hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

use flow labels to avoid dual configurations

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2019-11-15 14:37:46 +01:00
parent 8d2ae136b0
commit 65a018ceed
4 changed files with 59 additions and 1312 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1294
javascript/ql/test/query-tests/Security/CWE-079/ExceptionXss.expected
View File

File diff suppressed because it is too large Load Diff

12
javascript/ql/test/query-tests/Security/CWE-079/exception-xss.js
View File

@@ -84,4 +84,16 @@
}
$('myId').html(foo); // Direct leak, reported by other query.
try {
unknown(foo.match(/foo/));
} catch(e) {
$('myId').html(e); // NOT OK!
}
try {
unknown([foo, "bar"]);
} catch(e) {
$('myId').html(e); // NOT OK!
}
});