mirror of
https://github.com/github/codeql.git
synced 2026-04-30 11:15:13 +02:00
JS: Add test
This commit is contained in:
@@ -12,6 +12,8 @@
|
||||
| callbacks.js:44:17:44:24 | source() | callbacks.js:41:10:41:10 | x |
|
||||
| callbacks.js:50:18:50:25 | source() | callbacks.js:30:29:30:29 | y |
|
||||
| callbacks.js:51:18:51:25 | source() | callbacks.js:30:29:30:29 | y |
|
||||
| captured-sanitizer.js:25:3:25:10 | source() | captured-sanitizer.js:13:12:13:12 | x |
|
||||
| captured-sanitizer.js:25:3:25:10 | source() | captured-sanitizer.js:15:10:15:10 | x |
|
||||
| closure.js:6:15:6:22 | source() | closure.js:8:8:8:31 | string. ... (taint) |
|
||||
| closure.js:6:15:6:22 | source() | closure.js:9:8:9:25 | string.trim(taint) |
|
||||
| closure.js:6:15:6:22 | source() | closure.js:10:8:10:33 | string. ... nt, 50) |
|
||||
|
||||
@@ -0,0 +1,25 @@
|
||||
import * as dummy from 'dummy';
|
||||
|
||||
function f(x) {
|
||||
useVar();
|
||||
useVar();
|
||||
mutateVar();
|
||||
mutateVar();
|
||||
|
||||
function useVar() {
|
||||
if (isSafe(x)) {
|
||||
causeReCapture();
|
||||
causeReCapture();
|
||||
sink(x); // OK
|
||||
}
|
||||
sink(x); // NOT OK
|
||||
}
|
||||
|
||||
function causeReCapture() {}
|
||||
|
||||
function mutateVar() {
|
||||
x = null;
|
||||
}
|
||||
}
|
||||
|
||||
f(source());
|
||||
Reference in New Issue
Block a user