |
|
||||
| sublib/other.js:6:11:6:17 | path[0] | sublib/other.js:6:7:6:18 | obj[path[0]] |
|
||||
| sublib/sub.js:1:37:1:40 | path | sublib/sub.js:2:7:2:10 | path |
|
||||
| sublib/sub.js:2:7:2:10 | path | sublib/sub.js:2:7:2:13 | path[0] |
|
||||
| sublib/sub.js:2:7:2:13 | path[0] | sublib/sub.js:2:3:2:14 | obj[path[0]] |
|
||||
| tst.js:5:9:5:38 | taint | tst.js:8:12:8:16 | taint |
|
||||
| tst.js:5:9:5:38 | taint | tst.js:9:12:9:16 | taint |
|
||||
| tst.js:5:9:5:38 | taint | tst.js:12:25:12:29 | taint |
|
||||
| tst.js:5:9:5:38 | taint | tst.js:14:27:14:31 | taint |
|
||||
| tst.js:5:17:5:38 | String( ... y.data) | tst.js:5:9:5:38 | taint |
|
||||
| tst.js:5:24:5:37 | req.query.data | tst.js:5:17:5:38 | String( ... y.data) |
|
||||
| tst.js:8:12:8:16 | taint | tst.js:8:5:8:17 | object[taint] |
|
||||
| tst.js:9:12:9:16 | taint | tst.js:9:5:9:17 | object[taint] |
|
||||
| tst.js:12:18:12:30 | object[taint] | tst.js:33:23:33:25 | obj |
|
||||
| tst.js:12:25:12:29 | taint | tst.js:12:18:12:30 | object[taint] |
|
||||
| tst.js:14:27:14:31 | taint | tst.js:14:5:14:32 | unsafeG ... taint) |
|
||||
| tst.js:14:27:14:31 | taint | tst.js:55:29:55:32 | prop |
|
||||
| tst.js:33:23:33:25 | obj | tst.js:34:5:34:7 | obj |
|
||||
| tst.js:33:23:33:25 | obj | tst.js:39:9:39:11 | obj |
|
||||
| tst.js:33:23:33:25 | obj | tst.js:45:9:45:11 | obj |
|
||||
| tst.js:33:23:33:25 | obj | tst.js:48:9:48:11 | obj |
|
||||
| tst.js:55:29:55:32 | prop | tst.js:56:22:56:25 | prop |
|
||||
| tst.js:56:18:56:26 | obj[prop] | tst.js:56:12:56:33 | obj ? o ... : null |
|
||||
| tst.js:56:22:56:25 | prop | tst.js:56:18:56:26 | obj[prop] |
|
||||
| tst.js:77:9:77:38 | taint | tst.js:80:12:80:16 | taint |
|
||||
| tst.js:77:9:77:38 | taint | tst.js:82:17:82:21 | taint |
|
||||
| tst.js:77:9:77:38 | taint | tst.js:87:16:87:20 | taint |
|
||||
| tst.js:77:17:77:38 | String( ... y.data) | tst.js:77:9:77:38 | taint |
|
||||
| tst.js:77:24:77:37 | req.query.data | tst.js:77:17:77:38 | String( ... y.data) |
|
||||
| tst.js:80:12:80:16 | taint | tst.js:80:5:80:17 | object[taint] |
|
||||
| tst.js:82:12:82:21 | "" + taint | tst.js:82:5:82:22 | object["" + taint] |
|
||||
| tst.js:82:17:82:21 | taint | tst.js:82:12:82:21 | "" + taint |
|
||||
| tst.js:87:16:87:20 | taint | tst.js:87:9:87:21 | object[taint] |
|
||||
| tst.js:94:9:94:19 | req.query.x | tst.js:94:9:94:36 | req.que ... _', '') |
|
||||
| tst.js:94:9:94:36 | req.que ... _', '') | tst.js:94:5:94:37 | obj[req ... ', '')] |
|
||||
| tst.js:97:9:97:19 | req.query.x | tst.js:97:9:97:45 | req.que ... /g, '') |
|
||||
| tst.js:97:9:97:45 | req.que ... /g, '') | tst.js:97:5:97:46 | obj[req ... g, '')] |
|
||||
| tst.js:102:9:102:38 | taint | tst.js:105:12:105:16 | taint |
|
||||
| tst.js:102:17:102:38 | String( ... y.data) | tst.js:102:9:102:38 | taint |
|
||||
| tst.js:102:24:102:37 | req.query.data | tst.js:102:17:102:38 | String( ... y.data) |
|
||||
| tst.js:105:12:105:16 | taint | tst.js:105:5:105:17 | object[taint] |
|
||||
| lib.js:1:38:1:40 | obj | lib.js:6:7:6:9 | obj | provenance | |
|
||||
| lib.js:1:43:1:46 | path | lib.js:2:21:2:24 | path | provenance | |
|
||||
| lib.js:2:7:2:27 | currentPath | lib.js:11:21:11:31 | currentPath | provenance | |
|
||||
| lib.js:2:21:2:24 | path | lib.js:2:21:2:27 | path[0] | provenance | Config |
|
||||
| lib.js:2:21:2:27 | path[0] | lib.js:2:7:2:27 | currentPath | provenance | |
|
||||
| lib.js:11:17:11:32 | obj[currentPath] | lib.js:1:38:1:40 | obj | provenance | |
|
||||
| lib.js:11:21:11:31 | currentPath | lib.js:11:17:11:32 | obj[currentPath] | provenance | Config |
|
||||
| lib.js:14:38:14:41 | path | lib.js:15:7:15:10 | path | provenance | |
|
||||
| lib.js:15:7:15:10 | path | lib.js:15:7:15:13 | path[0] | provenance | Config |
|
||||
| lib.js:15:7:15:13 | path[0] | lib.js:15:3:15:14 | obj[path[0]] | provenance | Config |
|
||||
| lib.js:20:7:20:25 | path | lib.js:22:7:22:10 | path | provenance | |
|
||||
| lib.js:20:14:20:22 | arguments | lib.js:20:14:20:25 | arguments[1] | provenance | Config |
|
||||
| lib.js:20:14:20:25 | arguments[1] | lib.js:20:7:20:25 | path | provenance | |
|
||||
| lib.js:22:7:22:10 | path | lib.js:22:7:22:13 | path[0] | provenance | Config |
|
||||
| lib.js:22:7:22:13 | path[0] | lib.js:22:3:22:14 | obj[path[0]] | provenance | Config |
|
||||
| lib.js:25:44:25:47 | path | lib.js:26:14:26:17 | path | provenance | |
|
||||
| lib.js:26:14:26:17 | path | lib.js:26:14:26:20 | path[0] | provenance | Config |
|
||||
| lib.js:26:14:26:20 | path[0] | lib.js:26:10:26:21 | obj[path[0]] | provenance | Config |
|
||||
| lib.js:30:9:30:52 | args | lib.js:32:14:32:17 | args | provenance | |
|
||||
| lib.js:30:16:30:52 | Array.p ... uments) | lib.js:30:9:30:52 | args | provenance | |
|
||||
| lib.js:30:16:30:52 | reflective call | lib.js:30:16:30:52 | Array.p ... uments) | provenance | |
|
||||
| lib.js:30:43:30:51 | arguments | lib.js:30:16:30:52 | reflective call | provenance | Config |
|
||||
| lib.js:32:7:32:20 | path | lib.js:34:7:34:10 | path | provenance | |
|
||||
| lib.js:32:14:32:17 | args | lib.js:32:14:32:20 | args[1] | provenance | Config |
|
||||
| lib.js:32:14:32:20 | args[1] | lib.js:32:7:32:20 | path | provenance | |
|
||||
| lib.js:34:7:34:10 | path | lib.js:34:7:34:13 | path[0] | provenance | Config |
|
||||
| lib.js:34:7:34:13 | path[0] | lib.js:34:3:34:14 | obj[path[0]] | provenance | Config |
|
||||
| lib.js:38:9:38:36 | args | lib.js:40:14:40:17 | args | provenance | |
|
||||
| lib.js:38:16:38:36 | Array.f ... uments) | lib.js:38:9:38:36 | args | provenance | |
|
||||
| lib.js:38:27:38:35 | arguments | lib.js:38:16:38:36 | Array.f ... uments) | provenance | Config |
|
||||
| lib.js:40:7:40:20 | path | lib.js:42:7:42:10 | path | provenance | |
|
||||
| lib.js:40:14:40:17 | args | lib.js:40:14:40:20 | args[1] | provenance | Config |
|
||||
| lib.js:40:14:40:20 | args[1] | lib.js:40:7:40:20 | path | provenance | |
|
||||
| lib.js:42:7:42:10 | path | lib.js:42:7:42:13 | path[0] | provenance | Config |
|
||||
| lib.js:42:7:42:13 | path[0] | lib.js:42:3:42:14 | obj[path[0]] | provenance | Config |
|
||||
| lib.js:83:7:83:25 | path | lib.js:86:19:86:22 | path | provenance | |
|
||||
| lib.js:83:14:83:22 | arguments | lib.js:83:14:83:25 | arguments[1] | provenance | Config |
|
||||
| lib.js:83:14:83:25 | arguments[1] | lib.js:83:7:83:25 | path | provenance | |
|
||||
| lib.js:86:7:86:26 | proto | lib.js:87:10:87:14 | proto | provenance | |
|
||||
| lib.js:86:15:86:26 | obj[path[0]] | lib.js:86:7:86:26 | proto | provenance | |
|
||||
| lib.js:86:19:86:22 | path | lib.js:86:19:86:25 | path[0] | provenance | Config |
|
||||
| lib.js:86:19:86:25 | path[0] | lib.js:86:15:86:26 | obj[path[0]] | provenance | Config |
|
||||
| lib.js:90:43:90:46 | path | lib.js:91:24:91:27 | path | provenance | |
|
||||
| lib.js:91:7:91:28 | maybeProto | lib.js:92:3:92:12 | maybeProto | provenance | |
|
||||
| lib.js:91:7:91:28 | maybeProto | lib.js:95:3:95:12 | maybeProto | provenance | |
|
||||
| lib.js:91:20:91:28 | obj[path] | lib.js:91:7:91:28 | maybeProto | provenance | |
|
||||
| lib.js:91:24:91:27 | path | lib.js:91:20:91:28 | obj[path] | provenance | Config |
|
||||
| lib.js:104:7:104:24 | one | lib.js:108:7:108:9 | one | provenance | |
|
||||
| lib.js:104:13:104:21 | arguments | lib.js:104:13:104:24 | arguments[1] | provenance | Config |
|
||||
| lib.js:104:13:104:24 | arguments[1] | lib.js:104:7:104:24 | one | provenance | |
|
||||
| lib.js:108:7:108:9 | one | lib.js:108:3:108:10 | obj[one] | provenance | Config |
|
||||
| lib.js:118:29:118:32 | path | lib.js:119:17:119:20 | path | provenance | |
|
||||
| lib.js:119:17:119:20 | path | lib.js:119:17:119:23 | path[0] | provenance | Config |
|
||||
| lib.js:119:17:119:23 | path[0] | lib.js:119:13:119:24 | obj[path[0]] | provenance | Config |
|
||||
| lib.js:127:14:127:17 | path | lib.js:128:13:128:16 | path | provenance | |
|
||||
| lib.js:128:13:128:16 | path | lib.js:128:13:128:19 | path[0] | provenance | Config |
|
||||
| lib.js:128:13:128:19 | path[0] | lib.js:128:9:128:20 | obj[path[0]] | provenance | Config |
|
||||
| otherlib/src/otherlibimpl.js:1:37:1:40 | path | otherlib/src/otherlibimpl.js:2:7:2:10 | path | provenance | |
|
||||
| otherlib/src/otherlibimpl.js:2:7:2:10 | path | otherlib/src/otherlibimpl.js:2:7:2:13 | path[0] | provenance | Config |
|
||||
| otherlib/src/otherlibimpl.js:2:7:2:13 | path[0] | otherlib/src/otherlibimpl.js:2:3:2:14 | obj[path[0]] | provenance | Config |
|
||||
| sublib/other.js:5:28:5:31 | path | sublib/other.js:6:11:6:14 | path | provenance | |
|
||||
| sublib/other.js:6:11:6:14 | path | sublib/other.js:6:11:6:17 | path[0] | provenance | Config |
|
||||
| sublib/other.js:6:11:6:17 | path[0] | sublib/other.js:6:7:6:18 | obj[path[0]] | provenance | Config |
|
||||
| sublib/sub.js:1:37:1:40 | path | sublib/sub.js:2:7:2:10 | path | provenance | |
|
||||
| sublib/sub.js:2:7:2:10 | path | sublib/sub.js:2:7:2:13 | path[0] | provenance | Config |
|
||||
| sublib/sub.js:2:7:2:13 | path[0] | sublib/sub.js:2:3:2:14 | obj[path[0]] | provenance | Config |
|
||||
| tst.js:5:9:5:38 | taint | tst.js:8:12:8:16 | taint | provenance | |
|
||||
| tst.js:5:9:5:38 | taint | tst.js:9:12:9:16 | taint | provenance | |
|
||||
| tst.js:5:9:5:38 | taint | tst.js:12:25:12:29 | taint | provenance | |
|
||||
| tst.js:5:9:5:38 | taint | tst.js:14:27:14:31 | taint | provenance | |
|
||||
| tst.js:5:17:5:38 | String( ... y.data) | tst.js:5:9:5:38 | taint | provenance | |
|
||||
| tst.js:5:24:5:37 | req.query.data | tst.js:5:17:5:38 | String( ... y.data) | provenance | Config |
|
||||
| tst.js:8:12:8:16 | taint | tst.js:8:5:8:17 | object[taint] | provenance | Config |
|
||||
| tst.js:9:12:9:16 | taint | tst.js:9:5:9:17 | object[taint] | provenance | Config |
|
||||
| tst.js:12:18:12:30 | object[taint] | tst.js:33:23:33:25 | obj | provenance | |
|
||||
| tst.js:12:25:12:29 | taint | tst.js:12:18:12:30 | object[taint] | provenance | Config |
|
||||
| tst.js:14:27:14:31 | taint | tst.js:14:5:14:32 | unsafeG ... taint) | provenance | Config |
|
||||
| tst.js:14:27:14:31 | taint | tst.js:55:29:55:32 | prop | provenance | |
|
||||
| tst.js:33:23:33:25 | obj | tst.js:34:5:34:7 | obj | provenance | |
|
||||
| tst.js:33:23:33:25 | obj | tst.js:39:9:39:11 | obj | provenance | |
|
||||
| tst.js:33:23:33:25 | obj | tst.js:45:9:45:11 | obj | provenance | |
|
||||
| tst.js:33:23:33:25 | obj | tst.js:48:9:48:11 | obj | provenance | |
|
||||
| tst.js:55:29:55:32 | prop | tst.js:56:22:56:25 | prop | provenance | |
|
||||
| tst.js:56:18:56:26 | obj[prop] | tst.js:56:12:56:33 | obj ? o ... : null | provenance | |
|
||||
| tst.js:56:22:56:25 | prop | tst.js:56:18:56:26 | obj[prop] | provenance | Config |
|
||||
| tst.js:77:9:77:38 | taint | tst.js:80:12:80:16 | taint | provenance | |
|
||||
| tst.js:77:9:77:38 | taint | tst.js:82:17:82:21 | taint | provenance | |
|
||||
| tst.js:77:9:77:38 | taint | tst.js:87:16:87:20 | taint | provenance | |
|
||||
| tst.js:77:17:77:38 | String( ... y.data) | tst.js:77:9:77:38 | taint | provenance | |
|
||||
| tst.js:77:24:77:37 | req.query.data | tst.js:77:17:77:38 | String( ... y.data) | provenance | Config |
|
||||
| tst.js:80:12:80:16 | taint | tst.js:80:5:80:17 | object[taint] | provenance | Config |
|
||||
| tst.js:82:12:82:21 | "" + taint | tst.js:82:5:82:22 | object["" + taint] | provenance | Config |
|
||||
| tst.js:82:17:82:21 | taint | tst.js:82:12:82:21 | "" + taint | provenance | Config |
|
||||
| tst.js:87:16:87:20 | taint | tst.js:87:9:87:21 | object[taint] | provenance | Config |
|
||||
| tst.js:94:9:94:19 | req.query.x | tst.js:94:9:94:36 | req.que ... _', '') | provenance | Config |
|
||||
| tst.js:94:9:94:36 | req.que ... _', '') | tst.js:94:5:94:37 | obj[req ... ', '')] | provenance | Config |
|
||||
| tst.js:97:9:97:19 | req.query.x | tst.js:97:9:97:45 | req.que ... /g, '') | provenance | Config |
|
||||
| tst.js:97:9:97:45 | req.que ... /g, '') | tst.js:97:5:97:46 | obj[req ... g, '')] | provenance | Config |
|
||||
| tst.js:102:9:102:38 | taint | tst.js:105:12:105:16 | taint | provenance | |
|
||||
| tst.js:102:17:102:38 | String( ... y.data) | tst.js:102:9:102:38 | taint | provenance | |
|
||||
| tst.js:102:24:102:37 | req.query.data | tst.js:102:17:102:38 | String( ... y.data) | provenance | Config |
|
||||
| tst.js:105:12:105:16 | taint | tst.js:105:5:105:17 | object[taint] | provenance | Config |
|
||||
nodes
|
||||
| lib.js:1:38:1:40 | obj | semmle.label | obj |
|
||||
| lib.js:1:43:1:46 | path | semmle.label | path |
|
||||
|
||||
@@ -642,65 +642,65 @@ edges
|
||||
| examples/PrototypePollutingFunction.js:2:14:2:16 | key | examples/PrototypePollutingFunction.js:5:33:5:35 | key | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:2:14:2:16 | key | examples/PrototypePollutingFunction.js:7:17:7:19 | key | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:2:14:2:16 | key | examples/PrototypePollutingFunction.js:7:28:7:30 | key | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:5:19:5:21 | dst | examples/PrototypePollutingFunction.js:5:19:5:26 | dst[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:5:19:5:21 | dst | examples/PrototypePollutingFunction.js:5:19:5:26 | dst[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction.js:5:19:5:26 | dst[key] | examples/PrototypePollutingFunction.js:1:16:1:18 | dst | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:5:23:5:25 | key | examples/PrototypePollutingFunction.js:5:19:5:26 | dst[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:5:29:5:31 | src | examples/PrototypePollutingFunction.js:5:29:5:36 | src[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:5:23:5:25 | key | examples/PrototypePollutingFunction.js:5:19:5:26 | dst[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction.js:5:29:5:31 | src | examples/PrototypePollutingFunction.js:5:29:5:36 | src[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction.js:5:29:5:36 | src[key] | examples/PrototypePollutingFunction.js:1:21:1:23 | src | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:5:33:5:35 | key | examples/PrototypePollutingFunction.js:5:29:5:36 | src[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:7:24:7:26 | src | examples/PrototypePollutingFunction.js:7:24:7:31 | src[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:7:28:7:30 | key | examples/PrototypePollutingFunction.js:7:24:7:31 | src[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction.js:5:33:5:35 | key | examples/PrototypePollutingFunction.js:5:29:5:36 | src[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction.js:7:24:7:26 | src | examples/PrototypePollutingFunction.js:7:24:7:31 | src[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction.js:7:28:7:30 | key | examples/PrototypePollutingFunction.js:7:24:7:31 | src[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction_fixed2.js:1:21:1:23 | src | examples/PrototypePollutingFunction_fixed2.js:6:29:6:31 | src | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed2.js:1:21:1:23 | src | examples/PrototypePollutingFunction_fixed2.js:8:24:8:26 | src | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed2.js:6:29:6:31 | src | examples/PrototypePollutingFunction_fixed2.js:6:29:6:36 | src[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed2.js:6:29:6:31 | src | examples/PrototypePollutingFunction_fixed2.js:6:29:6:36 | src[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction_fixed2.js:6:29:6:36 | src[key] | examples/PrototypePollutingFunction_fixed2.js:1:21:1:23 | src | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed2.js:8:24:8:26 | src | examples/PrototypePollutingFunction_fixed2.js:8:24:8:31 | src[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed2.js:8:24:8:26 | src | examples/PrototypePollutingFunction_fixed2.js:8:24:8:31 | src[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction_fixed.js:1:21:1:23 | src | examples/PrototypePollutingFunction_fixed.js:5:29:5:31 | src | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed.js:1:21:1:23 | src | examples/PrototypePollutingFunction_fixed.js:7:24:7:26 | src | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed.js:2:14:2:16 | key | examples/PrototypePollutingFunction_fixed.js:7:17:7:19 | key | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed.js:2:14:2:16 | key | examples/PrototypePollutingFunction_fixed.js:7:28:7:30 | key | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed.js:5:29:5:31 | src | examples/PrototypePollutingFunction_fixed.js:5:29:5:36 | src[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed.js:5:29:5:31 | src | examples/PrototypePollutingFunction_fixed.js:5:29:5:36 | src[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction_fixed.js:5:29:5:36 | src[key] | examples/PrototypePollutingFunction_fixed.js:1:21:1:23 | src | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed.js:7:24:7:26 | src | examples/PrototypePollutingFunction_fixed.js:7:24:7:31 | src[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed.js:7:28:7:30 | key | examples/PrototypePollutingFunction_fixed.js:7:24:7:31 | src[key] | provenance | |
|
||||
| examples/PrototypePollutingFunction_fixed.js:7:24:7:26 | src | examples/PrototypePollutingFunction_fixed.js:7:24:7:31 | src[key] | provenance | Config |
|
||||
| examples/PrototypePollutingFunction_fixed.js:7:28:7:30 | key | examples/PrototypePollutingFunction_fixed.js:7:24:7:31 | src[key] | provenance | Config |
|
||||
| path-assignment.js:8:13:8:25 | key | path-assignment.js:13:29:13:31 | key | provenance | |
|
||||
| path-assignment.js:8:13:8:25 | key | path-assignment.js:15:20:15:22 | key | provenance | |
|
||||
| path-assignment.js:8:19:8:25 | keys[i] | path-assignment.js:8:13:8:25 | key | provenance | |
|
||||
| path-assignment.js:13:13:13:32 | target | path-assignment.js:13:22:13:27 | target | provenance | |
|
||||
| path-assignment.js:13:13:13:32 | target | path-assignment.js:15:13:15:18 | target | provenance | |
|
||||
| path-assignment.js:13:22:13:27 | target | path-assignment.js:13:22:13:32 | target[key] | provenance | |
|
||||
| path-assignment.js:13:22:13:27 | target | path-assignment.js:13:22:13:32 | target[key] | provenance | Config |
|
||||
| path-assignment.js:13:22:13:32 | target[key] | path-assignment.js:13:13:13:32 | target | provenance | |
|
||||
| path-assignment.js:13:29:13:31 | key | path-assignment.js:13:22:13:32 | target[key] | provenance | |
|
||||
| path-assignment.js:13:29:13:31 | key | path-assignment.js:13:22:13:32 | target[key] | provenance | Config |
|
||||
| path-assignment.js:41:13:41:25 | key | path-assignment.js:42:25:42:27 | key | provenance | |
|
||||
| path-assignment.js:41:13:41:25 | key | path-assignment.js:42:39:42:41 | key | provenance | |
|
||||
| path-assignment.js:41:19:41:25 | keys[i] | path-assignment.js:41:13:41:25 | key | provenance | |
|
||||
| path-assignment.js:42:9:42:48 | target | path-assignment.js:42:18:42:23 | target | provenance | |
|
||||
| path-assignment.js:42:9:42:48 | target | path-assignment.js:42:32:42:37 | target | provenance | |
|
||||
| path-assignment.js:42:9:42:48 | target | path-assignment.js:44:5:44:10 | target | provenance | |
|
||||
| path-assignment.js:42:32:42:37 | target | path-assignment.js:42:32:42:42 | target[key] | provenance | |
|
||||
| path-assignment.js:42:32:42:37 | target | path-assignment.js:42:32:42:42 | target[key] | provenance | Config |
|
||||
| path-assignment.js:42:32:42:42 | target[key] | path-assignment.js:42:9:42:48 | target | provenance | |
|
||||
| path-assignment.js:42:32:42:42 | target[key] | path-assignment.js:42:32:42:48 | target[key] \|\| {} | provenance | |
|
||||
| path-assignment.js:42:39:42:41 | key | path-assignment.js:42:32:42:42 | target[key] | provenance | |
|
||||
| path-assignment.js:42:39:42:41 | key | path-assignment.js:42:32:42:42 | target[key] | provenance | Config |
|
||||
| path-assignment.js:58:13:58:25 | key | path-assignment.js:59:25:59:27 | key | provenance | |
|
||||
| path-assignment.js:58:13:58:25 | key | path-assignment.js:59:39:59:41 | key | provenance | |
|
||||
| path-assignment.js:58:19:58:25 | keys[i] | path-assignment.js:58:13:58:25 | key | provenance | |
|
||||
| path-assignment.js:59:9:59:48 | target | path-assignment.js:59:18:59:23 | target | provenance | |
|
||||
| path-assignment.js:59:9:59:48 | target | path-assignment.js:59:32:59:37 | target | provenance | |
|
||||
| path-assignment.js:59:9:59:48 | target | path-assignment.js:61:5:61:10 | target | provenance | |
|
||||
| path-assignment.js:59:32:59:37 | target | path-assignment.js:59:32:59:42 | target[key] | provenance | |
|
||||
| path-assignment.js:59:32:59:37 | target | path-assignment.js:59:32:59:42 | target[key] | provenance | Config |
|
||||
| path-assignment.js:59:32:59:42 | target[key] | path-assignment.js:59:9:59:48 | target | provenance | |
|
||||
| path-assignment.js:59:32:59:42 | target[key] | path-assignment.js:59:32:59:48 | target[key] \|\| {} | provenance | |
|
||||
| path-assignment.js:59:39:59:41 | key | path-assignment.js:59:32:59:42 | target[key] | provenance | |
|
||||
| path-assignment.js:59:39:59:41 | key | path-assignment.js:59:32:59:42 | target[key] | provenance | Config |
|
||||
| path-assignment.js:68:13:68:25 | key | path-assignment.js:69:25:69:27 | key | provenance | |
|
||||
| path-assignment.js:68:13:68:25 | key | path-assignment.js:69:39:69:41 | key | provenance | |
|
||||
| path-assignment.js:68:19:68:25 | keys[i] | path-assignment.js:68:13:68:25 | key | provenance | |
|
||||
| path-assignment.js:69:9:69:48 | target | path-assignment.js:69:18:69:23 | target | provenance | |
|
||||
| path-assignment.js:69:9:69:48 | target | path-assignment.js:69:32:69:37 | target | provenance | |
|
||||
| path-assignment.js:69:9:69:48 | target | path-assignment.js:71:5:71:10 | target | provenance | |
|
||||
| path-assignment.js:69:32:69:37 | target | path-assignment.js:69:32:69:42 | target[key] | provenance | |
|
||||
| path-assignment.js:69:32:69:37 | target | path-assignment.js:69:32:69:42 | target[key] | provenance | Config |
|
||||
| path-assignment.js:69:32:69:42 | target[key] | path-assignment.js:69:9:69:48 | target | provenance | |
|
||||
| path-assignment.js:69:32:69:42 | target[key] | path-assignment.js:69:32:69:48 | target[key] \|\| {} | provenance | |
|
||||
| path-assignment.js:69:39:69:41 | key | path-assignment.js:69:32:69:42 | target[key] | provenance | |
|
||||
| path-assignment.js:69:39:69:41 | key | path-assignment.js:69:32:69:42 | target[key] | provenance | Config |
|
||||
| tests.js:3:25:3:27 | dst | tests.js:6:28:6:30 | dst | provenance | |
|
||||
| tests.js:3:25:3:27 | dst | tests.js:8:13:8:15 | dst | provenance | |
|
||||
| tests.js:3:30:3:32 | src | tests.js:6:38:6:40 | src | provenance | |
|
||||
@@ -709,14 +709,14 @@ edges
|
||||
| tests.js:4:14:4:16 | key | tests.js:6:42:6:44 | key | provenance | |
|
||||
| tests.js:4:14:4:16 | key | tests.js:8:17:8:19 | key | provenance | |
|
||||
| tests.js:4:14:4:16 | key | tests.js:8:28:8:30 | key | provenance | |
|
||||
| tests.js:6:28:6:30 | dst | tests.js:6:28:6:35 | dst[key] | provenance | |
|
||||
| tests.js:6:28:6:30 | dst | tests.js:6:28:6:35 | dst[key] | provenance | Config |
|
||||
| tests.js:6:28:6:35 | dst[key] | tests.js:3:25:3:27 | dst | provenance | |
|
||||
| tests.js:6:32:6:34 | key | tests.js:6:28:6:35 | dst[key] | provenance | |
|
||||
| tests.js:6:38:6:40 | src | tests.js:6:38:6:45 | src[key] | provenance | |
|
||||
| tests.js:6:32:6:34 | key | tests.js:6:28:6:35 | dst[key] | provenance | Config |
|
||||
| tests.js:6:38:6:40 | src | tests.js:6:38:6:45 | src[key] | provenance | Config |
|
||||
| tests.js:6:38:6:45 | src[key] | tests.js:3:30:3:32 | src | provenance | |
|
||||
| tests.js:6:42:6:44 | key | tests.js:6:38:6:45 | src[key] | provenance | |
|
||||
| tests.js:8:24:8:26 | src | tests.js:8:24:8:31 | src[key] | provenance | |
|
||||
| tests.js:8:28:8:30 | key | tests.js:8:24:8:31 | src[key] | provenance | |
|
||||
| tests.js:6:42:6:44 | key | tests.js:6:38:6:45 | src[key] | provenance | Config |
|
||||
| tests.js:8:24:8:26 | src | tests.js:8:24:8:31 | src[key] | provenance | Config |
|
||||
| tests.js:8:28:8:30 | key | tests.js:8:24:8:31 | src[key] | provenance | Config |
|
||||
| tests.js:13:24:13:26 | dst | tests.js:16:27:16:29 | dst | provenance | |
|
||||
| tests.js:13:24:13:26 | dst | tests.js:18:13:18:15 | dst | provenance | |
|
||||
| tests.js:13:29:13:31 | src | tests.js:14:17:14:19 | src | provenance | |
|
||||
@@ -726,20 +726,20 @@ edges
|
||||
| tests.js:14:30:14:32 | key | tests.js:16:41:16:43 | key | provenance | |
|
||||
| tests.js:14:30:14:32 | key | tests.js:18:17:18:19 | key | provenance | |
|
||||
| tests.js:14:30:14:32 | key | tests.js:18:28:18:30 | key | provenance | |
|
||||
| tests.js:16:27:16:29 | dst | tests.js:16:27:16:34 | dst[key] | provenance | |
|
||||
| tests.js:16:27:16:29 | dst | tests.js:16:27:16:34 | dst[key] | provenance | Config |
|
||||
| tests.js:16:27:16:34 | dst[key] | tests.js:13:24:13:26 | dst | provenance | |
|
||||
| tests.js:16:31:16:33 | key | tests.js:16:27:16:34 | dst[key] | provenance | |
|
||||
| tests.js:16:37:16:39 | src | tests.js:16:37:16:44 | src[key] | provenance | |
|
||||
| tests.js:16:31:16:33 | key | tests.js:16:27:16:34 | dst[key] | provenance | Config |
|
||||
| tests.js:16:37:16:39 | src | tests.js:16:37:16:44 | src[key] | provenance | Config |
|
||||
| tests.js:16:37:16:44 | src[key] | tests.js:13:29:13:31 | src | provenance | |
|
||||
| tests.js:16:41:16:43 | key | tests.js:16:37:16:44 | src[key] | provenance | |
|
||||
| tests.js:18:24:18:26 | src | tests.js:18:24:18:31 | src[key] | provenance | |
|
||||
| tests.js:18:28:18:30 | key | tests.js:18:24:18:31 | src[key] | provenance | |
|
||||
| tests.js:16:41:16:43 | key | tests.js:16:37:16:44 | src[key] | provenance | Config |
|
||||
| tests.js:18:24:18:26 | src | tests.js:18:24:18:31 | src[key] | provenance | Config |
|
||||
| tests.js:18:28:18:30 | key | tests.js:18:24:18:31 | src[key] | provenance | Config |
|
||||
| tests.js:23:19:23:21 | dst | tests.js:26:25:26:27 | dst | provenance | |
|
||||
| tests.js:25:18:25:20 | key | tests.js:26:37:26:39 | key | provenance | |
|
||||
| tests.js:25:18:25:20 | key | tests.js:26:43:26:45 | key | provenance | |
|
||||
| tests.js:26:25:26:27 | dst | tests.js:31:22:31:24 | dst | provenance | |
|
||||
| tests.js:26:30:26:40 | source[key] | tests.js:31:27:31:31 | value | provenance | |
|
||||
| tests.js:26:37:26:39 | key | tests.js:26:30:26:40 | source[key] | provenance | |
|
||||
| tests.js:26:37:26:39 | key | tests.js:26:30:26:40 | source[key] | provenance | Config |
|
||||
| tests.js:26:43:26:45 | key | tests.js:31:34:31:36 | key | provenance | |
|
||||
| tests.js:31:22:31:24 | dst | tests.js:32:20:32:22 | dst | provenance | |
|
||||
| tests.js:31:22:31:24 | dst | tests.js:36:9:36:11 | dst | provenance | |
|
||||
@@ -747,9 +747,9 @@ edges
|
||||
| tests.js:31:34:31:36 | key | tests.js:32:24:32:26 | key | provenance | |
|
||||
| tests.js:31:34:31:36 | key | tests.js:36:13:36:15 | key | provenance | |
|
||||
| tests.js:32:9:32:27 | dstValue | tests.js:34:18:34:25 | dstValue | provenance | |
|
||||
| tests.js:32:20:32:22 | dst | tests.js:32:20:32:27 | dst[key] | provenance | |
|
||||
| tests.js:32:20:32:22 | dst | tests.js:32:20:32:27 | dst[key] | provenance | Config |
|
||||
| tests.js:32:20:32:27 | dst[key] | tests.js:32:9:32:27 | dstValue | provenance | |
|
||||
| tests.js:32:24:32:26 | key | tests.js:32:20:32:27 | dst[key] | provenance | |
|
||||
| tests.js:32:24:32:26 | key | tests.js:32:20:32:27 | dst[key] | provenance | Config |
|
||||
| tests.js:34:18:34:25 | dstValue | tests.js:23:19:23:21 | dst | provenance | |
|
||||
| tests.js:40:27:40:29 | dst | tests.js:44:30:44:32 | dst | provenance | |
|
||||
| tests.js:40:27:40:29 | dst | tests.js:46:13:46:15 | dst | provenance | |
|
||||
@@ -759,14 +759,14 @@ edges
|
||||
| tests.js:41:14:41:16 | key | tests.js:44:44:44:46 | key | provenance | |
|
||||
| tests.js:41:14:41:16 | key | tests.js:46:17:46:19 | key | provenance | |
|
||||
| tests.js:41:14:41:16 | key | tests.js:46:28:46:30 | key | provenance | |
|
||||
| tests.js:44:30:44:32 | dst | tests.js:44:30:44:37 | dst[key] | provenance | |
|
||||
| tests.js:44:30:44:32 | dst | tests.js:44:30:44:37 | dst[key] | provenance | Config |
|
||||
| tests.js:44:30:44:37 | dst[key] | tests.js:40:27:40:29 | dst | provenance | |
|
||||
| tests.js:44:34:44:36 | key | tests.js:44:30:44:37 | dst[key] | provenance | |
|
||||
| tests.js:44:40:44:42 | src | tests.js:44:40:44:47 | src[key] | provenance | |
|
||||
| tests.js:44:34:44:36 | key | tests.js:44:30:44:37 | dst[key] | provenance | Config |
|
||||
| tests.js:44:40:44:42 | src | tests.js:44:40:44:47 | src[key] | provenance | Config |
|
||||
| tests.js:44:40:44:47 | src[key] | tests.js:40:32:40:34 | src | provenance | |
|
||||
| tests.js:44:44:44:46 | key | tests.js:44:40:44:47 | src[key] | provenance | |
|
||||
| tests.js:46:24:46:26 | src | tests.js:46:24:46:31 | src[key] | provenance | |
|
||||
| tests.js:46:28:46:30 | key | tests.js:46:24:46:31 | src[key] | provenance | |
|
||||
| tests.js:44:44:44:46 | key | tests.js:44:40:44:47 | src[key] | provenance | Config |
|
||||
| tests.js:46:24:46:26 | src | tests.js:46:24:46:31 | src[key] | provenance | Config |
|
||||
| tests.js:46:28:46:30 | key | tests.js:46:24:46:31 | src[key] | provenance | Config |
|
||||
| tests.js:51:26:51:28 | dst | tests.js:55:29:55:31 | dst | provenance | |
|
||||
| tests.js:51:26:51:28 | dst | tests.js:57:13:57:15 | dst | provenance | |
|
||||
| tests.js:51:31:51:33 | src | tests.js:55:39:55:41 | src | provenance | |
|
||||
@@ -775,32 +775,32 @@ edges
|
||||
| tests.js:52:14:52:16 | key | tests.js:55:43:55:45 | key | provenance | |
|
||||
| tests.js:52:14:52:16 | key | tests.js:57:17:57:19 | key | provenance | |
|
||||
| tests.js:52:14:52:16 | key | tests.js:57:28:57:30 | key | provenance | |
|
||||
| tests.js:55:29:55:31 | dst | tests.js:55:29:55:36 | dst[key] | provenance | |
|
||||
| tests.js:55:29:55:31 | dst | tests.js:55:29:55:36 | dst[key] | provenance | Config |
|
||||
| tests.js:55:29:55:36 | dst[key] | tests.js:51:26:51:28 | dst | provenance | |
|
||||
| tests.js:55:33:55:35 | key | tests.js:55:29:55:36 | dst[key] | provenance | |
|
||||
| tests.js:55:39:55:41 | src | tests.js:55:39:55:46 | src[key] | provenance | |
|
||||
| tests.js:55:33:55:35 | key | tests.js:55:29:55:36 | dst[key] | provenance | Config |
|
||||
| tests.js:55:39:55:41 | src | tests.js:55:39:55:46 | src[key] | provenance | Config |
|
||||
| tests.js:55:39:55:46 | src[key] | tests.js:51:31:51:33 | src | provenance | |
|
||||
| tests.js:55:43:55:45 | key | tests.js:55:39:55:46 | src[key] | provenance | |
|
||||
| tests.js:57:24:57:26 | src | tests.js:57:24:57:31 | src[key] | provenance | |
|
||||
| tests.js:57:28:57:30 | key | tests.js:57:24:57:31 | src[key] | provenance | |
|
||||
| tests.js:55:43:55:45 | key | tests.js:55:39:55:46 | src[key] | provenance | Config |
|
||||
| tests.js:57:24:57:26 | src | tests.js:57:24:57:31 | src[key] | provenance | Config |
|
||||
| tests.js:57:28:57:30 | key | tests.js:57:24:57:31 | src[key] | provenance | Config |
|
||||
| tests.js:62:33:62:35 | src | tests.js:66:41:66:43 | src | provenance | |
|
||||
| tests.js:62:33:62:35 | src | tests.js:68:24:68:26 | src | provenance | |
|
||||
| tests.js:66:41:66:43 | src | tests.js:66:41:66:48 | src[key] | provenance | |
|
||||
| tests.js:66:41:66:43 | src | tests.js:66:41:66:48 | src[key] | provenance | Config |
|
||||
| tests.js:66:41:66:48 | src[key] | tests.js:62:33:62:35 | src | provenance | |
|
||||
| tests.js:68:24:68:26 | src | tests.js:68:24:68:31 | src[key] | provenance | |
|
||||
| tests.js:68:24:68:26 | src | tests.js:68:24:68:31 | src[key] | provenance | Config |
|
||||
| tests.js:77:27:77:29 | src | tests.js:81:39:81:41 | src | provenance | |
|
||||
| tests.js:77:27:77:29 | src | tests.js:83:28:83:30 | src | provenance | |
|
||||
| tests.js:81:39:81:41 | src | tests.js:81:39:81:46 | src[key] | provenance | |
|
||||
| tests.js:81:39:81:41 | src | tests.js:81:39:81:46 | src[key] | provenance | Config |
|
||||
| tests.js:81:39:81:46 | src[key] | tests.js:77:27:77:29 | src | provenance | |
|
||||
| tests.js:83:28:83:30 | src | tests.js:83:28:83:35 | src[key] | provenance | |
|
||||
| tests.js:83:28:83:30 | src | tests.js:83:28:83:35 | src[key] | provenance | Config |
|
||||
| tests.js:89:34:89:36 | src | tests.js:94:42:94:44 | src | provenance | |
|
||||
| tests.js:89:34:89:36 | src | tests.js:96:24:96:26 | src | provenance | |
|
||||
| tests.js:90:14:90:16 | key | tests.js:96:17:96:19 | key | provenance | |
|
||||
| tests.js:90:14:90:16 | key | tests.js:96:28:96:30 | key | provenance | |
|
||||
| tests.js:94:42:94:44 | src | tests.js:94:42:94:49 | src[key] | provenance | |
|
||||
| tests.js:94:42:94:44 | src | tests.js:94:42:94:49 | src[key] | provenance | Config |
|
||||
| tests.js:94:42:94:49 | src[key] | tests.js:89:34:89:36 | src | provenance | |
|
||||
| tests.js:96:24:96:26 | src | tests.js:96:24:96:31 | src[key] | provenance | |
|
||||
| tests.js:96:28:96:30 | key | tests.js:96:24:96:31 | src[key] | provenance | |
|
||||
| tests.js:96:24:96:26 | src | tests.js:96:24:96:31 | src[key] | provenance | Config |
|
||||
| tests.js:96:28:96:30 | key | tests.js:96:24:96:31 | src[key] | provenance | Config |
|
||||
| tests.js:101:32:101:34 | dst | tests.js:107:35:107:37 | dst | provenance | |
|
||||
| tests.js:101:32:101:34 | dst | tests.js:109:13:109:15 | dst | provenance | |
|
||||
| tests.js:101:37:101:39 | src | tests.js:107:45:107:47 | src | provenance | |
|
||||
@@ -809,22 +809,22 @@ edges
|
||||
| tests.js:102:14:102:16 | key | tests.js:107:49:107:51 | key | provenance | |
|
||||
| tests.js:102:14:102:16 | key | tests.js:109:17:109:19 | key | provenance | |
|
||||
| tests.js:102:14:102:16 | key | tests.js:109:28:109:30 | key | provenance | |
|
||||
| tests.js:107:35:107:37 | dst | tests.js:107:35:107:42 | dst[key] | provenance | |
|
||||
| tests.js:107:35:107:37 | dst | tests.js:107:35:107:42 | dst[key] | provenance | Config |
|
||||
| tests.js:107:35:107:42 | dst[key] | tests.js:101:32:101:34 | dst | provenance | |
|
||||
| tests.js:107:39:107:41 | key | tests.js:107:35:107:42 | dst[key] | provenance | |
|
||||
| tests.js:107:45:107:47 | src | tests.js:107:45:107:52 | src[key] | provenance | |
|
||||
| tests.js:107:39:107:41 | key | tests.js:107:35:107:42 | dst[key] | provenance | Config |
|
||||
| tests.js:107:45:107:47 | src | tests.js:107:45:107:52 | src[key] | provenance | Config |
|
||||
| tests.js:107:45:107:52 | src[key] | tests.js:101:37:101:39 | src | provenance | |
|
||||
| tests.js:107:49:107:51 | key | tests.js:107:45:107:52 | src[key] | provenance | |
|
||||
| tests.js:109:24:109:26 | src | tests.js:109:24:109:31 | src[key] | provenance | |
|
||||
| tests.js:109:28:109:30 | key | tests.js:109:24:109:31 | src[key] | provenance | |
|
||||
| tests.js:107:49:107:51 | key | tests.js:107:45:107:52 | src[key] | provenance | Config |
|
||||
| tests.js:109:24:109:26 | src | tests.js:109:24:109:31 | src[key] | provenance | Config |
|
||||
| tests.js:109:28:109:30 | key | tests.js:109:24:109:31 | src[key] | provenance | Config |
|
||||
| tests.js:116:41:116:43 | src | tests.js:119:49:119:51 | src | provenance | |
|
||||
| tests.js:116:41:116:43 | src | tests.js:121:24:121:26 | src | provenance | |
|
||||
| tests.js:117:14:117:16 | key | tests.js:121:17:121:19 | key | provenance | |
|
||||
| tests.js:117:14:117:16 | key | tests.js:121:28:121:30 | key | provenance | |
|
||||
| tests.js:119:49:119:51 | src | tests.js:119:49:119:56 | src[key] | provenance | |
|
||||
| tests.js:119:49:119:51 | src | tests.js:119:49:119:56 | src[key] | provenance | Config |
|
||||
| tests.js:119:49:119:56 | src[key] | tests.js:116:41:116:43 | src | provenance | |
|
||||
| tests.js:121:24:121:26 | src | tests.js:121:24:121:31 | src[key] | provenance | |
|
||||
| tests.js:121:28:121:30 | key | tests.js:121:24:121:31 | src[key] | provenance | |
|
||||
| tests.js:121:24:121:26 | src | tests.js:121:24:121:31 | src[key] | provenance | Config |
|
||||
| tests.js:121:28:121:30 | key | tests.js:121:24:121:31 | src[key] | provenance | Config |
|
||||
| tests.js:149:31:149:33 | dst | tests.js:152:22:152:24 | dst | provenance | |
|
||||
| tests.js:149:31:149:33 | dst | tests.js:154:13:154:15 | dst | provenance | |
|
||||
| tests.js:149:36:149:38 | src | tests.js:152:27:152:29 | src | provenance | |
|
||||
@@ -835,8 +835,8 @@ edges
|
||||
| tests.js:152:22:152:24 | dst | tests.js:160:37:160:39 | dst | provenance | |
|
||||
| tests.js:152:27:152:29 | src | tests.js:160:42:160:44 | src | provenance | |
|
||||
| tests.js:152:32:152:34 | key | tests.js:160:47:160:49 | key | provenance | |
|
||||
| tests.js:154:24:154:26 | src | tests.js:154:24:154:31 | src[key] | provenance | |
|
||||
| tests.js:154:28:154:30 | key | tests.js:154:24:154:31 | src[key] | provenance | |
|
||||
| tests.js:154:24:154:26 | src | tests.js:154:24:154:31 | src[key] | provenance | Config |
|
||||
| tests.js:154:28:154:30 | key | tests.js:154:24:154:31 | src[key] | provenance | Config |
|
||||
| tests.js:159:36:159:38 | dst | tests.js:160:26:160:28 | dst | provenance | |
|
||||
| tests.js:159:41:159:43 | src | tests.js:160:31:160:33 | src | provenance | |
|
||||
| tests.js:160:26:160:28 | dst | tests.js:149:31:149:33 | dst | provenance | |
|
||||
@@ -845,27 +845,27 @@ edges
|
||||
| tests.js:160:42:160:44 | src | tests.js:161:45:161:47 | src | provenance | |
|
||||
| tests.js:160:47:160:49 | key | tests.js:161:39:161:41 | key | provenance | |
|
||||
| tests.js:160:47:160:49 | key | tests.js:161:49:161:51 | key | provenance | |
|
||||
| tests.js:161:35:161:37 | dst | tests.js:161:35:161:42 | dst[key] | provenance | |
|
||||
| tests.js:161:35:161:37 | dst | tests.js:161:35:161:42 | dst[key] | provenance | Config |
|
||||
| tests.js:161:35:161:42 | dst[key] | tests.js:159:36:159:38 | dst | provenance | |
|
||||
| tests.js:161:39:161:41 | key | tests.js:161:35:161:42 | dst[key] | provenance | |
|
||||
| tests.js:161:45:161:47 | src | tests.js:161:45:161:52 | src[key] | provenance | |
|
||||
| tests.js:161:39:161:41 | key | tests.js:161:35:161:42 | dst[key] | provenance | Config |
|
||||
| tests.js:161:45:161:47 | src | tests.js:161:45:161:52 | src[key] | provenance | Config |
|
||||
| tests.js:161:45:161:52 | src[key] | tests.js:159:41:159:43 | src | provenance | |
|
||||
| tests.js:161:49:161:51 | key | tests.js:161:45:161:52 | src[key] | provenance | |
|
||||
| tests.js:161:49:161:51 | key | tests.js:161:45:161:52 | src[key] | provenance | Config |
|
||||
| tests.js:165:37:165:39 | src | tests.js:169:45:169:47 | src | provenance | |
|
||||
| tests.js:165:37:165:39 | src | tests.js:171:24:171:26 | src | provenance | |
|
||||
| tests.js:166:14:166:16 | key | tests.js:169:49:169:51 | key | provenance | |
|
||||
| tests.js:166:14:166:16 | key | tests.js:171:17:171:19 | key | provenance | |
|
||||
| tests.js:166:14:166:16 | key | tests.js:171:28:171:30 | key | provenance | |
|
||||
| tests.js:169:45:169:47 | src | tests.js:169:45:169:52 | src[key] | provenance | |
|
||||
| tests.js:169:45:169:47 | src | tests.js:169:45:169:52 | src[key] | provenance | Config |
|
||||
| tests.js:169:45:169:52 | src[key] | tests.js:165:37:165:39 | src | provenance | |
|
||||
| tests.js:169:49:169:51 | key | tests.js:169:45:169:52 | src[key] | provenance | |
|
||||
| tests.js:171:24:171:26 | src | tests.js:171:24:171:31 | src[key] | provenance | |
|
||||
| tests.js:171:28:171:30 | key | tests.js:171:24:171:31 | src[key] | provenance | |
|
||||
| tests.js:169:49:169:51 | key | tests.js:169:45:169:52 | src[key] | provenance | Config |
|
||||
| tests.js:171:24:171:26 | src | tests.js:171:24:171:31 | src[key] | provenance | Config |
|
||||
| tests.js:171:28:171:30 | key | tests.js:171:24:171:31 | src[key] | provenance | Config |
|
||||
| tests.js:178:33:178:35 | src | tests.js:182:41:182:43 | src | provenance | |
|
||||
| tests.js:178:33:178:35 | src | tests.js:184:24:184:26 | src | provenance | |
|
||||
| tests.js:182:41:182:43 | src | tests.js:182:41:182:48 | src[key] | provenance | |
|
||||
| tests.js:182:41:182:43 | src | tests.js:182:41:182:48 | src[key] | provenance | Config |
|
||||
| tests.js:182:41:182:48 | src[key] | tests.js:178:33:178:35 | src | provenance | |
|
||||
| tests.js:184:24:184:26 | src | tests.js:184:24:184:31 | src[key] | provenance | |
|
||||
| tests.js:184:24:184:26 | src | tests.js:184:24:184:31 | src[key] | provenance | Config |
|
||||
| tests.js:189:32:189:34 | dst | tests.js:194:35:194:37 | dst | provenance | |
|
||||
| tests.js:189:32:189:34 | dst | tests.js:196:13:196:15 | dst | provenance | |
|
||||
| tests.js:189:37:189:39 | src | tests.js:194:45:194:47 | src | provenance | |
|
||||
@@ -875,54 +875,54 @@ edges
|
||||
| tests.js:192:13:192:25 | key | tests.js:196:17:196:19 | key | provenance | |
|
||||
| tests.js:192:13:192:25 | key | tests.js:196:28:196:30 | key | provenance | |
|
||||
| tests.js:192:19:192:25 | keys[i] | tests.js:192:13:192:25 | key | provenance | |
|
||||
| tests.js:194:35:194:37 | dst | tests.js:194:35:194:42 | dst[key] | provenance | |
|
||||
| tests.js:194:35:194:37 | dst | tests.js:194:35:194:42 | dst[key] | provenance | Config |
|
||||
| tests.js:194:35:194:42 | dst[key] | tests.js:189:32:189:34 | dst | provenance | |
|
||||
| tests.js:194:39:194:41 | key | tests.js:194:35:194:42 | dst[key] | provenance | |
|
||||
| tests.js:194:45:194:47 | src | tests.js:194:45:194:52 | src[key] | provenance | |
|
||||
| tests.js:194:39:194:41 | key | tests.js:194:35:194:42 | dst[key] | provenance | Config |
|
||||
| tests.js:194:45:194:47 | src | tests.js:194:45:194:52 | src[key] | provenance | Config |
|
||||
| tests.js:194:45:194:52 | src[key] | tests.js:189:37:189:39 | src | provenance | |
|
||||
| tests.js:194:49:194:51 | key | tests.js:194:45:194:52 | src[key] | provenance | |
|
||||
| tests.js:196:24:196:26 | src | tests.js:196:24:196:31 | src[key] | provenance | |
|
||||
| tests.js:196:28:196:30 | key | tests.js:196:24:196:31 | src[key] | provenance | |
|
||||
| tests.js:194:49:194:51 | key | tests.js:194:45:194:52 | src[key] | provenance | Config |
|
||||
| tests.js:196:24:196:26 | src | tests.js:196:24:196:31 | src[key] | provenance | Config |
|
||||
| tests.js:196:28:196:30 | key | tests.js:196:24:196:31 | src[key] | provenance | Config |
|
||||
| tests.js:201:39:201:41 | dst | tests.js:206:42:206:44 | dst | provenance | |
|
||||
| tests.js:201:39:201:41 | dst | tests.js:208:13:208:15 | dst | provenance | |
|
||||
| tests.js:201:44:201:46 | src | tests.js:206:56:206:58 | src | provenance | |
|
||||
| tests.js:201:44:201:46 | src | tests.js:208:28:208:30 | src | provenance | |
|
||||
| tests.js:206:42:206:44 | dst | tests.js:206:42:206:53 | dst[keys[i]] | provenance | |
|
||||
| tests.js:206:42:206:44 | dst | tests.js:206:42:206:53 | dst[keys[i]] | provenance | Config |
|
||||
| tests.js:206:42:206:53 | dst[keys[i]] | tests.js:201:39:201:41 | dst | provenance | |
|
||||
| tests.js:206:46:206:52 | keys[i] | tests.js:206:42:206:53 | dst[keys[i]] | provenance | |
|
||||
| tests.js:206:56:206:58 | src | tests.js:206:56:206:67 | src[keys[i]] | provenance | |
|
||||
| tests.js:206:46:206:52 | keys[i] | tests.js:206:42:206:53 | dst[keys[i]] | provenance | Config |
|
||||
| tests.js:206:56:206:58 | src | tests.js:206:56:206:67 | src[keys[i]] | provenance | Config |
|
||||
| tests.js:206:56:206:67 | src[keys[i]] | tests.js:201:44:201:46 | src | provenance | |
|
||||
| tests.js:206:60:206:66 | keys[i] | tests.js:206:56:206:67 | src[keys[i]] | provenance | |
|
||||
| tests.js:208:28:208:30 | src | tests.js:208:28:208:39 | src[keys[i]] | provenance | |
|
||||
| tests.js:208:32:208:38 | keys[i] | tests.js:208:28:208:39 | src[keys[i]] | provenance | |
|
||||
| tests.js:206:60:206:66 | keys[i] | tests.js:206:56:206:67 | src[keys[i]] | provenance | Config |
|
||||
| tests.js:208:28:208:30 | src | tests.js:208:28:208:39 | src[keys[i]] | provenance | Config |
|
||||
| tests.js:208:32:208:38 | keys[i] | tests.js:208:28:208:39 | src[keys[i]] | provenance | Config |
|
||||
| tests.js:213:23:213:26 | key1 | tests.js:217:9:217:12 | key1 | provenance | |
|
||||
| tests.js:213:29:213:32 | key2 | tests.js:217:15:217:18 | key2 | provenance | |
|
||||
| tests.js:213:35:213:39 | value | tests.js:217:23:217:27 | value | provenance | |
|
||||
| tests.js:217:9:217:12 | key1 | tests.js:217:5:217:13 | map[key1] | provenance | |
|
||||
| tests.js:217:9:217:12 | key1 | tests.js:217:5:217:13 | map[key1] | provenance | Config |
|
||||
| tests.js:223:14:223:16 | key | tests.js:224:23:224:25 | key | provenance | |
|
||||
| tests.js:223:14:223:16 | key | tests.js:224:38:224:40 | key | provenance | |
|
||||
| tests.js:223:14:223:16 | key | tests.js:225:28:225:30 | key | provenance | |
|
||||
| tests.js:223:14:223:16 | key | tests.js:225:38:225:40 | key | provenance | |
|
||||
| tests.js:224:23:224:25 | key | tests.js:213:23:213:26 | key1 | provenance | |
|
||||
| tests.js:224:33:224:41 | data[key] | tests.js:213:35:213:39 | value | provenance | |
|
||||
| tests.js:224:38:224:40 | key | tests.js:224:33:224:41 | data[key] | provenance | |
|
||||
| tests.js:224:38:224:40 | key | tests.js:224:33:224:41 | data[key] | provenance | Config |
|
||||
| tests.js:225:28:225:30 | key | tests.js:213:29:213:32 | key2 | provenance | |
|
||||
| tests.js:225:33:225:41 | data[key] | tests.js:213:35:213:39 | value | provenance | |
|
||||
| tests.js:225:38:225:40 | key | tests.js:225:33:225:41 | data[key] | provenance | |
|
||||
| tests.js:225:38:225:40 | key | tests.js:225:33:225:41 | data[key] | provenance | Config |
|
||||
| tests.js:229:26:229:29 | key1 | tests.js:233:9:233:12 | key1 | provenance | |
|
||||
| tests.js:229:32:229:35 | key2 | tests.js:233:15:233:18 | key2 | provenance | |
|
||||
| tests.js:229:38:229:42 | value | tests.js:233:23:233:27 | value | provenance | |
|
||||
| tests.js:233:9:233:12 | key1 | tests.js:233:5:233:13 | map[key1] | provenance | |
|
||||
| tests.js:233:9:233:12 | key1 | tests.js:233:5:233:13 | map[key1] | provenance | Config |
|
||||
| tests.js:238:14:238:16 | key | tests.js:239:24:239:26 | key | provenance | |
|
||||
| tests.js:238:14:238:16 | key | tests.js:239:39:239:41 | key | provenance | |
|
||||
| tests.js:238:14:238:16 | key | tests.js:240:31:240:33 | key | provenance | |
|
||||
| tests.js:238:14:238:16 | key | tests.js:240:41:240:43 | key | provenance | |
|
||||
| tests.js:239:24:239:26 | key | tests.js:229:26:229:29 | key1 | provenance | |
|
||||
| tests.js:239:34:239:42 | data[key] | tests.js:229:38:229:42 | value | provenance | |
|
||||
| tests.js:239:39:239:41 | key | tests.js:239:34:239:42 | data[key] | provenance | |
|
||||
| tests.js:239:39:239:41 | key | tests.js:239:34:239:42 | data[key] | provenance | Config |
|
||||
| tests.js:240:31:240:33 | key | tests.js:229:32:229:35 | key2 | provenance | |
|
||||
| tests.js:240:36:240:44 | data[key] | tests.js:229:38:229:42 | value | provenance | |
|
||||
| tests.js:240:41:240:43 | key | tests.js:240:36:240:44 | data[key] | provenance | |
|
||||
| tests.js:240:41:240:43 | key | tests.js:240:36:240:44 | data[key] | provenance | Config |
|
||||
| tests.js:263:27:263:29 | dst | tests.js:268:30:268:32 | dst | provenance | |
|
||||
| tests.js:263:27:263:29 | dst | tests.js:270:13:270:15 | dst | provenance | |
|
||||
| tests.js:265:13:265:26 | key | tests.js:268:34:268:36 | key | provenance | |
|
||||
@@ -930,9 +930,9 @@ edges
|
||||
| tests.js:265:19:265:26 | entry[0] | tests.js:265:13:265:26 | key | provenance | |
|
||||
| tests.js:266:13:266:28 | value | tests.js:270:24:270:28 | value | provenance | |
|
||||
| tests.js:266:21:266:28 | entry[1] | tests.js:266:13:266:28 | value | provenance | |
|
||||
| tests.js:268:30:268:32 | dst | tests.js:268:30:268:37 | dst[key] | provenance | |
|
||||
| tests.js:268:30:268:32 | dst | tests.js:268:30:268:37 | dst[key] | provenance | Config |
|
||||
| tests.js:268:30:268:37 | dst[key] | tests.js:263:27:263:29 | dst | provenance | |
|
||||
| tests.js:268:34:268:36 | key | tests.js:268:30:268:37 | dst[key] | provenance | |
|
||||
| tests.js:268:34:268:36 | key | tests.js:268:30:268:37 | dst[key] | provenance | Config |
|
||||
| tests.js:275:27:275:29 | dst | tests.js:278:30:278:32 | dst | provenance | |
|
||||
| tests.js:275:27:275:29 | dst | tests.js:280:13:280:15 | dst | provenance | |
|
||||
| tests.js:275:32:275:34 | src | tests.js:276:21:276:23 | src | provenance | |
|
||||
@@ -942,14 +942,14 @@ edges
|
||||
| tests.js:276:34:276:36 | key | tests.js:278:44:278:46 | key | provenance | |
|
||||
| tests.js:276:34:276:36 | key | tests.js:280:17:280:19 | key | provenance | |
|
||||
| tests.js:276:34:276:36 | key | tests.js:280:28:280:30 | key | provenance | |
|
||||
| tests.js:278:30:278:32 | dst | tests.js:278:30:278:37 | dst[key] | provenance | |
|
||||
| tests.js:278:30:278:32 | dst | tests.js:278:30:278:37 | dst[key] | provenance | Config |
|
||||
| tests.js:278:30:278:37 | dst[key] | tests.js:275:27:275:29 | dst | provenance | |
|
||||
| tests.js:278:34:278:36 | key | tests.js:278:30:278:37 | dst[key] | provenance | |
|
||||
| tests.js:278:40:278:42 | src | tests.js:278:40:278:47 | src[key] | provenance | |
|
||||
| tests.js:278:34:278:36 | key | tests.js:278:30:278:37 | dst[key] | provenance | Config |
|
||||
| tests.js:278:40:278:42 | src | tests.js:278:40:278:47 | src[key] | provenance | Config |
|
||||
| tests.js:278:40:278:47 | src[key] | tests.js:275:32:275:34 | src | provenance | |
|
||||
| tests.js:278:44:278:46 | key | tests.js:278:40:278:47 | src[key] | provenance | |
|
||||
| tests.js:280:24:280:26 | src | tests.js:280:24:280:31 | src[key] | provenance | |
|
||||
| tests.js:280:28:280:30 | key | tests.js:280:24:280:31 | src[key] | provenance | |
|
||||
| tests.js:278:44:278:46 | key | tests.js:278:40:278:47 | src[key] | provenance | Config |
|
||||
| tests.js:280:24:280:26 | src | tests.js:280:24:280:31 | src[key] | provenance | Config |
|
||||
| tests.js:280:28:280:30 | key | tests.js:280:24:280:31 | src[key] | provenance | Config |
|
||||
| tests.js:301:27:301:29 | dst | tests.js:306:34:306:36 | dst | provenance | |
|
||||
| tests.js:301:27:301:29 | dst | tests.js:308:17:308:19 | dst | provenance | |
|
||||
| tests.js:301:32:301:34 | src | tests.js:304:25:304:27 | src | provenance | |
|
||||
@@ -961,15 +961,15 @@ edges
|
||||
| tests.js:304:17:304:32 | value | tests.js:308:28:308:32 | value | provenance | |
|
||||
| tests.js:304:17:304:32 | value | tests.js:308:28:308:32 | value | provenance | |
|
||||
| tests.js:304:17:304:32 | value | tests.js:308:28:308:32 | value | provenance | |
|
||||
| tests.js:304:25:304:27 | src | tests.js:304:25:304:32 | src[key] | provenance | |
|
||||
| tests.js:304:25:304:27 | src | tests.js:304:25:304:32 | src[key] | provenance | Config |
|
||||
| tests.js:304:25:304:32 | src[key] | tests.js:304:17:304:32 | value | provenance | |
|
||||
| tests.js:304:25:304:32 | src[key] | tests.js:304:17:304:32 | value | provenance | |
|
||||
| tests.js:304:25:304:32 | src[key] | tests.js:304:17:304:32 | value | provenance | |
|
||||
| tests.js:304:29:304:31 | key | tests.js:304:25:304:32 | src[key] | provenance | |
|
||||
| tests.js:304:29:304:31 | key | tests.js:304:25:304:32 | src[key] | provenance | |
|
||||
| tests.js:306:34:306:36 | dst | tests.js:306:34:306:41 | dst[key] | provenance | |
|
||||
| tests.js:304:29:304:31 | key | tests.js:304:25:304:32 | src[key] | provenance | Config |
|
||||
| tests.js:304:29:304:31 | key | tests.js:304:25:304:32 | src[key] | provenance | Config |
|
||||
| tests.js:306:34:306:36 | dst | tests.js:306:34:306:41 | dst[key] | provenance | Config |
|
||||
| tests.js:306:34:306:41 | dst[key] | tests.js:301:27:301:29 | dst | provenance | |
|
||||
| tests.js:306:38:306:40 | key | tests.js:306:34:306:41 | dst[key] | provenance | |
|
||||
| tests.js:306:38:306:40 | key | tests.js:306:34:306:41 | dst[key] | provenance | Config |
|
||||
| tests.js:306:44:306:48 | value | tests.js:301:32:301:34 | src | provenance | |
|
||||
| tests.js:306:44:306:48 | value | tests.js:301:32:301:34 | src | provenance | |
|
||||
| tests.js:314:31:314:33 | dst | tests.js:320:38:320:40 | dst | provenance | |
|
||||
@@ -983,15 +983,15 @@ edges
|
||||
| tests.js:318:17:318:32 | value | tests.js:322:28:322:32 | value | provenance | |
|
||||
| tests.js:318:17:318:32 | value | tests.js:322:28:322:32 | value | provenance | |
|
||||
| tests.js:318:17:318:32 | value | tests.js:322:28:322:32 | value | provenance | |
|
||||
| tests.js:318:25:318:27 | src | tests.js:318:25:318:32 | src[key] | provenance | |
|
||||
| tests.js:318:25:318:27 | src | tests.js:318:25:318:32 | src[key] | provenance | Config |
|
||||
| tests.js:318:25:318:32 | src[key] | tests.js:318:17:318:32 | value | provenance | |
|
||||
| tests.js:318:25:318:32 | src[key] | tests.js:318:17:318:32 | value | provenance | |
|
||||
| tests.js:318:25:318:32 | src[key] | tests.js:318:17:318:32 | value | provenance | |
|
||||
| tests.js:318:29:318:31 | key | tests.js:318:25:318:32 | src[key] | provenance | |
|
||||
| tests.js:318:29:318:31 | key | tests.js:318:25:318:32 | src[key] | provenance | |
|
||||
| tests.js:320:38:320:40 | dst | tests.js:320:38:320:45 | dst[key] | provenance | |
|
||||
| tests.js:318:29:318:31 | key | tests.js:318:25:318:32 | src[key] | provenance | Config |
|
||||
| tests.js:318:29:318:31 | key | tests.js:318:25:318:32 | src[key] | provenance | Config |
|
||||
| tests.js:320:38:320:40 | dst | tests.js:320:38:320:45 | dst[key] | provenance | Config |
|
||||
| tests.js:320:38:320:45 | dst[key] | tests.js:314:31:314:33 | dst | provenance | |
|
||||
| tests.js:320:42:320:44 | key | tests.js:320:38:320:45 | dst[key] | provenance | |
|
||||
| tests.js:320:42:320:44 | key | tests.js:320:38:320:45 | dst[key] | provenance | Config |
|
||||
| tests.js:320:48:320:52 | value | tests.js:314:36:314:38 | src | provenance | |
|
||||
| tests.js:320:48:320:52 | value | tests.js:314:36:314:38 | src | provenance | |
|
||||
| tests.js:328:25:328:27 | dst | tests.js:336:32:336:34 | dst | provenance | |
|
||||
@@ -1002,14 +1002,14 @@ edges
|
||||
| tests.js:329:14:329:16 | key | tests.js:336:46:336:48 | key | provenance | |
|
||||
| tests.js:329:14:329:16 | key | tests.js:338:21:338:23 | key | provenance | |
|
||||
| tests.js:329:14:329:16 | key | tests.js:338:32:338:34 | key | provenance | |
|
||||
| tests.js:336:32:336:34 | dst | tests.js:336:32:336:39 | dst[key] | provenance | |
|
||||
| tests.js:336:32:336:34 | dst | tests.js:336:32:336:39 | dst[key] | provenance | Config |
|
||||
| tests.js:336:32:336:39 | dst[key] | tests.js:328:25:328:27 | dst | provenance | |
|
||||
| tests.js:336:36:336:38 | key | tests.js:336:32:336:39 | dst[key] | provenance | |
|
||||
| tests.js:336:42:336:44 | src | tests.js:336:42:336:49 | src[key] | provenance | |
|
||||
| tests.js:336:36:336:38 | key | tests.js:336:32:336:39 | dst[key] | provenance | Config |
|
||||
| tests.js:336:42:336:44 | src | tests.js:336:42:336:49 | src[key] | provenance | Config |
|
||||
| tests.js:336:42:336:49 | src[key] | tests.js:328:30:328:32 | src | provenance | |
|
||||
| tests.js:336:46:336:48 | key | tests.js:336:42:336:49 | src[key] | provenance | |
|
||||
| tests.js:338:28:338:30 | src | tests.js:338:28:338:35 | src[key] | provenance | |
|
||||
| tests.js:338:32:338:34 | key | tests.js:338:28:338:35 | src[key] | provenance | |
|
||||
| tests.js:336:46:336:48 | key | tests.js:336:42:336:49 | src[key] | provenance | Config |
|
||||
| tests.js:338:28:338:30 | src | tests.js:338:28:338:35 | src[key] | provenance | Config |
|
||||
| tests.js:338:32:338:34 | key | tests.js:338:28:338:35 | src[key] | provenance | Config |
|
||||
| tests.js:348:32:348:37 | target | tests.js:349:26:349:31 | target | provenance | |
|
||||
| tests.js:348:32:348:37 | target | tests.js:361:12:361:17 | target | provenance | |
|
||||
| tests.js:348:40:348:45 | source | tests.js:349:54:349:59 | source | provenance | |
|
||||
@@ -1025,14 +1025,14 @@ edges
|
||||
| tests.js:350:37:350:39 | key | tests.js:355:60:355:62 | key | provenance | |
|
||||
| tests.js:350:37:350:39 | key | tests.js:357:24:357:26 | key | provenance | |
|
||||
| tests.js:350:37:350:39 | key | tests.js:357:38:357:40 | key | provenance | |
|
||||
| tests.js:355:53:355:58 | target | tests.js:355:53:355:63 | target[key] | provenance | |
|
||||
| tests.js:355:53:355:58 | target | tests.js:355:53:355:63 | target[key] | provenance | Config |
|
||||
| tests.js:355:53:355:63 | target[key] | tests.js:348:32:348:37 | target | provenance | |
|
||||
| tests.js:355:53:355:63 | target[key] | tests.js:355:31:355:86 | mergePl ... ptions) | provenance | |
|
||||
| tests.js:355:60:355:62 | key | tests.js:355:53:355:63 | target[key] | provenance | |
|
||||
| tests.js:355:66:355:71 | source | tests.js:355:66:355:76 | source[key] | provenance | |
|
||||
| tests.js:355:60:355:62 | key | tests.js:355:53:355:63 | target[key] | provenance | Config |
|
||||
| tests.js:355:66:355:71 | source | tests.js:355:66:355:76 | source[key] | provenance | Config |
|
||||
| tests.js:355:66:355:76 | source[key] | tests.js:348:40:348:45 | source | provenance | |
|
||||
| tests.js:357:31:357:36 | source | tests.js:357:31:357:41 | source[key] | provenance | |
|
||||
| tests.js:357:38:357:40 | key | tests.js:357:31:357:41 | source[key] | provenance | |
|
||||
| tests.js:357:31:357:36 | source | tests.js:357:31:357:41 | source[key] | provenance | Config |
|
||||
| tests.js:357:38:357:40 | key | tests.js:357:31:357:41 | source[key] | provenance | Config |
|
||||
| tests.js:364:41:364:46 | target | tests.js:377:12:377:17 | target | provenance | |
|
||||
| tests.js:364:49:364:54 | source | tests.js:371:75:371:80 | source | provenance | |
|
||||
| tests.js:364:49:364:54 | source | tests.js:373:31:373:36 | source | provenance | |
|
||||
@@ -1042,11 +1042,11 @@ edges
|
||||
| tests.js:366:18:366:20 | key | tests.js:373:38:373:40 | key | provenance | |
|
||||
| tests.js:371:62:371:72 | target[key] | tests.js:364:41:364:46 | target | provenance | |
|
||||
| tests.js:371:62:371:72 | target[key] | tests.js:371:31:371:95 | mergePl ... ptions) | provenance | |
|
||||
| tests.js:371:69:371:71 | key | tests.js:371:62:371:72 | target[key] | provenance | |
|
||||
| tests.js:371:75:371:80 | source | tests.js:371:75:371:85 | source[key] | provenance | |
|
||||
| tests.js:371:69:371:71 | key | tests.js:371:62:371:72 | target[key] | provenance | Config |
|
||||
| tests.js:371:75:371:80 | source | tests.js:371:75:371:85 | source[key] | provenance | Config |
|
||||
| tests.js:371:75:371:85 | source[key] | tests.js:364:49:364:54 | source | provenance | |
|
||||
| tests.js:373:31:373:36 | source | tests.js:373:31:373:41 | source[key] | provenance | |
|
||||
| tests.js:373:38:373:40 | key | tests.js:373:31:373:41 | source[key] | provenance | |
|
||||
| tests.js:373:31:373:36 | source | tests.js:373:31:373:41 | source[key] | provenance | Config |
|
||||
| tests.js:373:38:373:40 | key | tests.js:373:31:373:41 | source[key] | provenance | Config |
|
||||
| tests.js:380:22:380:24 | obj | tests.js:383:27:383:29 | obj | provenance | |
|
||||
| tests.js:380:27:380:34 | callback [dst] | tests.js:383:13:383:20 | callback [dst] | provenance | |
|
||||
| tests.js:380:27:380:34 | callback [dst] | tests.js:383:13:383:20 | callback [dst] | provenance | |
|
||||
@@ -1067,9 +1067,9 @@ edges
|
||||
| tests.js:383:13:383:20 | callback [src] | tests.js:393:24:393:26 | src | provenance | |
|
||||
| tests.js:383:22:383:24 | key | tests.js:389:22:389:24 | key | provenance | |
|
||||
| tests.js:383:22:383:24 | key | tests.js:399:23:399:25 | key | provenance | |
|
||||
| tests.js:383:27:383:29 | obj | tests.js:383:27:383:34 | obj[key] | provenance | |
|
||||
| tests.js:383:27:383:29 | obj | tests.js:383:27:383:34 | obj[key] | provenance | Config |
|
||||
| tests.js:383:27:383:34 | obj[key] | tests.js:399:28:399:32 | value | provenance | |
|
||||
| tests.js:383:31:383:33 | key | tests.js:383:27:383:34 | obj[key] | provenance | |
|
||||
| tests.js:383:31:383:33 | key | tests.js:383:27:383:34 | obj[key] | provenance | Config |
|
||||
| tests.js:388:29:388:31 | dst | tests.js:380:27:380:34 | callback [dst] | provenance | |
|
||||
| tests.js:388:29:388:31 | dst | tests.js:380:27:380:34 | callback [dst] | provenance | |
|
||||
| tests.js:388:29:388:31 | dst | tests.js:391:32:391:34 | dst | provenance | |
|
||||
@@ -1084,17 +1084,17 @@ edges
|
||||
| tests.js:389:22:389:24 | key | tests.js:391:46:391:48 | key | provenance | |
|
||||
| tests.js:389:22:389:24 | key | tests.js:393:17:393:19 | key | provenance | |
|
||||
| tests.js:389:22:389:24 | key | tests.js:393:28:393:30 | key | provenance | |
|
||||
| tests.js:391:32:391:34 | dst | tests.js:391:32:391:39 | dst[key] | provenance | |
|
||||
| tests.js:391:32:391:34 | dst | tests.js:391:32:391:39 | dst[key] | provenance | |
|
||||
| tests.js:391:32:391:34 | dst | tests.js:391:32:391:39 | dst[key] | provenance | Config |
|
||||
| tests.js:391:32:391:34 | dst | tests.js:391:32:391:39 | dst[key] | provenance | Config |
|
||||
| tests.js:391:32:391:39 | dst[key] | tests.js:388:29:388:31 | dst | provenance | |
|
||||
| tests.js:391:32:391:39 | dst[key] | tests.js:388:29:388:31 | dst | provenance | |
|
||||
| tests.js:391:36:391:38 | key | tests.js:391:32:391:39 | dst[key] | provenance | |
|
||||
| tests.js:391:36:391:38 | key | tests.js:391:32:391:39 | dst[key] | provenance | |
|
||||
| tests.js:391:42:391:44 | src | tests.js:391:42:391:49 | src[key] | provenance | |
|
||||
| tests.js:391:36:391:38 | key | tests.js:391:32:391:39 | dst[key] | provenance | Config |
|
||||
| tests.js:391:36:391:38 | key | tests.js:391:32:391:39 | dst[key] | provenance | Config |
|
||||
| tests.js:391:42:391:44 | src | tests.js:391:42:391:49 | src[key] | provenance | Config |
|
||||
| tests.js:391:42:391:49 | src[key] | tests.js:388:34:388:36 | src | provenance | |
|
||||
| tests.js:391:46:391:48 | key | tests.js:391:42:391:49 | src[key] | provenance | |
|
||||
| tests.js:393:24:393:26 | src | tests.js:393:24:393:31 | src[key] | provenance | |
|
||||
| tests.js:393:28:393:30 | key | tests.js:393:24:393:31 | src[key] | provenance | |
|
||||
| tests.js:391:46:391:48 | key | tests.js:391:42:391:49 | src[key] | provenance | Config |
|
||||
| tests.js:393:24:393:26 | src | tests.js:393:24:393:31 | src[key] | provenance | Config |
|
||||
| tests.js:393:28:393:30 | key | tests.js:393:24:393:31 | src[key] | provenance | Config |
|
||||
| tests.js:398:30:398:32 | dst | tests.js:380:27:380:34 | callback [dst] | provenance | |
|
||||
| tests.js:398:30:398:32 | dst | tests.js:380:27:380:34 | callback [dst] | provenance | |
|
||||
| tests.js:398:30:398:32 | dst | tests.js:401:33:401:35 | dst | provenance | |
|
||||
@@ -1107,17 +1107,17 @@ edges
|
||||
| tests.js:399:23:399:25 | key | tests.js:403:17:403:19 | key | provenance | |
|
||||
| tests.js:399:28:399:32 | value | tests.js:401:43:401:47 | value | provenance | |
|
||||
| tests.js:399:28:399:32 | value | tests.js:403:24:403:28 | value | provenance | |
|
||||
| tests.js:401:33:401:35 | dst | tests.js:401:33:401:40 | dst[key] | provenance | |
|
||||
| tests.js:401:33:401:35 | dst | tests.js:401:33:401:40 | dst[key] | provenance | |
|
||||
| tests.js:401:33:401:35 | dst | tests.js:401:33:401:40 | dst[key] | provenance | Config |
|
||||
| tests.js:401:33:401:35 | dst | tests.js:401:33:401:40 | dst[key] | provenance | Config |
|
||||
| tests.js:401:33:401:40 | dst[key] | tests.js:398:30:398:32 | dst | provenance | |
|
||||
| tests.js:401:33:401:40 | dst[key] | tests.js:398:30:398:32 | dst | provenance | |
|
||||
| tests.js:401:37:401:39 | key | tests.js:401:33:401:40 | dst[key] | provenance | |
|
||||
| tests.js:401:37:401:39 | key | tests.js:401:33:401:40 | dst[key] | provenance | |
|
||||
| tests.js:401:37:401:39 | key | tests.js:401:33:401:40 | dst[key] | provenance | Config |
|
||||
| tests.js:401:37:401:39 | key | tests.js:401:33:401:40 | dst[key] | provenance | Config |
|
||||
| tests.js:401:43:401:47 | value | tests.js:398:35:398:37 | src | provenance | |
|
||||
| tests.js:408:22:408:24 | obj | tests.js:409:12:409:14 | obj | provenance | |
|
||||
| tests.js:408:27:408:29 | key | tests.js:409:16:409:18 | key | provenance | |
|
||||
| tests.js:409:12:409:14 | obj | tests.js:409:12:409:19 | obj[key] | provenance | |
|
||||
| tests.js:409:16:409:18 | key | tests.js:409:12:409:19 | obj[key] | provenance | |
|
||||
| tests.js:409:12:409:14 | obj | tests.js:409:12:409:19 | obj[key] | provenance | Config |
|
||||
| tests.js:409:16:409:18 | key | tests.js:409:12:409:19 | obj[key] | provenance | Config |
|
||||
| tests.js:412:31:412:33 | dst | tests.js:415:34:415:36 | dst | provenance | |
|
||||
| tests.js:412:31:412:33 | dst | tests.js:419:13:419:15 | dst | provenance | |
|
||||
| tests.js:412:36:412:38 | src | tests.js:414:33:414:35 | src | provenance | |
|
||||
@@ -1128,21 +1128,21 @@ edges
|
||||
| tests.js:414:13:414:41 | value | tests.js:419:24:419:28 | value | provenance | |
|
||||
| tests.js:414:21:414:41 | wrapped ... c, key) | tests.js:414:13:414:41 | value | provenance | |
|
||||
| tests.js:414:33:414:35 | src | tests.js:408:22:408:24 | obj | provenance | |
|
||||
| tests.js:414:33:414:35 | src | tests.js:414:21:414:41 | wrapped ... c, key) | provenance | |
|
||||
| tests.js:414:33:414:35 | src | tests.js:414:21:414:41 | wrapped ... c, key) | provenance | Config |
|
||||
| tests.js:414:38:414:40 | key | tests.js:408:27:408:29 | key | provenance | |
|
||||
| tests.js:414:38:414:40 | key | tests.js:414:21:414:41 | wrapped ... c, key) | provenance | |
|
||||
| tests.js:414:38:414:40 | key | tests.js:414:21:414:41 | wrapped ... c, key) | provenance | Config |
|
||||
| tests.js:415:13:415:42 | target | tests.js:417:34:417:39 | target | provenance | |
|
||||
| tests.js:415:22:415:42 | wrapped ... t, key) | tests.js:415:13:415:42 | target | provenance | |
|
||||
| tests.js:415:34:415:36 | dst | tests.js:408:22:408:24 | obj | provenance | |
|
||||
| tests.js:415:34:415:36 | dst | tests.js:415:22:415:42 | wrapped ... t, key) | provenance | |
|
||||
| tests.js:415:34:415:36 | dst | tests.js:415:22:415:42 | wrapped ... t, key) | provenance | Config |
|
||||
| tests.js:415:39:415:41 | key | tests.js:408:27:408:29 | key | provenance | |
|
||||
| tests.js:415:39:415:41 | key | tests.js:415:22:415:42 | wrapped ... t, key) | provenance | |
|
||||
| tests.js:415:39:415:41 | key | tests.js:415:22:415:42 | wrapped ... t, key) | provenance | Config |
|
||||
| tests.js:417:34:417:39 | target | tests.js:412:31:412:33 | dst | provenance | |
|
||||
| tests.js:417:42:417:46 | value | tests.js:412:36:412:38 | src | provenance | |
|
||||
| tests.js:424:25:424:27 | obj | tests.js:426:12:426:14 | obj | provenance | |
|
||||
| tests.js:424:30:424:32 | key | tests.js:426:16:426:18 | key | provenance | |
|
||||
| tests.js:426:12:426:14 | obj | tests.js:426:12:426:19 | obj[key] | provenance | |
|
||||
| tests.js:426:16:426:18 | key | tests.js:426:12:426:19 | obj[key] | provenance | |
|
||||
| tests.js:426:12:426:14 | obj | tests.js:426:12:426:19 | obj[key] | provenance | Config |
|
||||
| tests.js:426:16:426:18 | key | tests.js:426:12:426:19 | obj[key] | provenance | Config |
|
||||
| tests.js:429:34:429:36 | dst | tests.js:432:37:432:39 | dst | provenance | |
|
||||
| tests.js:429:34:429:36 | dst | tests.js:436:13:436:15 | dst | provenance | |
|
||||
| tests.js:429:39:429:41 | src | tests.js:431:36:431:38 | src | provenance | |
|
||||
@@ -1153,26 +1153,26 @@ edges
|
||||
| tests.js:431:13:431:44 | value | tests.js:436:24:436:28 | value | provenance | |
|
||||
| tests.js:431:21:431:44 | almostS ... c, key) | tests.js:431:13:431:44 | value | provenance | |
|
||||
| tests.js:431:36:431:38 | src | tests.js:424:25:424:27 | obj | provenance | |
|
||||
| tests.js:431:36:431:38 | src | tests.js:431:21:431:44 | almostS ... c, key) | provenance | |
|
||||
| tests.js:431:36:431:38 | src | tests.js:431:21:431:44 | almostS ... c, key) | provenance | Config |
|
||||
| tests.js:431:41:431:43 | key | tests.js:424:30:424:32 | key | provenance | |
|
||||
| tests.js:431:41:431:43 | key | tests.js:431:21:431:44 | almostS ... c, key) | provenance | |
|
||||
| tests.js:431:41:431:43 | key | tests.js:431:21:431:44 | almostS ... c, key) | provenance | Config |
|
||||
| tests.js:432:13:432:45 | target | tests.js:434:37:434:42 | target | provenance | |
|
||||
| tests.js:432:22:432:45 | almostS ... t, key) | tests.js:432:13:432:45 | target | provenance | |
|
||||
| tests.js:432:37:432:39 | dst | tests.js:424:25:424:27 | obj | provenance | |
|
||||
| tests.js:432:37:432:39 | dst | tests.js:432:22:432:45 | almostS ... t, key) | provenance | |
|
||||
| tests.js:432:37:432:39 | dst | tests.js:432:22:432:45 | almostS ... t, key) | provenance | Config |
|
||||
| tests.js:432:42:432:44 | key | tests.js:424:30:424:32 | key | provenance | |
|
||||
| tests.js:432:42:432:44 | key | tests.js:432:22:432:45 | almostS ... t, key) | provenance | |
|
||||
| tests.js:432:42:432:44 | key | tests.js:432:22:432:45 | almostS ... t, key) | provenance | Config |
|
||||
| tests.js:434:37:434:42 | target | tests.js:429:34:429:36 | dst | provenance | |
|
||||
| tests.js:434:45:434:49 | value | tests.js:429:39:429:41 | src | provenance | |
|
||||
| tests.js:441:19:441:21 | obj | tests.js:443:12:443:14 | obj | provenance | |
|
||||
| tests.js:443:12:443:14 | obj | tests.js:443:12:443:19 | obj[key] | provenance | |
|
||||
| tests.js:443:12:443:14 | obj | tests.js:443:12:443:19 | obj[key] | provenance | Config |
|
||||
| tests.js:446:33:446:35 | src | tests.js:448:30:448:32 | src | provenance | |
|
||||
| tests.js:447:14:447:16 | key | tests.js:453:17:453:19 | key | provenance | |
|
||||
| tests.js:448:13:448:38 | value | tests.js:451:39:451:43 | value | provenance | |
|
||||
| tests.js:448:13:448:38 | value | tests.js:453:24:453:28 | value | provenance | |
|
||||
| tests.js:448:21:448:38 | safeRead(src, key) | tests.js:448:13:448:38 | value | provenance | |
|
||||
| tests.js:448:30:448:32 | src | tests.js:441:19:441:21 | obj | provenance | |
|
||||
| tests.js:448:30:448:32 | src | tests.js:448:21:448:38 | safeRead(src, key) | provenance | |
|
||||
| tests.js:448:30:448:32 | src | tests.js:448:21:448:38 | safeRead(src, key) | provenance | Config |
|
||||
| tests.js:451:39:451:43 | value | tests.js:446:33:446:35 | src | provenance | |
|
||||
| tests.js:458:26:458:28 | dst | tests.js:462:29:462:31 | dst | provenance | |
|
||||
| tests.js:458:26:458:28 | dst | tests.js:465:30:465:32 | dst | provenance | |
|
||||
@@ -1189,23 +1189,23 @@ edges
|
||||
| tests.js:460:25:460:27 | key | tests.js:466:34:466:36 | key | provenance | |
|
||||
| tests.js:460:25:460:27 | key | tests.js:466:43:466:45 | key | provenance | |
|
||||
| tests.js:460:25:460:27 | key | tests.js:467:34:467:36 | key | provenance | |
|
||||
| tests.js:462:29:462:31 | dst | tests.js:462:29:462:36 | dst[key] | provenance | |
|
||||
| tests.js:462:29:462:31 | dst | tests.js:462:29:462:36 | dst[key] | provenance | Config |
|
||||
| tests.js:462:29:462:36 | dst[key] | tests.js:458:26:458:28 | dst | provenance | |
|
||||
| tests.js:462:33:462:35 | key | tests.js:462:29:462:36 | dst[key] | provenance | |
|
||||
| tests.js:462:39:462:41 | src | tests.js:462:39:462:46 | src[key] | provenance | |
|
||||
| tests.js:462:33:462:35 | key | tests.js:462:29:462:36 | dst[key] | provenance | Config |
|
||||
| tests.js:462:39:462:41 | src | tests.js:462:39:462:46 | src[key] | provenance | Config |
|
||||
| tests.js:462:39:462:46 | src[key] | tests.js:458:31:458:33 | src | provenance | |
|
||||
| tests.js:462:43:462:45 | key | tests.js:462:39:462:46 | src[key] | provenance | |
|
||||
| tests.js:465:41:465:43 | src | tests.js:465:41:465:48 | src[key] | provenance | |
|
||||
| tests.js:465:45:465:47 | key | tests.js:465:41:465:48 | src[key] | provenance | |
|
||||
| tests.js:466:43:466:45 | key | tests.js:466:41:466:46 | o[key] | provenance | |
|
||||
| tests.js:462:43:462:45 | key | tests.js:462:39:462:46 | src[key] | provenance | Config |
|
||||
| tests.js:465:41:465:43 | src | tests.js:465:41:465:48 | src[key] | provenance | Config |
|
||||
| tests.js:465:45:465:47 | key | tests.js:465:41:465:48 | src[key] | provenance | Config |
|
||||
| tests.js:466:43:466:45 | key | tests.js:466:41:466:46 | o[key] | provenance | Config |
|
||||
| tests.js:472:38:472:40 | dst | tests.js:475:41:475:43 | dst | provenance | |
|
||||
| tests.js:472:38:472:40 | dst | tests.js:477:13:477:15 | dst | provenance | |
|
||||
| tests.js:473:18:473:22 | value | tests.js:477:24:477:28 | value | provenance | |
|
||||
| tests.js:473:25:473:27 | key | tests.js:475:45:475:47 | key | provenance | |
|
||||
| tests.js:473:25:473:27 | key | tests.js:477:17:477:19 | key | provenance | |
|
||||
| tests.js:475:41:475:43 | dst | tests.js:475:41:475:48 | dst[key] | provenance | |
|
||||
| tests.js:475:41:475:43 | dst | tests.js:475:41:475:48 | dst[key] | provenance | Config |
|
||||
| tests.js:475:41:475:48 | dst[key] | tests.js:472:38:472:40 | dst | provenance | |
|
||||
| tests.js:475:45:475:47 | key | tests.js:475:41:475:48 | dst[key] | provenance | |
|
||||
| tests.js:475:45:475:47 | key | tests.js:475:41:475:48 | dst[key] | provenance | Config |
|
||||
| tests.js:483:26:483:28 | dst | tests.js:487:29:487:31 | dst | provenance | |
|
||||
| tests.js:483:26:483:28 | dst | tests.js:489:13:489:15 | dst | provenance | |
|
||||
| tests.js:483:31:483:33 | src | tests.js:487:39:487:41 | src | provenance | |
|
||||
@@ -1215,16 +1215,16 @@ edges
|
||||
| tests.js:484:14:484:16 | key | tests.js:487:43:487:45 | key | provenance | |
|
||||
| tests.js:484:14:484:16 | key | tests.js:489:17:489:19 | key | provenance | |
|
||||
| tests.js:484:14:484:16 | key | tests.js:489:28:489:30 | key | provenance | |
|
||||
| tests.js:487:29:487:31 | dst | tests.js:487:29:487:36 | dst[key] | provenance | |
|
||||
| tests.js:487:29:487:31 | dst | tests.js:487:29:487:36 | dst[key] | provenance | Config |
|
||||
| tests.js:487:29:487:36 | dst[key] | tests.js:483:26:483:28 | dst | provenance | |
|
||||
| tests.js:487:33:487:35 | key | tests.js:487:29:487:36 | dst[key] | provenance | |
|
||||
| tests.js:487:39:487:41 | src | tests.js:487:39:487:46 | src[key] | provenance | |
|
||||
| tests.js:487:33:487:35 | key | tests.js:487:29:487:36 | dst[key] | provenance | Config |
|
||||
| tests.js:487:39:487:41 | src | tests.js:487:39:487:46 | src[key] | provenance | Config |
|
||||
| tests.js:487:39:487:46 | src[key] | tests.js:483:31:483:33 | src | provenance | |
|
||||
| tests.js:487:39:487:46 | src[key] | tests.js:483:31:483:33 | src | provenance | |
|
||||
| tests.js:487:39:487:46 | src[key] | tests.js:483:31:483:33 | src | provenance | |
|
||||
| tests.js:487:43:487:45 | key | tests.js:487:39:487:46 | src[key] | provenance | |
|
||||
| tests.js:489:24:489:26 | src | tests.js:489:24:489:31 | src[key] | provenance | |
|
||||
| tests.js:489:28:489:30 | key | tests.js:489:24:489:31 | src[key] | provenance | |
|
||||
| tests.js:487:43:487:45 | key | tests.js:487:39:487:46 | src[key] | provenance | Config |
|
||||
| tests.js:489:24:489:26 | src | tests.js:489:24:489:31 | src[key] | provenance | Config |
|
||||
| tests.js:489:28:489:30 | key | tests.js:489:24:489:31 | src[key] | provenance | Config |
|
||||
| tests.js:494:32:494:34 | src | tests.js:498:21:498:23 | src | provenance | |
|
||||
| tests.js:495:14:495:16 | key | tests.js:498:25:498:27 | key | provenance | |
|
||||
| tests.js:495:14:495:16 | key | tests.js:502:17:502:19 | key | provenance | |
|
||||
@@ -1233,11 +1233,11 @@ edges
|
||||
| tests.js:498:13:498:28 | value | tests.js:502:24:502:28 | value | provenance | |
|
||||
| tests.js:498:13:498:28 | value | tests.js:502:24:502:28 | value | provenance | |
|
||||
| tests.js:498:13:498:28 | value | tests.js:502:24:502:28 | value | provenance | |
|
||||
| tests.js:498:21:498:23 | src | tests.js:498:21:498:28 | src[key] | provenance | |
|
||||
| tests.js:498:21:498:23 | src | tests.js:498:21:498:28 | src[key] | provenance | Config |
|
||||
| tests.js:498:21:498:28 | src[key] | tests.js:498:13:498:28 | value | provenance | |
|
||||
| tests.js:498:21:498:28 | src[key] | tests.js:498:13:498:28 | value | provenance | |
|
||||
| tests.js:498:21:498:28 | src[key] | tests.js:498:13:498:28 | value | provenance | |
|
||||
| tests.js:498:25:498:27 | key | tests.js:498:21:498:28 | src[key] | provenance | |
|
||||
| tests.js:498:25:498:27 | key | tests.js:498:21:498:28 | src[key] | provenance | Config |
|
||||
| tests.js:500:38:500:42 | value | tests.js:494:32:494:34 | src | provenance | |
|
||||
| tests.js:500:38:500:42 | value | tests.js:494:32:494:34 | src | provenance | |
|
||||
| tests.js:508:30:508:32 | dst | tests.js:513:33:513:35 | dst | provenance | |
|
||||
@@ -1249,25 +1249,25 @@ edges
|
||||
| tests.js:511:13:511:25 | key | tests.js:516:36:516:38 | key | provenance | |
|
||||
| tests.js:511:13:511:25 | key | tests.js:517:40:517:42 | key | provenance | |
|
||||
| tests.js:511:19:511:25 | keys[i] | tests.js:511:13:511:25 | key | provenance | |
|
||||
| tests.js:513:33:513:35 | dst | tests.js:513:33:513:40 | dst[key] | provenance | |
|
||||
| tests.js:513:33:513:35 | dst | tests.js:513:33:513:40 | dst[key] | provenance | Config |
|
||||
| tests.js:513:33:513:40 | dst[key] | tests.js:508:30:508:32 | dst | provenance | |
|
||||
| tests.js:513:37:513:39 | key | tests.js:513:33:513:40 | dst[key] | provenance | |
|
||||
| tests.js:513:43:513:45 | src | tests.js:513:43:513:50 | src[key] | provenance | |
|
||||
| tests.js:513:37:513:39 | key | tests.js:513:33:513:40 | dst[key] | provenance | Config |
|
||||
| tests.js:513:43:513:45 | src | tests.js:513:43:513:50 | src[key] | provenance | Config |
|
||||
| tests.js:513:43:513:50 | src[key] | tests.js:508:35:508:37 | src | provenance | |
|
||||
| tests.js:513:47:513:49 | key | tests.js:513:43:513:50 | src[key] | provenance | |
|
||||
| tests.js:516:32:516:34 | src | tests.js:516:32:516:39 | src[key] | provenance | |
|
||||
| tests.js:516:36:516:38 | key | tests.js:516:32:516:39 | src[key] | provenance | |
|
||||
| tests.js:513:47:513:49 | key | tests.js:513:43:513:50 | src[key] | provenance | Config |
|
||||
| tests.js:516:32:516:34 | src | tests.js:516:32:516:39 | src[key] | provenance | Config |
|
||||
| tests.js:516:36:516:38 | key | tests.js:516:32:516:39 | src[key] | provenance | Config |
|
||||
| tests.js:525:14:525:16 | key | tests.js:529:17:529:19 | key | provenance | |
|
||||
| tests.js:525:14:525:16 | key | tests.js:529:28:529:30 | key | provenance | |
|
||||
| tests.js:529:28:529:30 | key | tests.js:529:24:529:31 | src[key] | provenance | |
|
||||
| tests.js:529:28:529:30 | key | tests.js:529:24:529:31 | src[key] | provenance | Config |
|
||||
| tests.js:534:31:534:33 | obj | tests.js:538:27:538:29 | obj | provenance | |
|
||||
| tests.js:534:36:534:43 | callback [dst] | tests.js:538:9:538:16 | callback [dst] | provenance | |
|
||||
| tests.js:538:9:538:16 | callback [dst] | tests.js:545:33:545:35 | dst | provenance | |
|
||||
| tests.js:538:9:538:16 | callback [dst] | tests.js:547:13:547:15 | dst | provenance | |
|
||||
| tests.js:538:18:538:24 | keys[i] | tests.js:543:32:543:34 | key | provenance | |
|
||||
| tests.js:538:27:538:29 | obj | tests.js:538:27:538:38 | obj[keys[i]] | provenance | |
|
||||
| tests.js:538:27:538:29 | obj | tests.js:538:27:538:38 | obj[keys[i]] | provenance | Config |
|
||||
| tests.js:538:27:538:38 | obj[keys[i]] | tests.js:543:37:543:41 | value | provenance | |
|
||||
| tests.js:538:31:538:37 | keys[i] | tests.js:538:27:538:38 | obj[keys[i]] | provenance | |
|
||||
| tests.js:538:31:538:37 | keys[i] | tests.js:538:27:538:38 | obj[keys[i]] | provenance | Config |
|
||||
| tests.js:542:30:542:32 | dst | tests.js:534:36:534:43 | callback [dst] | provenance | |
|
||||
| tests.js:542:30:542:32 | dst | tests.js:545:33:545:35 | dst | provenance | |
|
||||
| tests.js:542:30:542:32 | dst | tests.js:547:13:547:15 | dst | provenance | |
|
||||
@@ -1277,34 +1277,34 @@ edges
|
||||
| tests.js:543:32:543:34 | key | tests.js:547:17:547:19 | key | provenance | |
|
||||
| tests.js:543:37:543:41 | value | tests.js:545:43:545:47 | value | provenance | |
|
||||
| tests.js:543:37:543:41 | value | tests.js:547:24:547:28 | value | provenance | |
|
||||
| tests.js:545:33:545:35 | dst | tests.js:545:33:545:40 | dst[key] | provenance | |
|
||||
| tests.js:545:33:545:35 | dst | tests.js:545:33:545:40 | dst[key] | provenance | Config |
|
||||
| tests.js:545:33:545:40 | dst[key] | tests.js:542:30:542:32 | dst | provenance | |
|
||||
| tests.js:545:37:545:39 | key | tests.js:545:33:545:40 | dst[key] | provenance | |
|
||||
| tests.js:545:37:545:39 | key | tests.js:545:33:545:40 | dst[key] | provenance | Config |
|
||||
| tests.js:545:43:545:47 | value | tests.js:542:35:542:37 | src | provenance | |
|
||||
| tests.js:552:35:552:37 | src | tests.js:557:43:557:45 | src | provenance | |
|
||||
| tests.js:552:35:552:37 | src | tests.js:559:24:559:26 | src | provenance | |
|
||||
| tests.js:553:14:553:16 | key | tests.js:559:17:559:19 | key | provenance | |
|
||||
| tests.js:553:14:553:16 | key | tests.js:559:28:559:30 | key | provenance | |
|
||||
| tests.js:557:43:557:45 | src | tests.js:557:43:557:50 | src[key] | provenance | |
|
||||
| tests.js:557:43:557:45 | src | tests.js:557:43:557:50 | src[key] | provenance | Config |
|
||||
| tests.js:557:43:557:50 | src[key] | tests.js:552:35:552:37 | src | provenance | |
|
||||
| tests.js:559:24:559:26 | src | tests.js:559:24:559:31 | src[key] | provenance | |
|
||||
| tests.js:559:28:559:30 | key | tests.js:559:24:559:31 | src[key] | provenance | |
|
||||
| tests.js:559:24:559:26 | src | tests.js:559:24:559:31 | src[key] | provenance | Config |
|
||||
| tests.js:559:28:559:30 | key | tests.js:559:24:559:31 | src[key] | provenance | Config |
|
||||
| tests.js:564:35:564:37 | src | tests.js:569:43:569:45 | src | provenance | |
|
||||
| tests.js:564:35:564:37 | src | tests.js:571:24:571:26 | src | provenance | |
|
||||
| tests.js:565:14:565:16 | key | tests.js:571:17:571:19 | key | provenance | |
|
||||
| tests.js:565:14:565:16 | key | tests.js:571:28:571:30 | key | provenance | |
|
||||
| tests.js:569:43:569:45 | src | tests.js:569:43:569:50 | src[key] | provenance | |
|
||||
| tests.js:569:43:569:45 | src | tests.js:569:43:569:50 | src[key] | provenance | Config |
|
||||
| tests.js:569:43:569:50 | src[key] | tests.js:564:35:564:37 | src | provenance | |
|
||||
| tests.js:571:24:571:26 | src | tests.js:571:24:571:31 | src[key] | provenance | |
|
||||
| tests.js:571:28:571:30 | key | tests.js:571:24:571:31 | src[key] | provenance | |
|
||||
| tests.js:571:24:571:26 | src | tests.js:571:24:571:31 | src[key] | provenance | Config |
|
||||
| tests.js:571:28:571:30 | key | tests.js:571:24:571:31 | src[key] | provenance | Config |
|
||||
| tests.js:576:30:576:32 | src | tests.js:580:38:580:40 | src | provenance | |
|
||||
| tests.js:576:30:576:32 | src | tests.js:582:24:582:26 | src | provenance | |
|
||||
| tests.js:577:14:577:16 | key | tests.js:582:17:582:19 | key | provenance | |
|
||||
| tests.js:577:14:577:16 | key | tests.js:582:28:582:30 | key | provenance | |
|
||||
| tests.js:580:38:580:40 | src | tests.js:580:38:580:45 | src[key] | provenance | |
|
||||
| tests.js:580:38:580:40 | src | tests.js:580:38:580:45 | src[key] | provenance | Config |
|
||||
| tests.js:580:38:580:45 | src[key] | tests.js:576:30:576:32 | src | provenance | |
|
||||
| tests.js:582:24:582:26 | src | tests.js:582:24:582:31 | src[key] | provenance | |
|
||||
| tests.js:582:28:582:30 | key | tests.js:582:24:582:31 | src[key] | provenance | |
|
||||
| tests.js:582:24:582:26 | src | tests.js:582:24:582:31 | src[key] | provenance | Config |
|
||||
| tests.js:582:28:582:30 | key | tests.js:582:24:582:31 | src[key] | provenance | Config |
|
||||
| tests.js:591:25:591:27 | obj | tests.js:592:7:592:9 | obj | provenance | |
|
||||
| tests.js:591:25:591:27 | obj | tests.js:592:21:592:23 | obj | provenance | |
|
||||
| tests.js:592:7:592:9 | obj | tests.js:592:21:592:23 | obj | provenance | |
|
||||
@@ -1318,16 +1318,16 @@ edges
|
||||
| tests.js:601:16:601:18 | key | tests.js:603:52:603:54 | key | provenance | |
|
||||
| tests.js:601:16:601:18 | key | tests.js:605:18:605:20 | key | provenance | |
|
||||
| tests.js:601:16:601:18 | key | tests.js:605:47:605:49 | key | provenance | |
|
||||
| tests.js:603:34:603:37 | dest | tests.js:603:34:603:42 | dest[key] | provenance | |
|
||||
| tests.js:603:34:603:37 | dest | tests.js:603:34:603:42 | dest[key] | provenance | Config |
|
||||
| tests.js:603:34:603:42 | dest[key] | tests.js:600:31:600:34 | dest | provenance | |
|
||||
| tests.js:603:39:603:41 | key | tests.js:603:34:603:42 | dest[key] | provenance | |
|
||||
| tests.js:603:45:603:50 | source | tests.js:603:45:603:55 | source[key] | provenance | |
|
||||
| tests.js:603:39:603:41 | key | tests.js:603:34:603:42 | dest[key] | provenance | Config |
|
||||
| tests.js:603:45:603:50 | source | tests.js:603:45:603:55 | source[key] | provenance | Config |
|
||||
| tests.js:603:45:603:55 | source[key] | tests.js:600:37:600:42 | source | provenance | |
|
||||
| tests.js:603:52:603:54 | key | tests.js:603:45:603:55 | source[key] | provenance | |
|
||||
| tests.js:605:40:605:45 | source | tests.js:605:40:605:50 | source[key] | provenance | |
|
||||
| tests.js:603:52:603:54 | key | tests.js:603:45:603:55 | source[key] | provenance | Config |
|
||||
| tests.js:605:40:605:45 | source | tests.js:605:40:605:50 | source[key] | provenance | Config |
|
||||
| tests.js:605:40:605:50 | source[key] | tests.js:591:25:591:27 | obj | provenance | |
|
||||
| tests.js:605:40:605:50 | source[key] | tests.js:605:25:605:51 | capture ... e[key]) | provenance | |
|
||||
| tests.js:605:47:605:49 | key | tests.js:605:40:605:50 | source[key] | provenance | |
|
||||
| tests.js:605:47:605:49 | key | tests.js:605:40:605:50 | source[key] | provenance | Config |
|
||||
subpaths
|
||||
| tests.js:355:53:355:63 | target[key] | tests.js:348:32:348:37 | target | tests.js:361:12:361:17 | target | tests.js:355:31:355:86 | mergePl ... ptions) |
|
||||
| tests.js:371:62:371:72 | target[key] | tests.js:364:41:364:46 | target | tests.js:377:12:377:17 | target | tests.js:371:31:371:95 | mergePl ... ptions) |
|
||||
|
||||
@@ -31,31 +31,31 @@ nodes
|
||||
| webix/webix.js:5:31:5:35 | event | semmle.label | event |
|
||||
| webix/webix.js:5:31:5:40 | event.data | semmle.label | event.data |
|
||||
edges
|
||||
| angularmerge.js:1:30:1:34 | event | angularmerge.js:2:32:2:36 | event |
|
||||
| angularmerge.js:2:32:2:36 | event | angularmerge.js:2:32:2:41 | event.data |
|
||||
| angularmerge.js:2:32:2:41 | event.data | angularmerge.js:2:21:2:42 | JSON.pa ... t.data) |
|
||||
| src-vulnerable-lodash/tst.js:10:17:12:5 | [post update] {\\n ... K\\n } [value] | src-vulnerable-lodash/tst.js:10:17:12:5 | {\\n ... K\\n } [value] |
|
||||
| src-vulnerable-lodash/tst.js:10:17:12:5 | {\\n ... K\\n } [value] | src-vulnerable-lodash/tst.js:10:17:12:5 | {\\n ... K\\n } |
|
||||
| src-vulnerable-lodash/tst.js:11:16:11:30 | req.query.value | src-vulnerable-lodash/tst.js:10:17:12:5 | [post update] {\\n ... K\\n } [value] |
|
||||
| src-vulnerable-lodash/tst.js:14:9:16:5 | opts [thing] | src-vulnerable-lodash/tst.js:18:16:18:19 | opts [thing] |
|
||||
| src-vulnerable-lodash/tst.js:14:16:16:5 | {\\n ... e\\n } [thing] | src-vulnerable-lodash/tst.js:14:9:16:5 | opts [thing] |
|
||||
| src-vulnerable-lodash/tst.js:15:14:15:28 | req.query.value | src-vulnerable-lodash/tst.js:14:16:16:5 | {\\n ... e\\n } [thing] |
|
||||
| src-vulnerable-lodash/tst.js:17:17:19:5 | [post update] {\\n ... K\\n } [value] | src-vulnerable-lodash/tst.js:17:17:19:5 | {\\n ... K\\n } [value] |
|
||||
| src-vulnerable-lodash/tst.js:17:17:19:5 | {\\n ... K\\n } [value] | src-vulnerable-lodash/tst.js:17:17:19:5 | {\\n ... K\\n } |
|
||||
| src-vulnerable-lodash/tst.js:18:16:18:19 | opts [thing] | src-vulnerable-lodash/tst.js:18:16:18:25 | opts.thing |
|
||||
| src-vulnerable-lodash/tst.js:18:16:18:25 | opts.thing | src-vulnerable-lodash/tst.js:17:17:19:5 | [post update] {\\n ... K\\n } [value] |
|
||||
| webix/webix.html:3:34:3:38 | event | webix/webix.html:4:37:4:41 | event |
|
||||
| webix/webix.html:3:34:3:38 | event | webix/webix.html:5:35:5:39 | event |
|
||||
| webix/webix.html:4:37:4:41 | event | webix/webix.html:4:37:4:46 | event.data |
|
||||
| webix/webix.html:4:37:4:46 | event.data | webix/webix.html:4:26:4:47 | JSON.pa ... t.data) |
|
||||
| webix/webix.html:5:35:5:39 | event | webix/webix.html:5:35:5:44 | event.data |
|
||||
| webix/webix.html:5:35:5:44 | event.data | webix/webix.html:5:24:5:45 | JSON.pa ... t.data) |
|
||||
| webix/webix.js:3:30:3:34 | event | webix/webix.js:4:33:4:37 | event |
|
||||
| webix/webix.js:3:30:3:34 | event | webix/webix.js:5:31:5:35 | event |
|
||||
| webix/webix.js:4:33:4:37 | event | webix/webix.js:4:33:4:42 | event.data |
|
||||
| webix/webix.js:4:33:4:42 | event.data | webix/webix.js:4:22:4:43 | JSON.pa ... t.data) |
|
||||
| webix/webix.js:5:31:5:35 | event | webix/webix.js:5:31:5:40 | event.data |
|
||||
| webix/webix.js:5:31:5:40 | event.data | webix/webix.js:5:20:5:41 | JSON.pa ... t.data) |
|
||||
| angularmerge.js:1:30:1:34 | event | angularmerge.js:2:32:2:36 | event | provenance | |
|
||||
| angularmerge.js:2:32:2:36 | event | angularmerge.js:2:32:2:41 | event.data | provenance | |
|
||||
| angularmerge.js:2:32:2:41 | event.data | angularmerge.js:2:21:2:42 | JSON.pa ... t.data) | provenance | Config |
|
||||
| src-vulnerable-lodash/tst.js:10:17:12:5 | [post update] {\\n ... K\\n } [value] | src-vulnerable-lodash/tst.js:10:17:12:5 | {\\n ... K\\n } [value] | provenance | |
|
||||
| src-vulnerable-lodash/tst.js:10:17:12:5 | {\\n ... K\\n } [value] | src-vulnerable-lodash/tst.js:10:17:12:5 | {\\n ... K\\n } | provenance | |
|
||||
| src-vulnerable-lodash/tst.js:11:16:11:30 | req.query.value | src-vulnerable-lodash/tst.js:10:17:12:5 | [post update] {\\n ... K\\n } [value] | provenance | |
|
||||
| src-vulnerable-lodash/tst.js:14:9:16:5 | opts [thing] | src-vulnerable-lodash/tst.js:18:16:18:19 | opts [thing] | provenance | |
|
||||
| src-vulnerable-lodash/tst.js:14:16:16:5 | {\\n ... e\\n } [thing] | src-vulnerable-lodash/tst.js:14:9:16:5 | opts [thing] | provenance | |
|
||||
| src-vulnerable-lodash/tst.js:15:14:15:28 | req.query.value | src-vulnerable-lodash/tst.js:14:16:16:5 | {\\n ... e\\n } [thing] | provenance | |
|
||||
| src-vulnerable-lodash/tst.js:17:17:19:5 | [post update] {\\n ... K\\n } [value] | src-vulnerable-lodash/tst.js:17:17:19:5 | {\\n ... K\\n } [value] | provenance | |
|
||||
| src-vulnerable-lodash/tst.js:17:17:19:5 | {\\n ... K\\n } [value] | src-vulnerable-lodash/tst.js:17:17:19:5 | {\\n ... K\\n } | provenance | |
|
||||
| src-vulnerable-lodash/tst.js:18:16:18:19 | opts [thing] | src-vulnerable-lodash/tst.js:18:16:18:25 | opts.thing | provenance | |
|
||||
| src-vulnerable-lodash/tst.js:18:16:18:25 | opts.thing | src-vulnerable-lodash/tst.js:17:17:19:5 | [post update] {\\n ... K\\n } [value] | provenance | |
|
||||
| webix/webix.html:3:34:3:38 | event | webix/webix.html:4:37:4:41 | event | provenance | |
|
||||
| webix/webix.html:3:34:3:38 | event | webix/webix.html:5:35:5:39 | event | provenance | |
|
||||
| webix/webix.html:4:37:4:41 | event | webix/webix.html:4:37:4:46 | event.data | provenance | |
|
||||
| webix/webix.html:4:37:4:46 | event.data | webix/webix.html:4:26:4:47 | JSON.pa ... t.data) | provenance | Config |
|
||||
| webix/webix.html:5:35:5:39 | event | webix/webix.html:5:35:5:44 | event.data | provenance | |
|
||||
| webix/webix.html:5:35:5:44 | event.data | webix/webix.html:5:24:5:45 | JSON.pa ... t.data) | provenance | Config |
|
||||
| webix/webix.js:3:30:3:34 | event | webix/webix.js:4:33:4:37 | event | provenance | |
|
||||
| webix/webix.js:3:30:3:34 | event | webix/webix.js:5:31:5:35 | event | provenance | |
|
||||
| webix/webix.js:4:33:4:37 | event | webix/webix.js:4:33:4:42 | event.data | provenance | |
|
||||
| webix/webix.js:4:33:4:42 | event.data | webix/webix.js:4:22:4:43 | JSON.pa ... t.data) | provenance | Config |
|
||||
| webix/webix.js:5:31:5:35 | event | webix/webix.js:5:31:5:40 | event.data | provenance | |
|
||||
| webix/webix.js:5:31:5:40 | event.data | webix/webix.js:5:20:5:41 | JSON.pa ... t.data) | provenance | Config |
|
||||
subpaths
|
||||
#select
|
||||
| angularmerge.js:2:21:2:42 | JSON.pa ... t.data) | angularmerge.js:1:30:1:34 | event | angularmerge.js:2:21:2:42 | JSON.pa ... t.data) | Prototype pollution caused by merging a $@ using a vulnerable version of $@. | angularmerge.js:1:30:1:34 | event | user-controlled value | angularmerge.js:2:3:2:43 | angular ... .data)) | angular |
|
||||
|
||||
@@ -1,16 +1,16 @@
|
||||
edges
|
||||
| clientSide.js:11:11:11:53 | query | clientSide.js:12:42:12:46 | query |
|
||||
| clientSide.js:11:19:11:40 | window. ... .search | clientSide.js:11:19:11:53 | window. ... ring(1) |
|
||||
| clientSide.js:11:19:11:53 | window. ... ring(1) | clientSide.js:11:11:11:53 | query |
|
||||
| clientSide.js:12:42:12:46 | query | clientSide.js:12:13:12:54 | 'https: ... + '/id' |
|
||||
| clientSide.js:14:42:14:63 | window. ... .search | clientSide.js:14:13:14:63 | 'https: ... .search |
|
||||
| clientSide.js:16:11:16:54 | fragment | clientSide.js:17:42:17:49 | fragment |
|
||||
| clientSide.js:16:22:16:41 | window.location.hash | clientSide.js:16:22:16:54 | window. ... ring(1) |
|
||||
| clientSide.js:16:22:16:54 | window. ... ring(1) | clientSide.js:16:11:16:54 | fragment |
|
||||
| clientSide.js:17:42:17:49 | fragment | clientSide.js:17:13:17:57 | 'https: ... + '/id' |
|
||||
| clientSide.js:20:11:20:28 | name | clientSide.js:21:42:21:45 | name |
|
||||
| clientSide.js:20:18:20:28 | window.name | clientSide.js:20:11:20:28 | name |
|
||||
| clientSide.js:21:42:21:45 | name | clientSide.js:21:13:21:53 | 'https: ... + '/id' |
|
||||
| clientSide.js:11:11:11:53 | query | clientSide.js:12:42:12:46 | query | provenance | |
|
||||
| clientSide.js:11:19:11:40 | window. ... .search | clientSide.js:11:19:11:53 | window. ... ring(1) | provenance | |
|
||||
| clientSide.js:11:19:11:53 | window. ... ring(1) | clientSide.js:11:11:11:53 | query | provenance | |
|
||||
| clientSide.js:12:42:12:46 | query | clientSide.js:12:13:12:54 | 'https: ... + '/id' | provenance | |
|
||||
| clientSide.js:14:42:14:63 | window. ... .search | clientSide.js:14:13:14:63 | 'https: ... .search | provenance | |
|
||||
| clientSide.js:16:11:16:54 | fragment | clientSide.js:17:42:17:49 | fragment | provenance | |
|
||||
| clientSide.js:16:22:16:41 | window.location.hash | clientSide.js:16:22:16:54 | window. ... ring(1) | provenance | |
|
||||
| clientSide.js:16:22:16:54 | window. ... ring(1) | clientSide.js:16:11:16:54 | fragment | provenance | |
|
||||
| clientSide.js:17:42:17:49 | fragment | clientSide.js:17:13:17:57 | 'https: ... + '/id' | provenance | |
|
||||
| clientSide.js:20:11:20:28 | name | clientSide.js:21:42:21:45 | name | provenance | |
|
||||
| clientSide.js:20:18:20:28 | window.name | clientSide.js:20:11:20:28 | name | provenance | |
|
||||
| clientSide.js:21:42:21:45 | name | clientSide.js:21:13:21:53 | 'https: ... + '/id' | provenance | |
|
||||
nodes
|
||||
| clientSide.js:11:11:11:53 | query | semmle.label | query |
|
||||
| clientSide.js:11:19:11:40 | window. ... .search | semmle.label | window. ... .search |
|
||||
|
||||
@@ -1,52 +1,52 @@
|
||||
edges
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:18:13:18:19 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:20:17:20:23 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:23:19:23:25 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:26:25:26:31 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:28:36:28:42 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:30:37:30:43 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:34:34:34:40 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:36:24:36:30 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:37:30:37:36 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:41:43:41:49 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:43:46:43:52 | tainted |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:45:50:45:56 | tainted |
|
||||
| serverSide.js:14:19:14:42 | url.par ... , true) | serverSide.js:14:9:14:52 | tainted |
|
||||
| serverSide.js:14:29:14:35 | req.url | serverSide.js:14:19:14:42 | url.par ... , true) |
|
||||
| serverSide.js:26:25:26:31 | tainted | serverSide.js:26:13:26:31 | "http://" + tainted |
|
||||
| serverSide.js:28:36:28:42 | tainted | serverSide.js:28:13:28:42 | "http:/ ... tainted |
|
||||
| serverSide.js:30:37:30:43 | tainted | serverSide.js:30:13:30:43 | "http:/ ... tainted |
|
||||
| serverSide.js:36:24:36:30 | tainted | serverSide.js:36:16:36:31 | new Uri(tainted) |
|
||||
| serverSide.js:37:30:37:36 | tainted | serverSide.js:37:22:37:37 | new Uri(tainted) |
|
||||
| serverSide.js:41:43:41:49 | tainted | serverSide.js:41:13:41:51 | `http:/ ... inted}` |
|
||||
| serverSide.js:43:46:43:52 | tainted | serverSide.js:43:13:43:54 | `http:/ ... inted}` |
|
||||
| serverSide.js:45:50:45:56 | tainted | serverSide.js:45:13:45:56 | 'http:/ ... tainted |
|
||||
| serverSide.js:58:9:58:52 | tainted | serverSide.js:61:29:61:35 | tainted |
|
||||
| serverSide.js:58:9:58:52 | tainted | serverSide.js:61:29:61:35 | tainted |
|
||||
| serverSide.js:58:19:58:42 | url.par ... , true) | serverSide.js:58:9:58:52 | tainted |
|
||||
| serverSide.js:58:29:58:35 | req.url | serverSide.js:58:19:58:42 | url.par ... , true) |
|
||||
| serverSide.js:61:29:61:35 | tainted | serverSide.js:64:30:64:36 | tainted |
|
||||
| serverSide.js:61:29:61:35 | tainted | serverSide.js:68:30:68:36 | tainted |
|
||||
| serverSide.js:74:9:74:52 | tainted | serverSide.js:76:19:76:25 | tainted |
|
||||
| serverSide.js:74:19:74:42 | url.par ... , true) | serverSide.js:74:9:74:52 | tainted |
|
||||
| serverSide.js:74:29:74:35 | req.url | serverSide.js:74:19:74:42 | url.par ... , true) |
|
||||
| serverSide.js:83:38:83:43 | param1 | serverSide.js:84:19:84:24 | param1 |
|
||||
| serverSide.js:90:19:90:28 | ctx.params | serverSide.js:90:19:90:32 | ctx.params.foo |
|
||||
| serverSide.js:92:19:92:28 | ctx.params | serverSide.js:92:19:92:32 | ctx.params.foo |
|
||||
| serverSide.js:98:9:98:52 | tainted | serverSide.js:100:19:100:25 | tainted |
|
||||
| serverSide.js:98:19:98:42 | url.par ... , true) | serverSide.js:98:9:98:52 | tainted |
|
||||
| serverSide.js:98:29:98:35 | req.url | serverSide.js:98:19:98:42 | url.par ... , true) |
|
||||
| serverSide.js:108:11:108:27 | url | serverSide.js:109:27:109:29 | url |
|
||||
| serverSide.js:108:17:108:27 | request.url | serverSide.js:108:11:108:27 | url |
|
||||
| serverSide.js:115:11:115:42 | url | serverSide.js:117:27:117:29 | url |
|
||||
| serverSide.js:115:17:115:42 | new URL ... , base) | serverSide.js:115:11:115:42 | url |
|
||||
| serverSide.js:115:25:115:35 | request.url | serverSide.js:115:17:115:42 | new URL ... , base) |
|
||||
| serverSide.js:123:9:123:52 | tainted | serverSide.js:127:14:127:20 | tainted |
|
||||
| serverSide.js:123:9:123:52 | tainted | serverSide.js:130:37:130:43 | tainted |
|
||||
| serverSide.js:123:19:123:42 | url.par ... , true) | serverSide.js:123:9:123:52 | tainted |
|
||||
| serverSide.js:123:29:123:35 | req.url | serverSide.js:123:19:123:42 | url.par ... , true) |
|
||||
| serverSide.js:130:9:130:45 | myUrl | serverSide.js:131:15:131:19 | myUrl |
|
||||
| serverSide.js:130:37:130:43 | tainted | serverSide.js:130:9:130:45 | myUrl |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:18:13:18:19 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:20:17:20:23 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:23:19:23:25 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:26:25:26:31 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:28:36:28:42 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:30:37:30:43 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:34:34:34:40 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:36:24:36:30 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:37:30:37:36 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:41:43:41:49 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:43:46:43:52 | tainted | provenance | |
|
||||
| serverSide.js:14:9:14:52 | tainted | serverSide.js:45:50:45:56 | tainted | provenance | |
|
||||
| serverSide.js:14:19:14:42 | url.par ... , true) | serverSide.js:14:9:14:52 | tainted | provenance | |
|
||||
| serverSide.js:14:29:14:35 | req.url | serverSide.js:14:19:14:42 | url.par ... , true) | provenance | |
|
||||
| serverSide.js:26:25:26:31 | tainted | serverSide.js:26:13:26:31 | "http://" + tainted | provenance | |
|
||||
| serverSide.js:28:36:28:42 | tainted | serverSide.js:28:13:28:42 | "http:/ ... tainted | provenance | |
|
||||
| serverSide.js:30:37:30:43 | tainted | serverSide.js:30:13:30:43 | "http:/ ... tainted | provenance | |
|
||||
| serverSide.js:36:24:36:30 | tainted | serverSide.js:36:16:36:31 | new Uri(tainted) | provenance | |
|
||||
| serverSide.js:37:30:37:36 | tainted | serverSide.js:37:22:37:37 | new Uri(tainted) | provenance | |
|
||||
| serverSide.js:41:43:41:49 | tainted | serverSide.js:41:13:41:51 | `http:/ ... inted}` | provenance | |
|
||||
| serverSide.js:43:46:43:52 | tainted | serverSide.js:43:13:43:54 | `http:/ ... inted}` | provenance | |
|
||||
| serverSide.js:45:50:45:56 | tainted | serverSide.js:45:13:45:56 | 'http:/ ... tainted | provenance | |
|
||||
| serverSide.js:58:9:58:52 | tainted | serverSide.js:61:29:61:35 | tainted | provenance | |
|
||||
| serverSide.js:58:9:58:52 | tainted | serverSide.js:61:29:61:35 | tainted | provenance | |
|
||||
| serverSide.js:58:19:58:42 | url.par ... , true) | serverSide.js:58:9:58:52 | tainted | provenance | |
|
||||
| serverSide.js:58:29:58:35 | req.url | serverSide.js:58:19:58:42 | url.par ... , true) | provenance | |
|
||||
| serverSide.js:61:29:61:35 | tainted | serverSide.js:64:30:64:36 | tainted | provenance | |
|
||||
| serverSide.js:61:29:61:35 | tainted | serverSide.js:68:30:68:36 | tainted | provenance | |
|
||||
| serverSide.js:74:9:74:52 | tainted | serverSide.js:76:19:76:25 | tainted | provenance | |
|
||||
| serverSide.js:74:19:74:42 | url.par ... , true) | serverSide.js:74:9:74:52 | tainted | provenance | |
|
||||
| serverSide.js:74:29:74:35 | req.url | serverSide.js:74:19:74:42 | url.par ... , true) | provenance | |
|
||||
| serverSide.js:83:38:83:43 | param1 | serverSide.js:84:19:84:24 | param1 | provenance | |
|
||||
| serverSide.js:90:19:90:28 | ctx.params | serverSide.js:90:19:90:32 | ctx.params.foo | provenance | |
|
||||
| serverSide.js:92:19:92:28 | ctx.params | serverSide.js:92:19:92:32 | ctx.params.foo | provenance | |
|
||||
| serverSide.js:98:9:98:52 | tainted | serverSide.js:100:19:100:25 | tainted | provenance | |
|
||||
| serverSide.js:98:19:98:42 | url.par ... , true) | serverSide.js:98:9:98:52 | tainted | provenance | |
|
||||
| serverSide.js:98:29:98:35 | req.url | serverSide.js:98:19:98:42 | url.par ... , true) | provenance | |
|
||||
| serverSide.js:108:11:108:27 | url | serverSide.js:109:27:109:29 | url | provenance | |
|
||||
| serverSide.js:108:17:108:27 | request.url | serverSide.js:108:11:108:27 | url | provenance | |
|
||||
| serverSide.js:115:11:115:42 | url | serverSide.js:117:27:117:29 | url | provenance | |
|
||||
| serverSide.js:115:17:115:42 | new URL ... , base) | serverSide.js:115:11:115:42 | url | provenance | |
|
||||
| serverSide.js:115:25:115:35 | request.url | serverSide.js:115:17:115:42 | new URL ... , base) | provenance | Config |
|
||||
| serverSide.js:123:9:123:52 | tainted | serverSide.js:127:14:127:20 | tainted | provenance | |
|
||||
| serverSide.js:123:9:123:52 | tainted | serverSide.js:130:37:130:43 | tainted | provenance | |
|
||||
| serverSide.js:123:19:123:42 | url.par ... , true) | serverSide.js:123:9:123:52 | tainted | provenance | |
|
||||
| serverSide.js:123:29:123:35 | req.url | serverSide.js:123:19:123:42 | url.par ... , true) | provenance | |
|
||||
| serverSide.js:130:9:130:45 | myUrl | serverSide.js:131:15:131:19 | myUrl | provenance | |
|
||||
| serverSide.js:130:37:130:43 | tainted | serverSide.js:130:9:130:45 | myUrl | provenance | |
|
||||
nodes
|
||||
| serverSide.js:14:9:14:52 | tainted | semmle.label | tainted |
|
||||
| serverSide.js:14:19:14:42 | url.par ... , true) | semmle.label | url.par ... , true) |
|
||||
|
||||
Reference in New Issue
Block a user