#select
| LoopBoundInjectionBad.js:20:25:20:27 | val | LoopBoundInjectionBad.js:8:13:8:20 | req.body | LoopBoundInjectionBad.js:20:25:20:27 | val | Iteration over a user-controlled object with a potentially unbounded .length property from a $@. | LoopBoundInjectionBad.js:8:13:8:20 | req.body | user-provided value |
| LoopBoundInjectionBad.js:29:16:29:18 | val | LoopBoundInjectionBad.js:10:15:10:22 | req.body | LoopBoundInjectionBad.js:29:16:29:18 | val | Iteration over a user-controlled object with a potentially unbounded .length property from a $@. | LoopBoundInjectionBad.js:10:15:10:22 | req.body | user-provided value |
| LoopBoundInjectionBad.js:38:15:38:17 | val | LoopBoundInjectionBad.js:12:25:12:32 | req.body | LoopBoundInjectionBad.js:38:15:38:17 | val | Iteration over a user-controlled object with a potentially unbounded .length property from a $@. | LoopBoundInjectionBad.js:12:25:12:32 | req.body | user-provided value |
| LoopBoundInjectionBad.js:51:25:51:27 | val | LoopBoundInjectionBad.js:14:19:14:26 | req.body | LoopBoundInjectionBad.js:51:25:51:27 | val | Iteration over a user-controlled object with a potentially unbounded .length property from a $@. | LoopBoundInjectionBad.js:14:19:14:26 | req.body | user-provided value |
| LoopBoundInjectionExitBad.js:20:22:20:24 | val | LoopBoundInjectionExitBad.js:8:9:8:16 | req.body | LoopBoundInjectionExitBad.js:20:22:20:24 | val | Iteration over a user-controlled object with a potentially unbounded .length property from a $@. | LoopBoundInjectionExitBad.js:8:9:8:16 | req.body | user-provided value |
| LoopBoundInjectionExitBad.js:34:22:34:24 | val | LoopBoundInjectionExitBad.js:10:9:10:16 | req.body | LoopBoundInjectionExitBad.js:34:22:34:24 | val | Iteration over a user-controlled object with a potentially unbounded .length property from a $@. | LoopBoundInjectionExitBad.js:10:9:10:16 | req.body | user-provided value |
| LoopBoundInjectionExitBad.js:49:22:49:24 | val | LoopBoundInjectionExitBad.js:12:10:12:17 | req.body | LoopBoundInjectionExitBad.js:49:22:49:24 | val | Iteration over a user-controlled object with a potentially unbounded .length property from a $@. | LoopBoundInjectionExitBad.js:12:10:12:17 | req.body | user-provided value |
| LoopBoundInjectionExitBad.js:60:8:60:10 | val | LoopBoundInjectionExitBad.js:14:14:14:21 | req.body | LoopBoundInjectionExitBad.js:60:8:60:10 | val | Iteration over a user-controlled object with a potentially unbounded .length property from a $@. | LoopBoundInjectionExitBad.js:14:14:14:21 | req.body | user-provided value |
| LoopBoundInjectionLodash.js:13:13:13:15 | val | LoopBoundInjectionLodash.js:9:13:9:20 | req.body | LoopBoundInjectionLodash.js:13:13:13:15 | val | Iteration over a user-controlled object with a potentially unbounded .length property from a $@. | LoopBoundInjectionLodash.js:9:13:9:20 | req.body | user-provided value |
edges
| LoopBoundInjectionBad.js:8:13:8:20 | req.body | LoopBoundInjectionBad.js:17:18:17:20 | val | provenance |  |
| LoopBoundInjectionBad.js:10:15:10:22 | req.body | LoopBoundInjectionBad.js:25:20:25:22 | val | provenance |  |
| LoopBoundInjectionBad.js:12:25:12:32 | req.body | LoopBoundInjectionBad.js:35:30:35:32 | val | provenance |  |
| LoopBoundInjectionBad.js:14:19:14:26 | req.body | LoopBoundInjectionBad.js:46:24:46:26 | val | provenance |  |
| LoopBoundInjectionBad.js:17:18:17:20 | val | LoopBoundInjectionBad.js:20:25:20:27 | val | provenance |  |
| LoopBoundInjectionBad.js:25:20:25:22 | val | LoopBoundInjectionBad.js:29:16:29:18 | val | provenance |  |
| LoopBoundInjectionBad.js:35:30:35:32 | val | LoopBoundInjectionBad.js:38:15:38:17 | val | provenance |  |
| LoopBoundInjectionBad.js:46:24:46:26 | val | LoopBoundInjectionBad.js:51:25:51:27 | val | provenance |  |
| LoopBoundInjectionExitBad.js:8:9:8:16 | req.body | LoopBoundInjectionExitBad.js:17:17:17:19 | val | provenance |  |
| LoopBoundInjectionExitBad.js:10:9:10:16 | req.body | LoopBoundInjectionExitBad.js:31:17:31:19 | val | provenance |  |
| LoopBoundInjectionExitBad.js:12:10:12:17 | req.body | LoopBoundInjectionExitBad.js:46:18:46:20 | val | provenance |  |
| LoopBoundInjectionExitBad.js:14:14:14:21 | req.body | LoopBoundInjectionExitBad.js:59:22:59:24 | val | provenance |  |
| LoopBoundInjectionExitBad.js:17:17:17:19 | val | LoopBoundInjectionExitBad.js:20:22:20:24 | val | provenance |  |
| LoopBoundInjectionExitBad.js:31:17:31:19 | val | LoopBoundInjectionExitBad.js:34:22:34:24 | val | provenance |  |
| LoopBoundInjectionExitBad.js:46:18:46:20 | val | LoopBoundInjectionExitBad.js:49:22:49:24 | val | provenance |  |
| LoopBoundInjectionExitBad.js:59:22:59:24 | val | LoopBoundInjectionExitBad.js:60:8:60:10 | val | provenance |  |
| LoopBoundInjectionLodash.js:9:13:9:20 | req.body | LoopBoundInjectionLodash.js:12:18:12:20 | val | provenance |  |
| LoopBoundInjectionLodash.js:12:18:12:20 | val | LoopBoundInjectionLodash.js:13:13:13:15 | val | provenance |  |
nodes
| LoopBoundInjectionBad.js:8:13:8:20 | req.body | semmle.label | req.body |
| LoopBoundInjectionBad.js:10:15:10:22 | req.body | semmle.label | req.body |
| LoopBoundInjectionBad.js:12:25:12:32 | req.body | semmle.label | req.body |
| LoopBoundInjectionBad.js:14:19:14:26 | req.body | semmle.label | req.body |
| LoopBoundInjectionBad.js:17:18:17:20 | val | semmle.label | val |
| LoopBoundInjectionBad.js:20:25:20:27 | val | semmle.label | val |
| LoopBoundInjectionBad.js:25:20:25:22 | val | semmle.label | val |
| LoopBoundInjectionBad.js:29:16:29:18 | val | semmle.label | val |
| LoopBoundInjectionBad.js:35:30:35:32 | val | semmle.label | val |
| LoopBoundInjectionBad.js:38:15:38:17 | val | semmle.label | val |
| LoopBoundInjectionBad.js:46:24:46:26 | val | semmle.label | val |
| LoopBoundInjectionBad.js:51:25:51:27 | val | semmle.label | val |
| LoopBoundInjectionExitBad.js:8:9:8:16 | req.body | semmle.label | req.body |
| LoopBoundInjectionExitBad.js:10:9:10:16 | req.body | semmle.label | req.body |
| LoopBoundInjectionExitBad.js:12:10:12:17 | req.body | semmle.label | req.body |
| LoopBoundInjectionExitBad.js:14:14:14:21 | req.body | semmle.label | req.body |
| LoopBoundInjectionExitBad.js:17:17:17:19 | val | semmle.label | val |
| LoopBoundInjectionExitBad.js:20:22:20:24 | val | semmle.label | val |
| LoopBoundInjectionExitBad.js:31:17:31:19 | val | semmle.label | val |
| LoopBoundInjectionExitBad.js:34:22:34:24 | val | semmle.label | val |
| LoopBoundInjectionExitBad.js:46:18:46:20 | val | semmle.label | val |
| LoopBoundInjectionExitBad.js:49:22:49:24 | val | semmle.label | val |
| LoopBoundInjectionExitBad.js:59:22:59:24 | val | semmle.label | val |
| LoopBoundInjectionExitBad.js:60:8:60:10 | val | semmle.label | val |
| LoopBoundInjectionLodash.js:9:13:9:20 | req.body | semmle.label | req.body |
| LoopBoundInjectionLodash.js:12:18:12:20 | val | semmle.label | val |
| LoopBoundInjectionLodash.js:13:13:13:15 | val | semmle.label | val |
subpaths