mirror of
https://github.com/github/codeql.git
synced 2026-08-03 08:52:55 +02:00
cf28c32fd8
The shared CFG library overrides ControlFlowNode.toString() as 'final' (shared/controlflow/codeql/controlflow/Cfg.qll:1217), so the legacy 'ControlFlowNode for X' prefix is gone — the new toString returns just 'X' for normal nodes and 'After X' for after-nodes. This produces a large cosmetic diff in test expected files with no semantic change. Mass-rebless 78 .expected files whose actual output differs from the checked-in expected only by this rename. Each file was verified to be identical after normalising 'ControlFlowNode for ' and 'After ' away from both sides. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
33 lines
3.1 KiB
Plaintext
33 lines
3.1 KiB
Plaintext
edges
|
|
| reflected_xss.py:2:26:2:32 | After ImportMember | reflected_xss.py:2:26:2:32 | request | provenance | |
|
|
| reflected_xss.py:2:26:2:32 | request | reflected_xss.py:9:18:9:24 | request | provenance | |
|
|
| reflected_xss.py:2:26:2:32 | request | reflected_xss.py:21:23:21:29 | request | provenance | |
|
|
| reflected_xss.py:2:26:2:32 | request | reflected_xss.py:27:23:27:29 | request | provenance | |
|
|
| reflected_xss.py:9:5:9:14 | first_name | reflected_xss.py:10:26:10:53 | After BinaryExpr | provenance | |
|
|
| reflected_xss.py:9:18:9:24 | request | reflected_xss.py:9:18:9:29 | After Attribute | provenance | AdditionalTaintStep |
|
|
| reflected_xss.py:9:18:9:29 | After Attribute | reflected_xss.py:9:18:9:45 | After Attribute() | provenance | dict.get |
|
|
| reflected_xss.py:9:18:9:45 | After Attribute() | reflected_xss.py:9:5:9:14 | first_name | provenance | |
|
|
| reflected_xss.py:21:5:21:8 | data | reflected_xss.py:22:26:22:41 | After Attribute() | provenance | AdditionalTaintStep |
|
|
| reflected_xss.py:21:23:21:29 | request | reflected_xss.py:21:5:21:8 | data | provenance | AdditionalTaintStep |
|
|
| reflected_xss.py:27:5:27:8 | data | reflected_xss.py:28:26:28:41 | After Attribute() | provenance | AdditionalTaintStep |
|
|
| reflected_xss.py:27:23:27:29 | request | reflected_xss.py:27:5:27:8 | data | provenance | AdditionalTaintStep |
|
|
nodes
|
|
| reflected_xss.py:2:26:2:32 | After ImportMember | semmle.label | After ImportMember |
|
|
| reflected_xss.py:2:26:2:32 | request | semmle.label | request |
|
|
| reflected_xss.py:9:5:9:14 | first_name | semmle.label | first_name |
|
|
| reflected_xss.py:9:18:9:24 | request | semmle.label | request |
|
|
| reflected_xss.py:9:18:9:29 | After Attribute | semmle.label | After Attribute |
|
|
| reflected_xss.py:9:18:9:45 | After Attribute() | semmle.label | After Attribute() |
|
|
| reflected_xss.py:10:26:10:53 | After BinaryExpr | semmle.label | After BinaryExpr |
|
|
| reflected_xss.py:21:5:21:8 | data | semmle.label | data |
|
|
| reflected_xss.py:21:23:21:29 | request | semmle.label | request |
|
|
| reflected_xss.py:22:26:22:41 | After Attribute() | semmle.label | After Attribute() |
|
|
| reflected_xss.py:27:5:27:8 | data | semmle.label | data |
|
|
| reflected_xss.py:27:23:27:29 | request | semmle.label | request |
|
|
| reflected_xss.py:28:26:28:41 | After Attribute() | semmle.label | After Attribute() |
|
|
subpaths
|
|
#select
|
|
| reflected_xss.py:10:26:10:53 | After BinaryExpr | reflected_xss.py:2:26:2:32 | After ImportMember | reflected_xss.py:10:26:10:53 | After BinaryExpr | Cross-site scripting vulnerability due to a $@. | reflected_xss.py:2:26:2:32 | After ImportMember | user-provided value |
|
|
| reflected_xss.py:22:26:22:41 | After Attribute() | reflected_xss.py:2:26:2:32 | After ImportMember | reflected_xss.py:22:26:22:41 | After Attribute() | Cross-site scripting vulnerability due to a $@. | reflected_xss.py:2:26:2:32 | After ImportMember | user-provided value |
|
|
| reflected_xss.py:28:26:28:41 | After Attribute() | reflected_xss.py:2:26:2:32 | After ImportMember | reflected_xss.py:28:26:28:41 | After Attribute() | Cross-site scripting vulnerability due to a $@. | reflected_xss.py:2:26:2:32 | After ImportMember | user-provided value |
|