Asger F 29659647ea JS: Fix barrier guards for ServerSideUrlRedirect ...

The barrier guards for ServerSideUrlRedirect were lost when it was ported to ConfigSig, and the aforementioned spurious alert was a result of that.

The query had two guards: a proper barrier guard and a heuristic one for functions named 'isLocalURL'. We should move away from the heuristic name-based sanitiser guards, so I'm only reinstating the proper barrier guard.

Therefore updating the test to test the real barrier guard.

2025-02-28 13:28:43 +01:00

..

CWE-020

JS: Accept trivial test changes

2025-02-28 13:27:43 +01:00

CWE-022

JS: Accept trivial test changes

2025-02-28 13:27:43 +01:00

CWE-073

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-078

JS: Stop overriding entire module.exports object in test

2025-02-28 13:28:09 +01:00

CWE-079

JS: Mark regressions due to lack of local field steps

2025-02-28 13:27:52 +01:00

CWE-089

JS: Fix the spurious flow

2025-02-28 13:28:02 +01:00

CWE-094

JS: Mark regressions due to lack of local field steps

2025-02-28 13:27:52 +01:00

CWE-116

JS: Accept a double-flagged line

2025-02-28 13:27:51 +01:00

CWE-117

JS: Move some alerts to their correct location

2025-02-28 13:27:40 +01:00

CWE-134

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-178

JS: Accept trivial test changes

2025-02-28 13:27:43 +01:00

CWE-200

JS: Remove alert expectation from step

2025-02-28 13:28:06 +01:00

CWE-201

JS: Accept trivial test changes

2025-02-28 13:27:43 +01:00

CWE-209

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-295

JS: Accept trivial test changes

2025-02-28 13:27:43 +01:00

CWE-300

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-312

JS: Accept some more alerts from CleartextStorage

2025-02-28 13:28:14 +01:00

CWE-313

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-326

JS: Accept alerts for InsufficientKeySize

2025-02-28 13:28:15 +01:00

CWE-327

JS: Add query ID to some alerts

2025-02-28 13:27:41 +01:00

CWE-338

JS: Accept InsecureRandomness alerts

2025-02-28 13:28:17 +01:00

CWE-346

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-347

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-352

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-367

JS: Move some alerts to their correct location

2025-02-28 13:27:40 +01:00

CWE-377

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-384

JS: Move some alerts to their correct location

2025-02-28 13:27:40 +01:00

CWE-400

JS: Add a query ID

2025-02-28 13:28:28 +01:00

CWE-451

JS: Mark a spurious alert in missing-x-frame-options

2025-02-28 13:28:30 +01:00

CWE-502

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-506

JS: Accept alerts for HardcodedDataInterpretedAsCode

2025-02-28 13:28:32 +01:00

CWE-522-DecompressionBombs

JS: Mark what seems to be missing alerts for fflate

2025-02-28 13:28:35 +01:00

CWE-598

JS: Fix a comment

2025-02-28 13:28:36 +01:00

CWE-601

JS: Fix barrier guards for ServerSideUrlRedirect

2025-02-28 13:28:43 +01:00

CWE-611

JS: Update output after line number change

2025-02-28 13:27:31 +01:00

CWE-614

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-640

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-643

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-693

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-730

JS: Add query ID to some alerts

2025-02-28 13:27:41 +01:00

CWE-754

JS: Accept trivial test changes

2025-02-28 13:27:43 +01:00

CWE-770

JS: Accept trivial test changes

2025-02-28 13:27:43 +01:00

CWE-776

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-798

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-807

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-829

JS: Move some alerts to their correct location

2025-02-28 13:27:40 +01:00

CWE-830

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-834

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-843

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-862

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-912

JS: Accept trivial test changes

2025-02-28 13:27:43 +01:00

CWE-915

JS: Mark regressions due to lack of local field steps

2025-02-28 13:27:52 +01:00

CWE-916

JS: Enable post-processing for all .qlref files

2025-02-28 13:27:33 +01:00

CWE-918

JS: Accept raw test output

2025-02-28 13:27:38 +01:00

CWE-1004

JS: Move some alerts to their correct location

2025-02-28 13:27:40 +01:00

CWE-1275

JS: Move some alerts to their correct location

2025-02-28 13:27:40 +01:00