hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-30 19:26:02 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #697 from esben-semmle/js/fix-heuristics-compilation-time

Browse Source 
Approved by asger-semmle
This commit is contained in:
semmle-qlci
2018-12-18 09:07:36 +00:00
committed by GitHub
parent 7fd1d64d97 50cba92f5f
commit c37d655fe8
5 changed files with 0 additions and 15 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
javascript/ql/test/library-tests/Security/heuristics/AdditionalCommandInjections.expected
View File

@@ -1 +0,0 @@
| additionalCommandInjections.js:2:11:2:45 | "prgm - ... place() | additionalCommandInjections.js:2:28:2:35 | password |

9
javascript/ql/test/library-tests/Security/heuristics/AdditionalCommandInjections.ql
View File

@@ -1,9 +0,0 @@
import javascript
import semmle.javascript.security.dataflow.CommandInjection::CommandInjection
private import semmle.javascript.heuristics.all
// tests that the imports above changes the behavior of the standard taint tracking query
from Configuration cfg, Source source, Sink sink
where cfg.hasFlow(source, sink)
select sink, source

1
javascript/ql/test/library-tests/Security/heuristics/HeuristicSink.expected
View File

@@ -1,4 +1,3 @@
| additionalCommandInjections.js:2:11:2:45 | "prgm - ... place() |
| sinks.js:2:14:2:17 | sink |
| sinks.js:3:5:3:17 | script + sink |
| sinks.js:4:9:4:12 | sink |

1
javascript/ql/test/library-tests/Security/heuristics/HeuristicSource.expected
View File

@@ -1,3 +1,2 @@
| additionalCommandInjections.js:2:28:2:35 | password |
| sources.js:2:5:2:12 | password |
| sources.js:3:5:3:20 | JSON.stringify() |

3
javascript/ql/test/library-tests/Security/heuristics/additionalCommandInjections.js
View File

@@ -1,3 +0,0 @@
(function() {
o.run("prgm --pass " + password.replace())
})();