hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 05:05:12 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Accept Sources/Sink tags

Browse Source
This commit is contained in:
Asger F
2025-02-26 13:57:10 +01:00
parent 19cada38ff
commit 64d39da5f8
211 changed files with 796 additions and 796 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/test/query-tests/Security/CWE-078/SecondOrderCommandInjection/second-order.js
View File

@@ -3,14 +3,14 @@ const app = express();
const { execFile } = require("child_process");
app.get("/", (req, res) => {
const remote = req.query.remote;
const remote = req.query.remote; // $ Source
execFile("git", ["ls-remote", remote]); // $ Alert
execFile("git", ["fetch", remote]); // $ Alert
indirect("git", ["ls-remote", remote]); // $ Alert
const myArgs = req.query.args;
const myArgs = req.query.args; // $ Source
execFile("git", myArgs); // $ Alert