hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 11:16:30 +01:00
Code Issues Packages Projects Releases Wiki Activity

update the existing expression based Express models

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2022-03-30 19:29:54 +02:00
committed by erik-krogh
parent 8266b083d7
commit fc54ba823b
5 changed files with 86 additions and 94 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
javascript/ql/lib/semmle/javascript/frameworks/Express.qll
View File

@@ -517,9 +517,10 @@ module Express {
/** /**
* Holds if `call` is a chainable method call on the response object of `handler`. * Holds if `call` is a chainable method call on the response object of `handler`.
*/ */
private predicate isChainableResponseMethodCall(RouteHandler handler, MethodCallExpr call) { private predicate isChainableResponseMethodCall(
// TODO: DataFlow::MethodCallNode RouteHandler handler, DataFlow::MethodCallNode call
exists(string name | call.calls(handler.getAResponseNode().asExpr(), name) | ) {
exists(string name | call.calls(handler.getAResponseNode(), name) |
name = name =
[ [
"append", "attachment", "location", "send", "sendStatus", "set", "status", "type", "vary", "append", "attachment", "location", "send", "sendStatus", "set", "status", "type", "vary",
@@ -541,7 +542,7 @@ module Express {
ExplicitResponseSource() { ExplicitResponseSource() {
this = rh.getResponseParameter() this = rh.getResponseParameter()
or or
isChainableResponseMethodCall(rh, this.asExpr()) isChainableResponseMethodCall(rh, this)
} }
/** /**
@@ -766,23 +767,22 @@ module Express {
/** /**
* Holds if `e` is an HTTP request object. * Holds if `e` is an HTTP request object.
*/ */
predicate isRequest(Expr e) { any(RouteHandler rh).getARequestNode().asExpr() = e } // TODO: DataFlow::Node predicate isRequest(DataFlow::Node e) { any(RouteHandler rh).getARequestNode() = e }
/** /**
* Holds if `e` is an HTTP response object. * Holds if `e` is an HTTP response object.
*/ */
predicate isResponse(Expr e) { any(RouteHandler rh).getAResponseNode().asExpr() = e } // TODO: DataFlow::Node predicate isResponse(DataFlow::Node e) { any(RouteHandler rh).getAResponseNode() = e }
/** /**
* An access to the HTTP request body. * An access to the HTTP request body.
*/ */
class RequestBodyAccess extends Expr { class RequestBodyAccess extends DataFlow::Node {
// TODO: DataFlow::Node RequestBodyAccess() { any(RouteHandler h).getARequestBodyAccess() = this }
RequestBodyAccess() { any(RouteHandler h).getARequestBodyAccess().asExpr() = this }
} }
abstract private class HeaderDefinition extends HTTP::Servers::StandardHeaderDefinition { abstract private class HeaderDefinition extends HTTP::Servers::StandardHeaderDefinition {
HeaderDefinition() { isResponse(this.getReceiver().asExpr()) } HeaderDefinition() { isResponse(this.getReceiver()) }
override RouteHandler getRouteHandler() { this.getReceiver() = result.getAResponseNode() } override RouteHandler getRouteHandler() { this.getReceiver() = result.getAResponseNode() }
} }

6
javascript/ql/lib/semmle/javascript/security/dataflow/TaintedPathCustomizations.qll
View File

@@ -647,12 +647,12 @@ module TaintedPath {
/** /**
* A path argument to the Express `res.render` method. * A path argument to the Express `res.render` method.
*/ */
class ExpressRenderSink extends Sink, DataFlow::ValueNode { class ExpressRenderSink extends Sink {
ExpressRenderSink() { ExpressRenderSink() {
exists(MethodCallExpr mce | exists(DataFlow::MethodCallNode mce |
Express::isResponse(mce.getReceiver()) and Express::isResponse(mce.getReceiver()) and
mce.getMethodName() = "render" and mce.getMethodName() = "render" and
astNode = mce.getArgument(0) this = mce.getArgument(0)
) )
} }
} }

2
javascript/ql/test/library-tests/frameworks/Express/isRequest.qll
View File

@@ -1,3 +1,3 @@
import javascript import javascript
query predicate test_isRequest(Expr nd) { Express::isRequest(nd) } query predicate test_isRequest(DataFlow::Node nd) { Express::isRequest(nd) }

2
javascript/ql/test/library-tests/frameworks/Express/isResponse.qll
View File

@@ -1,3 +1,3 @@
import javascript import javascript
query predicate test_isResponse(Expr nd) { Express::isResponse(nd) } query predicate test_isResponse(DataFlow::Node nd) { Express::isResponse(nd) }

150
javascript/ql/test/library-tests/frameworks/Express/tests.expected
View File

@@ -769,50 +769,72 @@ test_RouterDefinition_getMiddlewareStackAt
| src/subrouter.js:2:11:2:19 | express() | src/subrouter.js:13:1:13:0 | exit node of <toplevel> | src/subrouter.js:5:14:5:28 | makeSubRouter() | | src/subrouter.js:2:11:2:19 | express() | src/subrouter.js:13:1:13:0 | exit node of <toplevel> | src/subrouter.js:5:14:5:28 | makeSubRouter() |
test_isRequest test_isRequest
| src/advanced-routehandler-registration.js:6:7:6:9 | req | | src/advanced-routehandler-registration.js:6:7:6:9 | req |
| src/advanced-routehandler-registration.js:6:7:6:9 | req |
| src/advanced-routehandler-registration.js:6:32:6:34 | req | | src/advanced-routehandler-registration.js:6:32:6:34 | req |
| src/advanced-routehandler-registration.js:7:7:7:9 | req | | src/advanced-routehandler-registration.js:7:7:7:9 | req |
| src/advanced-routehandler-registration.js:7:7:7:9 | req |
| src/advanced-routehandler-registration.js:7:32:7:34 | req | | src/advanced-routehandler-registration.js:7:32:7:34 | req |
| src/advanced-routehandler-registration.js:15:7:15:9 | req | | src/advanced-routehandler-registration.js:15:7:15:9 | req |
| src/advanced-routehandler-registration.js:15:7:15:9 | req |
| src/advanced-routehandler-registration.js:15:32:15:34 | req | | src/advanced-routehandler-registration.js:15:32:15:34 | req |
| src/advanced-routehandler-registration.js:16:7:16:9 | req | | src/advanced-routehandler-registration.js:16:7:16:9 | req |
| src/advanced-routehandler-registration.js:16:7:16:9 | req |
| src/advanced-routehandler-registration.js:16:32:16:34 | req | | src/advanced-routehandler-registration.js:16:32:16:34 | req |
| src/advanced-routehandler-registration.js:24:7:24:9 | req | | src/advanced-routehandler-registration.js:24:7:24:9 | req |
| src/advanced-routehandler-registration.js:24:7:24:9 | req |
| src/advanced-routehandler-registration.js:24:32:24:34 | req | | src/advanced-routehandler-registration.js:24:32:24:34 | req |
| src/advanced-routehandler-registration.js:25:7:25:9 | req | | src/advanced-routehandler-registration.js:25:7:25:9 | req |
| src/advanced-routehandler-registration.js:25:7:25:9 | req |
| src/advanced-routehandler-registration.js:25:32:25:34 | req | | src/advanced-routehandler-registration.js:25:32:25:34 | req |
| src/advanced-routehandler-registration.js:46:20:46:22 | req | | src/advanced-routehandler-registration.js:46:20:46:22 | req |
| src/advanced-routehandler-registration.js:46:20:46:22 | req |
| src/advanced-routehandler-registration.js:47:27:47:29 | req | | src/advanced-routehandler-registration.js:47:27:47:29 | req |
| src/advanced-routehandler-registration.js:51:10:51:12 | req | | src/advanced-routehandler-registration.js:51:10:51:12 | req |
| src/advanced-routehandler-registration.js:51:10:51:12 | req |
| src/advanced-routehandler-registration.js:51:40:51:42 | req | | src/advanced-routehandler-registration.js:51:40:51:42 | req |
| src/advanced-routehandler-registration.js:59:20:59:22 | req | | src/advanced-routehandler-registration.js:59:20:59:22 | req |
| src/advanced-routehandler-registration.js:59:20:59:22 | req |
| src/advanced-routehandler-registration.js:60:18:60:20 | req | | src/advanced-routehandler-registration.js:60:18:60:20 | req |
| src/advanced-routehandler-registration.js:64:10:64:12 | req | | src/advanced-routehandler-registration.js:64:10:64:12 | req |
| src/advanced-routehandler-registration.js:64:10:64:12 | req |
| src/advanced-routehandler-registration.js:64:45:64:47 | req | | src/advanced-routehandler-registration.js:64:45:64:47 | req |
| src/advanced-routehandler-registration.js:68:13:68:15 | req | | src/advanced-routehandler-registration.js:68:13:68:15 | req |
| src/advanced-routehandler-registration.js:68:13:68:15 | req |
| src/advanced-routehandler-registration.js:68:38:68:40 | req | | src/advanced-routehandler-registration.js:68:38:68:40 | req |
| src/advanced-routehandler-registration.js:69:20:69:22 | req | | src/advanced-routehandler-registration.js:69:20:69:22 | req |
| src/advanced-routehandler-registration.js:69:20:69:22 | req |
| src/advanced-routehandler-registration.js:70:18:70:20 | req | | src/advanced-routehandler-registration.js:70:18:70:20 | req |
| src/advanced-routehandler-registration.js:73:10:73:12 | req | | src/advanced-routehandler-registration.js:73:10:73:12 | req |
| src/advanced-routehandler-registration.js:73:10:73:12 | req |
| src/advanced-routehandler-registration.js:73:47:73:49 | req | | src/advanced-routehandler-registration.js:73:47:73:49 | req |
| src/advanced-routehandler-registration.js:81:20:81:22 | req | | src/advanced-routehandler-registration.js:81:20:81:22 | req |
| src/advanced-routehandler-registration.js:81:20:81:22 | req |
| src/advanced-routehandler-registration.js:82:27:82:29 | req | | src/advanced-routehandler-registration.js:82:27:82:29 | req |
| src/advanced-routehandler-registration.js:92:10:92:12 | req | | src/advanced-routehandler-registration.js:92:10:92:12 | req |
| src/advanced-routehandler-registration.js:92:10:92:12 | req |
| src/advanced-routehandler-registration.js:92:40:92:42 | req | | src/advanced-routehandler-registration.js:92:40:92:42 | req |
| src/advanced-routehandler-registration.js:100:20:100:22 | req | | src/advanced-routehandler-registration.js:100:20:100:22 | req |
| src/advanced-routehandler-registration.js:100:20:100:22 | req |
| src/advanced-routehandler-registration.js:101:31:101:33 | req | | src/advanced-routehandler-registration.js:101:31:101:33 | req |
| src/advanced-routehandler-registration.js:111:10:111:12 | req | | src/advanced-routehandler-registration.js:111:10:111:12 | req |
| src/advanced-routehandler-registration.js:111:10:111:12 | req |
| src/advanced-routehandler-registration.js:111:40:111:42 | req | | src/advanced-routehandler-registration.js:111:40:111:42 | req |
| src/advanced-routehandler-registration.js:123:21:123:23 | req | | src/advanced-routehandler-registration.js:123:21:123:23 | req |
| src/advanced-routehandler-registration.js:123:21:123:23 | req |
| src/advanced-routehandler-registration.js:123:46:123:48 | req | | src/advanced-routehandler-registration.js:123:46:123:48 | req |
| src/advanced-routehandler-registration.js:124:21:124:23 | req | | src/advanced-routehandler-registration.js:124:21:124:23 | req |
| src/advanced-routehandler-registration.js:124:21:124:23 | req |
| src/advanced-routehandler-registration.js:124:46:124:48 | req | | src/advanced-routehandler-registration.js:124:46:124:48 | req |
| src/advanced-routehandler-registration.js:146:29:146:31 | req | | src/advanced-routehandler-registration.js:146:29:146:31 | req |
| src/advanced-routehandler-registration.js:156:22:156:24 | req | | src/advanced-routehandler-registration.js:156:22:156:24 | req |
| src/advanced-routehandler-registration.js:156:22:156:24 | req |
| src/advanced-routehandler-registration.js:156:47:156:49 | req | | src/advanced-routehandler-registration.js:156:47:156:49 | req |
| src/advanced-routehandler-registration.js:157:28:157:30 | req | | src/advanced-routehandler-registration.js:157:28:157:30 | req |
| src/advanced-routehandler-registration.js:157:28:157:30 | req |
| src/advanced-routehandler-registration.js:157:53:157:55 | req | | src/advanced-routehandler-registration.js:157:53:157:55 | req |
| src/controllers/handler-in-bulk-require.js:1:45:1:47 | req | | src/controllers/handler-in-bulk-require.js:1:45:1:47 | req |
| src/csurf-example.js:20:28:20:30 | req | | src/csurf-example.js:20:28:20:30 | req |
| src/csurf-example.js:20:28:20:30 | req |
| src/csurf-example.js:22:35:22:37 | req | | src/csurf-example.js:22:35:22:37 | req |
| src/csurf-example.js:25:32:25:34 | req | | src/csurf-example.js:25:32:25:34 | req |
| src/csurf-example.js:32:40:32:42 | req | | src/csurf-example.js:32:40:32:42 | req |
@@ -820,22 +842,28 @@ test_isRequest
| src/csurf-example.js:40:37:40:39 | req | | src/csurf-example.js:40:37:40:39 | req |
| src/exportedHandler.js:1:44:1:46 | req | | src/exportedHandler.js:1:44:1:46 | req |
| src/express2.js:3:34:3:36 | req | | src/express2.js:3:34:3:36 | req |
| src/express2.js:3:34:3:36 | req |
| src/express2.js:3:46:3:48 | req | | src/express2.js:3:46:3:48 | req |
| src/express2.js:4:41:4:47 | request | | src/express2.js:4:41:4:47 | request |
| src/express2.js:4:41:4:47 | request |
| src/express2.js:4:60:4:66 | request | | src/express2.js:4:60:4:66 | request |
| src/express3.js:4:32:4:34 | req | | src/express3.js:4:32:4:34 | req |
| src/express3.js:4:32:4:34 | req |
| src/express3.js:5:14:5:16 | req | | src/express3.js:5:14:5:16 | req |
| src/express3.js:5:35:5:37 | req | | src/express3.js:5:35:5:37 | req |
| src/express3.js:10:22:10:24 | req | | src/express3.js:10:22:10:24 | req |
| src/express4.js:4:32:4:34 | req | | src/express4.js:4:32:4:34 | req |
| src/express4.js:4:32:4:34 | req |
| src/express4.js:5:27:5:29 | req | | src/express4.js:5:27:5:29 | req |
| src/express4.js:6:18:6:20 | req | | src/express4.js:6:18:6:20 | req |
| src/express4.js:7:18:7:20 | req | | src/express4.js:7:18:7:20 | req |
| src/express.js:4:32:4:34 | req | | src/express.js:4:32:4:34 | req |
| src/express.js:4:32:4:34 | req |
| src/express.js:5:16:5:18 | req | | src/express.js:5:16:5:18 | req |
| src/express.js:6:26:6:28 | req | | src/express.js:6:26:6:28 | req |
| src/express.js:16:28:16:30 | req | | src/express.js:16:28:16:30 | req |
| src/express.js:22:39:22:41 | req | | src/express.js:22:39:22:41 | req |
| src/express.js:22:39:22:41 | req |
| src/express.js:23:3:23:5 | req | | src/express.js:23:3:23:5 | req |
| src/express.js:24:3:24:5 | req | | src/express.js:24:3:24:5 | req |
| src/express.js:25:3:25:5 | req | | src/express.js:25:3:25:5 | req |
@@ -847,43 +875,55 @@ test_isRequest
| src/express.js:37:22:37:24 | req | | src/express.js:37:22:37:24 | req |
| src/express.js:42:13:42:15 | req | | src/express.js:42:13:42:15 | req |
| src/express.js:46:31:46:33 | req | | src/express.js:46:31:46:33 | req |
| src/express.js:46:31:46:33 | req |
| src/express.js:47:3:47:5 | req | | src/express.js:47:3:47:5 | req |
| src/express.js:48:3:48:5 | req | | src/express.js:48:3:48:5 | req |
| src/express.js:49:3:49:5 | req | | src/express.js:49:3:49:5 | req |
| src/express.js:50:3:50:5 | req | | src/express.js:50:3:50:5 | req |
| src/inheritedFromNode.js:4:24:4:26 | req | | src/inheritedFromNode.js:4:24:4:26 | req |
| src/inheritedFromNode.js:4:24:4:26 | req |
| src/inheritedFromNode.js:7:2:7:4 | req | | src/inheritedFromNode.js:7:2:7:4 | req |
| src/middleware-flow.js:5:20:5:22 | req | | src/middleware-flow.js:5:20:5:22 | req |
| src/middleware-flow.js:5:20:5:22 | req |
| src/middleware-flow.js:6:5:6:7 | req | | src/middleware-flow.js:6:5:6:7 | req |
| src/middleware-flow.js:7:5:7:7 | req | | src/middleware-flow.js:7:5:7:7 | req |
| src/middleware-flow.js:8:5:8:7 | req | | src/middleware-flow.js:8:5:8:7 | req |
| src/middleware-flow.js:17:25:17:27 | req | | src/middleware-flow.js:17:25:17:27 | req |
| src/middleware-flow.js:17:25:17:27 | req |
| src/middleware-flow.js:18:9:18:11 | req | | src/middleware-flow.js:18:9:18:11 | req |
| src/middleware-flow.js:19:9:19:11 | req | | src/middleware-flow.js:19:9:19:11 | req |
| src/middleware-flow.js:20:9:20:11 | req | | src/middleware-flow.js:20:9:20:11 | req |
| src/middleware-flow.js:23:18:23:20 | req | | src/middleware-flow.js:23:18:23:20 | req |
| src/middleware-flow.js:23:18:23:20 | req |
| src/middleware-flow.js:23:33:23:35 | req | | src/middleware-flow.js:23:33:23:35 | req |
| src/middleware-flow.js:24:18:24:20 | req | | src/middleware-flow.js:24:18:24:20 | req |
| src/middleware-flow.js:24:18:24:20 | req |
| src/middleware-flow.js:24:33:24:35 | req | | src/middleware-flow.js:24:33:24:35 | req |
| src/middleware-flow.js:39:24:39:26 | req | | src/middleware-flow.js:39:24:39:26 | req |
| src/middleware-flow.js:39:24:39:26 | req |
| src/middleware-flow.js:40:5:40:7 | req | | src/middleware-flow.js:40:5:40:7 | req |
| src/middleware-flow.js:41:5:41:7 | req | | src/middleware-flow.js:41:5:41:7 | req |
| src/middleware-flow.js:42:5:42:7 | req | | src/middleware-flow.js:42:5:42:7 | req |
| src/params.js:4:19:4:21 | req | | src/params.js:4:19:4:21 | req |
| src/params.js:4:19:4:21 | req |
| src/params.js:5:17:5:19 | req | | src/params.js:5:17:5:19 | req |
| src/params.js:6:17:6:19 | req | | src/params.js:6:17:6:19 | req |
| src/params.js:14:33:14:35 | req | | src/params.js:14:33:14:35 | req |
| src/passport.js:27:13:27:15 | req | | src/passport.js:27:13:27:15 | req |
| src/passport.js:27:13:27:15 | req |
| src/passport.js:28:2:28:4 | req | | src/passport.js:28:2:28:4 | req |
| src/responseExprs.js:4:32:4:34 | req | | src/responseExprs.js:4:32:4:34 | req |
| src/responseExprs.js:7:32:7:34 | req | | src/responseExprs.js:7:32:7:34 | req |
| src/responseExprs.js:10:39:10:41 | req | | src/responseExprs.js:10:39:10:41 | req |
| src/responseExprs.js:13:32:13:34 | req | | src/responseExprs.js:13:32:13:34 | req |
| src/responseExprs.js:16:39:16:41 | req | | src/responseExprs.js:16:39:16:41 | req |
| src/responseExprs.js:16:39:16:41 | req |
| src/responseExprs.js:17:5:17:7 | req | | src/responseExprs.js:17:5:17:7 | req |
| src/route-collection.js:2:7:2:9 | req | | src/route-collection.js:2:7:2:9 | req |
| src/route-collection.js:2:7:2:9 | req |
| src/route-collection.js:2:32:2:34 | req | | src/route-collection.js:2:32:2:34 | req |
| src/route-collection.js:3:7:3:9 | req | | src/route-collection.js:3:7:3:9 | req |
| src/route-collection.js:3:7:3:9 | req |
| src/route-collection.js:3:32:3:34 | req | | src/route-collection.js:3:32:3:34 | req |
| src/route.js:5:21:5:23 | req | | src/route.js:5:21:5:23 | req |
test_RouteSetup_getRouter test_RouteSetup_getRouter
@@ -1560,85 +1600,6 @@ test_RouteSetup_getRequestMethod
| src/routesetups.js:12:1:12:16 | root.post('', h) | POST | | src/routesetups.js:12:1:12:16 | root.post('', h) | POST |
| src/subrouter.js:9:3:9:35 | router. ... ndler1) | POST | | src/subrouter.js:9:3:9:35 | router. ... ndler1) | POST |
| src/subrouter.js:10:3:10:41 | router. ... ndler2) | POST | | src/subrouter.js:10:3:10:41 | router. ... ndler2) | POST |
test_RouteExpr
| src/advanced-routehandler-registration.js:10:3:10:24 | app.get ... es0[p]) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:19:3:19:18 | app.use(handler) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:28:3:28:24 | app.get ... es2[p]) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:37:3:37:12 | app.use(h) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:51:1:51:61 | app.use ... ever")) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:64:1:64:54 | app.use ... , res)) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:73:1:73:56 | app.use ... , res)) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:92:1:92:61 | app.use ... ever")) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:111:1:111:61 | app.use ... ever")) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:116:3:116:31 | app.get ... tes[p]) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:118:1:118:30 | app.get ... utes.a) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:119:1:119:30 | app.get ... utes.b) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:125:29:125:41 | app.get(k, v) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:126:1:126:32 | app.get ... t("a")) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:127:1:127:32 | app.get ... t("b")) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:135:2:135:53 | app.get ... andler) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:139:1:139:58 | app.get ... andler) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:144:1:144:32 | app.use ... , args) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:147:1:147:37 | app.use ... (data)) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:150:2:150:14 | app.get(k, v) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:153:1:153:41 | app.get ... KEY!")) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:160:1:160:33 | app.get ... t("c")) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:161:1:161:39 | app.get ... own())) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:162:1:162:23 | app.get ... nown()) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/advanced-routehandler-registration.js:163:1:163:33 | app.get ... t("f")) | src/advanced-routehandler-registration.js:2:11:2:19 | express() |
| src/auth.js:4:1:4:53 | app.use ... d' }})) | src/auth.js:1:13:1:32 | require('express')() |
| src/csurf-example.js:13:1:13:20 | app.use('/api', api) | src/csurf-example.js:7:11:7:19 | express() |
| src/csurf-example.js:16:1:16:51 | app.use ... lse })) | src/csurf-example.js:7:11:7:19 | express() |
| src/csurf-example.js:17:1:17:23 | app.use ... rser()) | src/csurf-example.js:7:11:7:19 | express() |
| src/csurf-example.js:18:1:18:31 | app.use ... rue })) | src/csurf-example.js:7:11:7:19 | express() |
| src/csurf-example.js:20:1:23:2 | app.get ... ) })\\n}) | src/csurf-example.js:7:11:7:19 | express() |
| src/csurf-example.js:25:1:27:2 | app.pos ... re')\\n}) | src/csurf-example.js:7:11:7:19 | express() |
| src/csurf-example.js:32:3:34:4 | router. ... ')\\n }) | src/csurf-example.js:30:16:30:35 | new express.Router() |
| src/csurf-example.js:39:1:39:48 | app.get ... es) {}) | src/csurf-example.js:7:11:7:19 | express() |
| src/csurf-example.js:40:1:40:49 | app.pos ... es) {}) | src/csurf-example.js:7:11:7:19 | express() |
| src/express2.js:2:14:2:23 | e.Router() | src/express2.js:2:14:2:23 | e.Router() |
| src/express2.js:3:1:3:56 | router. ... res }) | src/express2.js:2:14:2:23 | e.Router() |
| src/express2.js:3:1:4:77 | router. ... sult }) | src/express2.js:2:14:2:23 | e.Router() |
| src/express2.js:6:1:6:15 | app.use(router) | src/express2.js:5:11:5:13 | e() |
| src/express3.js:4:1:7:2 | app.get ... l");\\n}) | src/express3.js:2:11:2:19 | express() |
| src/express3.js:12:1:12:21 | app.use ... dler()) | src/express3.js:2:11:2:19 | express() |
| src/express4.js:4:1:9:2 | app.get ... c1);\\n}) | src/express4.js:2:11:2:19 | express() |
| src/express.js:4:1:9:2 | app.get ... es);\\n}) | src/express.js:2:11:2:19 | express() |
| src/express.js:16:3:18:4 | router. ... );\\n }) | src/express.js:2:11:2:19 | express() |
| src/express.js:22:1:32:2 | app.pos ... r');\\n}) | src/express.js:2:11:2:19 | express() |
| src/express.js:34:1:34:53 | app.get ... andler) | src/express.js:2:11:2:19 | express() |
| src/express.js:39:1:39:21 | app.use ... dler()) | src/express.js:2:11:2:19 | express() |
| src/express.js:44:1:44:26 | app.use ... dler()) | src/express.js:2:11:2:19 | express() |
| src/express.js:46:1:51:2 | app.pos ... me];\\n}) | src/express.js:2:11:2:19 | express() |
| src/inheritedFromNode.js:4:1:8:2 | app.pos ... url;\\n}) | src/inheritedFromNode.js:2:11:2:19 | express() |
| src/middleware-flow.js:13:5:13:25 | router. ... tallDb) | src/middleware-flow.js:2:13:2:21 | express() |
| src/middleware-flow.js:17:5:21:6 | router. ... \\n }) | src/middleware-flow.js:2:13:2:21 | express() |
| src/middleware-flow.js:27:9:27:33 | router. ... ers[p]) | src/middleware-flow.js:2:13:2:21 | express() |
| src/middleware-flow.js:39:1:43:2 | unrelat ... .db;\\n}) | src/middleware-flow.js:37:22:37:30 | express() |
| src/params.js:4:1:12:2 | app.par ... }\\n}) | src/params.js:2:11:2:19 | express() |
| src/params.js:4:1:12:2 | app.par ... }\\n}) | src/params.js:4:1:12:2 | app.par ... }\\n}) |
| src/params.js:14:1:16:2 | app.get ... o");\\n}) | src/params.js:2:11:2:19 | express() |
| src/responseExprs.js:4:1:6:2 | app.get ... res1\\n}) | src/responseExprs.js:2:11:2:19 | express() |
| src/responseExprs.js:7:1:9:2 | app.get ... es2;\\n}) | src/responseExprs.js:2:11:2:19 | express() |
| src/responseExprs.js:10:1:12:2 | app.get ... es3;\\n}) | src/responseExprs.js:2:11:2:19 | express() |
| src/responseExprs.js:13:1:15:2 | app.get ... es4;\\n}) | src/responseExprs.js:2:11:2:19 | express() |
| src/responseExprs.js:16:1:42:2 | app.pos ... }\\n}) | src/responseExprs.js:2:11:2:19 | express() |
| src/route.js:2:14:2:29 | express.Router() | src/route.js:2:14:2:29 | express.Router() |
| src/route.js:4:1:4:31 | router. ... er_id') | src/route.js:2:14:2:29 | express.Router() |
| src/route.js:4:1:5:39 | router. ... xt) {}) | src/route.js:2:14:2:29 | express.Router() |
| src/routesetups.js:3:1:3:16 | express.Router() | src/routesetups.js:3:1:3:16 | express.Router() |
| src/routesetups.js:3:1:4:14 | express ... ('', h) | src/routesetups.js:3:1:3:16 | express.Router() |
| src/routesetups.js:3:1:5:12 | express ... ('', h) | src/routesetups.js:3:1:3:16 | express.Router() |
| src/routesetups.js:7:11:7:32 | express ... erver() | src/routesetups.js:7:11:7:32 | express ... erver() |
| src/routesetups.js:8:1:8:12 | app.error(h) | src/routesetups.js:7:11:7:32 | express ... erver() |
| src/routesetups.js:10:14:10:29 | express.Router() | src/routesetups.js:10:14:10:29 | express.Router() |
| src/routesetups.js:11:12:11:28 | router.route('/') | src/routesetups.js:10:14:10:29 | express.Router() |
| src/routesetups.js:12:1:12:16 | root.post('', h) | src/routesetups.js:10:14:10:29 | express.Router() |
| src/subrouter.js:4:1:4:26 | app.use ... rotect) | src/subrouter.js:2:11:2:19 | express() |
| src/subrouter.js:5:1:5:29 | app.use ... uter()) | src/subrouter.js:2:11:2:19 | express() |
| src/subrouter.js:8:16:8:31 | express.Router() | src/subrouter.js:8:16:8:31 | express.Router() |
| src/subrouter.js:9:3:9:35 | router. ... ndler1) | src/subrouter.js:8:16:8:31 | express.Router() |
| src/subrouter.js:10:3:10:41 | router. ... ndler2) | src/subrouter.js:8:16:8:31 | express.Router() |
test_RouteHandler_getAResponseExpr test_RouteHandler_getAResponseExpr
| src/advanced-routehandler-registration.js:6:6:6:35 | (req, r ... og(req) | src/advanced-routehandler-registration.js:6:12:6:14 | res | | src/advanced-routehandler-registration.js:6:6:6:35 | (req, r ... og(req) | src/advanced-routehandler-registration.js:6:12:6:14 | res |
| src/advanced-routehandler-registration.js:7:6:7:35 | (req, r ... og(req) | src/advanced-routehandler-registration.js:7:12:7:14 | res | | src/advanced-routehandler-registration.js:7:6:7:35 | (req, r ... og(req) | src/advanced-routehandler-registration.js:7:12:7:14 | res |
@@ -1840,25 +1801,35 @@ test_isResponse
| src/advanced-routehandler-registration.js:24:12:24:14 | res | | src/advanced-routehandler-registration.js:24:12:24:14 | res |
| src/advanced-routehandler-registration.js:25:12:25:14 | res | | src/advanced-routehandler-registration.js:25:12:25:14 | res |
| src/advanced-routehandler-registration.js:46:25:46:27 | res | | src/advanced-routehandler-registration.js:46:25:46:27 | res |
| src/advanced-routehandler-registration.js:46:25:46:27 | res |
| src/advanced-routehandler-registration.js:47:32:47:34 | res | | src/advanced-routehandler-registration.js:47:32:47:34 | res |
| src/advanced-routehandler-registration.js:51:15:51:17 | res | | src/advanced-routehandler-registration.js:51:15:51:17 | res |
| src/advanced-routehandler-registration.js:51:15:51:17 | res |
| src/advanced-routehandler-registration.js:51:45:51:47 | res | | src/advanced-routehandler-registration.js:51:45:51:47 | res |
| src/advanced-routehandler-registration.js:59:25:59:27 | res | | src/advanced-routehandler-registration.js:59:25:59:27 | res |
| src/advanced-routehandler-registration.js:59:25:59:27 | res |
| src/advanced-routehandler-registration.js:60:23:60:25 | res | | src/advanced-routehandler-registration.js:60:23:60:25 | res |
| src/advanced-routehandler-registration.js:64:15:64:17 | res | | src/advanced-routehandler-registration.js:64:15:64:17 | res |
| src/advanced-routehandler-registration.js:64:15:64:17 | res |
| src/advanced-routehandler-registration.js:64:50:64:52 | res | | src/advanced-routehandler-registration.js:64:50:64:52 | res |
| src/advanced-routehandler-registration.js:68:18:68:20 | res | | src/advanced-routehandler-registration.js:68:18:68:20 | res |
| src/advanced-routehandler-registration.js:69:25:69:27 | res | | src/advanced-routehandler-registration.js:69:25:69:27 | res |
| src/advanced-routehandler-registration.js:69:25:69:27 | res |
| src/advanced-routehandler-registration.js:70:23:70:25 | res | | src/advanced-routehandler-registration.js:70:23:70:25 | res |
| src/advanced-routehandler-registration.js:73:15:73:17 | res | | src/advanced-routehandler-registration.js:73:15:73:17 | res |
| src/advanced-routehandler-registration.js:73:15:73:17 | res |
| src/advanced-routehandler-registration.js:73:52:73:54 | res | | src/advanced-routehandler-registration.js:73:52:73:54 | res |
| src/advanced-routehandler-registration.js:81:25:81:27 | res | | src/advanced-routehandler-registration.js:81:25:81:27 | res |
| src/advanced-routehandler-registration.js:81:25:81:27 | res |
| src/advanced-routehandler-registration.js:82:32:82:34 | res | | src/advanced-routehandler-registration.js:82:32:82:34 | res |
| src/advanced-routehandler-registration.js:92:15:92:17 | res | | src/advanced-routehandler-registration.js:92:15:92:17 | res |
| src/advanced-routehandler-registration.js:92:15:92:17 | res |
| src/advanced-routehandler-registration.js:92:45:92:47 | res | | src/advanced-routehandler-registration.js:92:45:92:47 | res |
| src/advanced-routehandler-registration.js:100:25:100:27 | res | | src/advanced-routehandler-registration.js:100:25:100:27 | res |
| src/advanced-routehandler-registration.js:100:25:100:27 | res |
| src/advanced-routehandler-registration.js:101:36:101:38 | res | | src/advanced-routehandler-registration.js:101:36:101:38 | res |
| src/advanced-routehandler-registration.js:111:15:111:17 | res | | src/advanced-routehandler-registration.js:111:15:111:17 | res |
| src/advanced-routehandler-registration.js:111:15:111:17 | res |
| src/advanced-routehandler-registration.js:111:45:111:47 | res | | src/advanced-routehandler-registration.js:111:45:111:47 | res |
| src/advanced-routehandler-registration.js:123:26:123:28 | res | | src/advanced-routehandler-registration.js:123:26:123:28 | res |
| src/advanced-routehandler-registration.js:124:26:124:28 | res | | src/advanced-routehandler-registration.js:124:26:124:28 | res |
@@ -1867,32 +1838,40 @@ test_isResponse
| src/advanced-routehandler-registration.js:157:33:157:35 | res | | src/advanced-routehandler-registration.js:157:33:157:35 | res |
| src/controllers/handler-in-bulk-require.js:1:50:1:52 | res | | src/controllers/handler-in-bulk-require.js:1:50:1:52 | res |
| src/csurf-example.js:20:33:20:35 | res | | src/csurf-example.js:20:33:20:35 | res |
| src/csurf-example.js:20:33:20:35 | res |
| src/csurf-example.js:22:3:22:5 | res | | src/csurf-example.js:22:3:22:5 | res |
| src/csurf-example.js:25:37:25:39 | res | | src/csurf-example.js:25:37:25:39 | res |
| src/csurf-example.js:25:37:25:39 | res |
| src/csurf-example.js:26:3:26:5 | res | | src/csurf-example.js:26:3:26:5 | res |
| src/csurf-example.js:26:3:26:43 | res.sen ... here') | | src/csurf-example.js:26:3:26:43 | res.sen ... here') |
| src/csurf-example.js:32:45:32:47 | res | | src/csurf-example.js:32:45:32:47 | res |
| src/csurf-example.js:32:45:32:47 | res |
| src/csurf-example.js:33:5:33:7 | res | | src/csurf-example.js:33:5:33:7 | res |
| src/csurf-example.js:33:5:33:35 | res.sen ... here') | | src/csurf-example.js:33:5:33:35 | res.sen ... here') |
| src/csurf-example.js:39:41:39:43 | res | | src/csurf-example.js:39:41:39:43 | res |
| src/csurf-example.js:40:42:40:44 | res | | src/csurf-example.js:40:42:40:44 | res |
| src/exportedHandler.js:1:49:1:51 | res | | src/exportedHandler.js:1:49:1:51 | res |
| src/express2.js:3:39:3:41 | res | | src/express2.js:3:39:3:41 | res |
| src/express2.js:3:39:3:41 | res |
| src/express2.js:3:46:3:53 | req, res | | src/express2.js:3:46:3:53 | req, res |
| src/express2.js:3:51:3:53 | res | | src/express2.js:3:51:3:53 | res |
| src/express2.js:4:50:4:55 | result | | src/express2.js:4:50:4:55 | result |
| src/express2.js:4:50:4:55 | result |
| src/express2.js:4:60:4:74 | request, result | | src/express2.js:4:60:4:74 | request, result |
| src/express2.js:4:69:4:74 | result | | src/express2.js:4:69:4:74 | result |
| src/express3.js:4:37:4:39 | res | | src/express3.js:4:37:4:39 | res |
| src/express3.js:4:37:4:39 | res |
| src/express3.js:5:3:5:5 | res | | src/express3.js:5:3:5:5 | res |
| src/express3.js:5:3:5:51 | res.hea ... "val")) | | src/express3.js:5:3:5:51 | res.hea ... "val")) |
| src/express3.js:6:3:6:5 | res | | src/express3.js:6:3:6:5 | res |
| src/express3.js:6:3:6:17 | res.send("val") | | src/express3.js:6:3:6:17 | res.send("val") |
| src/express3.js:10:27:10:29 | res | | src/express3.js:10:27:10:29 | res |
| src/express4.js:4:37:4:39 | res | | src/express4.js:4:37:4:39 | res |
| src/express4.js:4:37:4:39 | res |
| src/express4.js:8:3:8:5 | res | | src/express4.js:8:3:8:5 | res |
| src/express4.js:8:3:8:20 | res.send(dynamic1) | | src/express4.js:8:3:8:20 | res.send(dynamic1) |
| src/express.js:4:37:4:39 | res | | src/express.js:4:37:4:39 | res |
| src/express.js:4:37:4:39 | res |
| src/express.js:5:3:5:5 | res | | src/express.js:5:3:5:5 | res |
| src/express.js:6:3:6:5 | res | | src/express.js:6:3:6:5 | res |
| src/express.js:6:3:6:45 | res.hea ... rget")) | | src/express.js:6:3:6:45 | res.hea ... rget")) |
@@ -1900,18 +1879,22 @@ test_isResponse
| src/express.js:7:3:7:42 | res.hea ... plain") | | src/express.js:7:3:7:42 | res.hea ... plain") |
| src/express.js:8:7:8:9 | res | | src/express.js:8:7:8:9 | res |
| src/express.js:11:14:11:16 | arg | | src/express.js:11:14:11:16 | arg |
| src/express.js:11:14:11:16 | arg |
| src/express.js:12:3:12:5 | arg | | src/express.js:12:3:12:5 | arg |
| src/express.js:12:3:12:54 | arg.hea ... , true) | | src/express.js:12:3:12:54 | arg.hea ... , true) |
| src/express.js:16:33:16:35 | res | | src/express.js:16:33:16:35 | res |
| src/express.js:16:33:16:35 | res |
| src/express.js:17:5:17:7 | res | | src/express.js:17:5:17:7 | res |
| src/express.js:17:5:17:24 | res.send("Go away.") | | src/express.js:17:5:17:24 | res.send("Go away.") |
| src/express.js:22:44:22:46 | res | | src/express.js:22:44:22:46 | res |
| src/express.js:22:44:22:46 | res |
| src/express.js:31:3:31:5 | res | | src/express.js:31:3:31:5 | res |
| src/express.js:31:3:31:26 | res.coo ... 'bar') | | src/express.js:31:3:31:26 | res.coo ... 'bar') |
| src/express.js:37:27:37:29 | res | | src/express.js:37:27:37:29 | res |
| src/express.js:42:18:42:20 | res | | src/express.js:42:18:42:20 | res |
| src/express.js:46:36:46:38 | res | | src/express.js:46:36:46:38 | res |
| src/inheritedFromNode.js:4:29:4:31 | res | | src/inheritedFromNode.js:4:29:4:31 | res |
| src/inheritedFromNode.js:4:29:4:31 | res |
| src/inheritedFromNode.js:5:2:5:4 | res | | src/inheritedFromNode.js:5:2:5:4 | res |
| src/inheritedFromNode.js:6:2:6:4 | res | | src/inheritedFromNode.js:6:2:6:4 | res |
| src/middleware-flow.js:5:25:5:27 | res | | src/middleware-flow.js:5:25:5:27 | res |
@@ -1920,20 +1903,27 @@ test_isResponse
| src/middleware-flow.js:24:23:24:25 | res | | src/middleware-flow.js:24:23:24:25 | res |
| src/middleware-flow.js:39:29:39:31 | res | | src/middleware-flow.js:39:29:39:31 | res |
| src/params.js:4:24:4:26 | res | | src/params.js:4:24:4:26 | res |
| src/params.js:4:24:4:26 | res |
| src/params.js:8:9:8:11 | res | | src/params.js:8:9:8:11 | res |
| src/params.js:8:9:8:23 | res.send(value) | | src/params.js:8:9:8:23 | res.send(value) |
| src/params.js:14:38:14:40 | res | | src/params.js:14:38:14:40 | res |
| src/params.js:14:38:14:40 | res |
| src/params.js:15:3:15:5 | res | | src/params.js:15:3:15:5 | res |
| src/params.js:15:3:15:19 | res.send("Hello") | | src/params.js:15:3:15:19 | res.send("Hello") |
| src/responseExprs.js:4:37:4:40 | res1 | | src/responseExprs.js:4:37:4:40 | res1 |
| src/responseExprs.js:4:37:4:40 | res1 |
| src/responseExprs.js:5:5:5:8 | res1 | | src/responseExprs.js:5:5:5:8 | res1 |
| src/responseExprs.js:7:37:7:40 | res2 | | src/responseExprs.js:7:37:7:40 | res2 |
| src/responseExprs.js:7:37:7:40 | res2 |
| src/responseExprs.js:8:5:8:8 | res2 | | src/responseExprs.js:8:5:8:8 | res2 |
| src/responseExprs.js:10:44:10:47 | res3 | | src/responseExprs.js:10:44:10:47 | res3 |
| src/responseExprs.js:10:44:10:47 | res3 |
| src/responseExprs.js:11:5:11:8 | res3 | | src/responseExprs.js:11:5:11:8 | res3 |
| src/responseExprs.js:13:37:13:40 | res4 | | src/responseExprs.js:13:37:13:40 | res4 |
| src/responseExprs.js:13:37:13:40 | res4 |
| src/responseExprs.js:14:5:14:8 | res4 | | src/responseExprs.js:14:5:14:8 | res4 |
| src/responseExprs.js:16:44:16:46 | res | | src/responseExprs.js:16:44:16:46 | res |
| src/responseExprs.js:16:44:16:46 | res |
| src/responseExprs.js:19:5:19:7 | res | | src/responseExprs.js:19:5:19:7 | res |
| src/responseExprs.js:19:5:19:16 | res.append() | | src/responseExprs.js:19:5:19:16 | res.append() |
| src/responseExprs.js:20:5:20:7 | res | | src/responseExprs.js:20:5:20:7 | res |
@@ -1971,6 +1961,8 @@ test_isResponse
| src/responseExprs.js:37:5:37:28 | f(res.a ... ppend() | | src/responseExprs.js:37:5:37:28 | f(res.a ... ppend() |
| src/responseExprs.js:37:7:37:9 | res | | src/responseExprs.js:37:7:37:9 | res |
| src/responseExprs.js:37:7:37:18 | res.append() | | src/responseExprs.js:37:7:37:18 | res.append() |
| src/responseExprs.js:39:5:41:5 | return of function f |
| src/responseExprs.js:39:16:39:21 | resArg |
| src/responseExprs.js:39:16:39:21 | resArg | | src/responseExprs.js:39:16:39:21 | resArg |
| src/responseExprs.js:40:16:40:21 | resArg | | src/responseExprs.js:40:16:40:21 | resArg |
| src/responseExprs.js:40:16:40:30 | resArg.append() | | src/responseExprs.js:40:16:40:30 | resArg.append() |