hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-23 07:45:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Restricted taint to array elements.

Browse Source
This commit is contained in:
Napalys
2025-03-20 12:24:49 +01:00
parent 752f02f04d
commit f4ca2dc1f3
2 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

9
javascript/ql/test/library-tests/TripleDot/underscore.string.js
View File

@@ -39,10 +39,11 @@ function strToStr() {
}
function strToArray() {
sink(s.chop(source("s1"), 3)[0]); // $ hasTaintFlow=s1
sink(s.chars(source("s2")[0])); // $ hasTaintFlow=s2
sink(s.words(source("s3")[0])); // $ hasTaintFlow=s3
sink(s.lines(source("s7")[0])); // $ hasTaintFlow=s7
sink(s.chop(source("s1"), 3)); // $ MISSING: hasTaintFlow=s1
sink(s.chars(source("s2")[0])); // $ MISSING: hasTaintFlow=s2
sink(s.words(source("s3")[0])); // $ MISSING: hasTaintFlow=s3
sink(s.lines(source("s7")[0])); // $ MISSING: hasTaintFlow=s7
sink(s.chop(source("s1"), 3).length);
}
function arrayToStr() {