hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 16:55:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Accept some alerts

Browse Source
This commit is contained in:
Asger F
2025-02-21 20:33:43 +01:00
parent b734a3d804
commit 7c2394fab4
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/electron.js
View File

@@ -4,4 +4,4 @@ function getTaint() {
return window.name;
}
shell.openExternal(getTaint());
shell.openExternal(getTaint()); // $ Alert

6
javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/tst.js
View File

@@ -2,21 +2,21 @@ window.location = /.*redirect=([^&]*).*/.exec(document.location.href)[1]; // $ A
(function(){
var indirect = /.*redirect=([^&]*).*/;
window.location = indirect.exec(document.location.href)[1];
window.location = indirect.exec(document.location.href)[1]; // $ Alert
});
window.location = new RegExp('.*redirect=([^&]*).*').exec(document.location.href)[1]; // $ Alert
(function(){
var indirect = new RegExp('.*redirect=([^&]*).*')
window.location = indirect.exec(document.location.href)[1];
window.location = indirect.exec(document.location.href)[1]; // $ Alert
});
window.location = new RegExp(/.*redirect=([^&]*).*/).exec(document.location.href)[1]; // $ Alert
(function(){
var indirect = new RegExp(/.*redirect=([^&]*).*/)
window.location = indirect.exec(document.location.href)[1];
window.location = indirect.exec(document.location.href)[1]; // $ Alert
});
function foo(win) {