hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 01:05:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

JS: Port HeuristicSource test

Browse Source
This commit is contained in:
Asger F
2023-10-06 10:43:07 +02:00
parent 771519bbc5
commit e5946bf43b
2 changed files with 23 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
javascript/ql/test/library-tests/Security/heuristics/HeuristicSource.expected
View File

@@ -0,0 +1,2 @@
legacyDataFlowDifference
consistencyIssue

26
javascript/ql/test/library-tests/Security/heuristics/HeuristicSource.ql
View File

@@ -2,12 +2,28 @@ import javascript
private import semmle.javascript.heuristics.AdditionalSources
import testUtilities.ConsistencyChecking
class Taint extends TaintTracking::Configuration {
Taint() { this = "Taint" }
module TestConfig implements DataFlow::ConfigSig {
predicate isSource(DataFlow::Node node) { node instanceof HeuristicSource }
override predicate isSource(DataFlow::Node node) { node instanceof HeuristicSource }
override predicate isSink(DataFlow::Node node) {
predicate isSink(DataFlow::Node node) {
node = any(DataFlow::CallNode call | call.getCalleeName() = "sink").getAnArgument()
}
}
module TestFlow = TaintTracking::Global<TestConfig>;
class Consistency extends ConsistencyConfiguration {
Consistency() { this = "Consistency" }
override DataFlow::Node getAnAlert() { TestFlow::flowTo(result) }
}
class LegacyConfig extends TaintTracking::Configuration {
LegacyConfig() { this = "LegacyConfig" }
override predicate isSource(DataFlow::Node source) { TestConfig::isSource(source) }
override predicate isSink(DataFlow::Node sink) { TestConfig::isSink(sink) }
}
import testUtilities.LegacyDataFlowDiff::DataFlowDiff<TestFlow, LegacyConfig>