hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix most ql-for-ql warnings in JS

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2022-02-11 17:57:37 +01:00
parent 360cf0ff17
commit a1c5724be7
29 changed files with 117 additions and 167 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
javascript/ql/examples/queries/dataflow/BackendIdor/BackendIdor.ql
View File

@@ -13,7 +13,7 @@ import DataFlow
import DataFlow::PathGraph
/**
* Tracks user-controlled values into a 'userId' property sent to a backend service.
* A taint-tracking configuration that tracks user-controlled values into a 'userId' property sent to a backend service.
*/
class IdorTaint extends TaintTracking::Configuration {
IdorTaint() { this = "IdorTaint" }
@@ -34,7 +34,7 @@ class IdorTaint extends TaintTracking::Configuration {
}
/**
* Sanitize values that have succesfully been compared to another value.
* A sanitizer for values that have succesfully been compared to another value.
*/
class EqualityGuard extends TaintTracking::SanitizerGuardNode, ValueNode {
override EqualityTest astNode;

3
javascript/ql/examples/queries/dataflow/InformationDisclosure/InformationDisclosure.ql
View File

@@ -13,7 +13,8 @@ import DataFlow
import DataFlow::PathGraph
/**
* Tracks authentication tokens ("authKey") to a postMessage call with unrestricted target origin.
* A dataflow configuration that tracks authentication tokens ("authKey")
* to a postMessage call with unrestricted target origin.
*
* For example:
* ```

2
javascript/ql/examples/queries/dataflow/StoredXss/StoredXss.ql
View File

@@ -12,7 +12,7 @@ import semmle.javascript.security.dataflow.StoredXssQuery
import DataFlow::PathGraph
/**
* Data returned from a MySQL query, such as the `data` parameter in this example:
* The data returned from a MySQL query, such as the `data` parameter in this example:
* ```
* let mysql = require('mysql');
* let connection = mysql.createConnection();

2
javascript/ql/examples/queries/dataflow/StoredXss/StoredXssTypeTracking.ql
View File

@@ -28,7 +28,7 @@ DataFlow::SourceNode mysqlConnection(DataFlow::TypeTracker t) {
DataFlow::SourceNode mysqlConnection() { result = mysqlConnection(DataFlow::TypeTracker::end()) }
/**
* Data returned from a MySQL query.
* The data returned from a MySQL query.
*
* For example:
* ```