hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 11:15:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: add Mongoose createConnection tests

Browse Source
This commit is contained in:
Esben Sparre Andreasen
2020-03-14 12:48:56 +01:00
parent b7dc26e27d
commit 730396df12
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
javascript/ql/test/query-tests/Security/CWE-089/untyped/mongoose.js
View File

@@ -77,4 +77,7 @@ app.post('/documents/find', (req, res) => {
.exec()
;
Mongoose.createConnection(X).count(query); // OK (invalid program)
Mongoose.createConnection(X).model(Y).count(query); // NOT OK
Mongoose.createConnection(X).models[Y].count(query); // NOT OK
});