mirror of
https://github.com/github/codeql.git
synced 2026-05-02 12:15:17 +02:00
Use js/examples instead of js/cookbook in @id
This commit is contained in:
@@ -4,7 +4,7 @@
|
||||
* is an arbitrary user-controlled value, indicating lack of authentication.
|
||||
* @kind path-problem
|
||||
* @tags security
|
||||
* @id js/cookbook/backend-idor
|
||||
* @id js/examples/backend-idor
|
||||
*/
|
||||
|
||||
import javascript::DataFlow
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
an ineffective sanitization attempt.
|
||||
* @kind path-problem
|
||||
* @tags security
|
||||
* @id js/cookbook/decoding-after-sanitization
|
||||
* @id js/examples/decoding-after-sanitization
|
||||
*/
|
||||
|
||||
import javascript::DataFlow
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
indicating an ineffective sanitization attempt.
|
||||
* @kind path-problem
|
||||
* @tags security
|
||||
* @id js/cookbook/decoding-after-sanitization-generalized
|
||||
* @id js/examples/decoding-after-sanitization-generalized
|
||||
*/
|
||||
|
||||
import javascript::DataFlow
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
* @description Tracks user-controlled values into 'eval' calls (special case of js/code-injection).
|
||||
* @kind problem
|
||||
* @tags security
|
||||
* @id js/cookbook/eval-taint
|
||||
* @id js/examples/eval-taint
|
||||
*/
|
||||
|
||||
import javascript::DataFlow
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
* and generates a visualizable path from the source to the sink.
|
||||
* @kind path-problem
|
||||
* @tags security
|
||||
* @id js/cookbook/eval-taint-path
|
||||
* @id js/examples/eval-taint-path
|
||||
*/
|
||||
|
||||
import javascript::DataFlow
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
indicating a leak of sensitive information.
|
||||
* @kind path-problem
|
||||
* @tags security
|
||||
* @id js/cookbook/information-disclosure
|
||||
* @id js/examples/information-disclosure
|
||||
*/
|
||||
|
||||
import javascript::DataFlow
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
* @description Extends the standard Stored XSS query with an additional source.
|
||||
* @kind path-problem
|
||||
* @tags security
|
||||
* @id js/cookbook/stored-xss
|
||||
* @id js/examples/stored-xss
|
||||
*/
|
||||
|
||||
import javascript::DataFlow
|
||||
|
||||
@@ -4,7 +4,7 @@
|
||||
* using TrackedNode to track MySQL connections globally.
|
||||
* @kind path-problem
|
||||
* @tags security
|
||||
* @id js/cookbook/stored-xss-trackednode
|
||||
* @id js/examples/stored-xss-trackednode
|
||||
*/
|
||||
|
||||
import javascript::DataFlow
|
||||
|
||||
@@ -3,7 +3,7 @@
|
||||
* @description Tracks user-controlled values to an unescaped lodash template placeholder.
|
||||
* @kind path-problem
|
||||
* @tags security
|
||||
* @id js/cookbook/template-injection
|
||||
* @id js/examples/template-injection
|
||||
*/
|
||||
|
||||
import javascript::DataFlow
|
||||
|
||||
Reference in New Issue
Block a user