Files
codeql/javascript/ql/test/library-tests/SensitiveActions/DummyPasswords.ql
2019-09-16 10:11:43 +02:00

21 lines
542 B
Plaintext

import javascript
import semmle.javascript.security.SensitiveActions
string getASamplePassword() {
result = "abcdefgh" or
result = "sOKY6ccizpmvF*32so%Q" or
result = "XXXXXXXX" or
result = "example_password" or
result = "change_me" or
result = "" or
result = "insert-auth-from-gui" or
result = "admin" or
result = "root"
}
from string password, boolean isDummy
where
password = getASamplePassword() and
if PasswordHeuristics::isDummyPassword(password) then isDummy = true else isDummy = false
select password, isDummy