mirror of
https://github.com/github/codeql.git
synced 2025-12-17 01:03:14 +01:00
JS: Add tests
This commit is contained in:
@@ -55,6 +55,9 @@ taintFlow
|
||||
| test.js:182:12:182:19 | source() | test.js:182:12:182:19 | source() |
|
||||
| test.js:187:31:187:31 | x | test.js:189:10:189:10 | x |
|
||||
| test.js:203:32:203:39 | source() | test.js:203:32:203:39 | source() |
|
||||
| test.js:207:24:207:31 | source() | test.js:207:24:207:31 | source() |
|
||||
| test.js:208:24:208:31 | source() | test.js:208:24:208:31 | source() |
|
||||
| test.js:211:34:211:41 | source() | test.js:211:34:211:41 | source() |
|
||||
isSink
|
||||
| test.js:54:18:54:25 | source() | test-sink |
|
||||
| test.js:55:22:55:29 | source() | test-sink |
|
||||
@@ -113,6 +116,9 @@ isSink
|
||||
| test.js:182:12:182:19 | source() | test-sink |
|
||||
| test.js:196:12:196:29 | this._wrappedField | test-sink |
|
||||
| test.js:203:32:203:39 | source() | test-sink |
|
||||
| test.js:207:24:207:31 | source() | test-sink |
|
||||
| test.js:208:24:208:31 | source() | test-sink |
|
||||
| test.js:211:34:211:41 | source() | test-sink |
|
||||
syntaxErrors
|
||||
| Member[foo |
|
||||
| Member[foo] .Member[bar] |
|
||||
|
||||
@@ -203,3 +203,9 @@ class OtherClass {
|
||||
this.accessorAroundField = source(); // NOT OK
|
||||
}
|
||||
}
|
||||
|
||||
testlib.foo.memberSink(source()); // NOT OK
|
||||
testlib.bar.memberSink(source()); // NOT OK
|
||||
testlib.memberSink(source()); // OK
|
||||
testlib.overloadedSink('safe', source()); // OK
|
||||
testlib.overloadedSink('danger', source()); // NOT OK
|
||||
|
||||
@@ -38,6 +38,8 @@ class Sinks extends ModelInput::SinkModelCsv {
|
||||
"testlib;;Member[MethodDecorator].DecoratedMember.ReturnValue;test-sink",
|
||||
"testlib;;Member[MethodDecoratorWithArgs].ReturnValue.DecoratedMember.ReturnValue;test-sink",
|
||||
"testlib;;Member[ParamDecoratorSink].DecoratedParameter;test-sink",
|
||||
"testlib;;AnyMember.Member[memberSink].Argument[0];test-sink",
|
||||
"testlib;;Member[overloadedSink].WithStringArgument[0=danger].Argument[1];test-sink",
|
||||
]
|
||||
}
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user