mirror of
https://github.com/github/codeql.git
synced 2026-07-28 22:36:50 +02:00
24 lines
929 B
Plaintext
24 lines
929 B
Plaintext
import javascript
|
|
import testUtilities.ConsistencyChecking
|
|
import semmle.javascript.security.dataflow.CommandInjection
|
|
import semmle.javascript.security.dataflow.IndirectCommandInjection
|
|
import semmle.javascript.security.dataflow.ShellCommandInjectionFromEnvironment
|
|
import semmle.javascript.security.dataflow.UnsafeShellCommandConstruction
|
|
import semmle.javascript.security.dataflow.SecondOrderCommandInjectionQuery
|
|
|
|
class CommandInjectionConsistency extends ConsistencyConfiguration {
|
|
CommandInjectionConsistency() { this = "ComandInjection" }
|
|
|
|
override File getAFile() { not result.getBaseName() = "uselesscat.js" }
|
|
}
|
|
|
|
import semmle.javascript.security.UselessUseOfCat
|
|
|
|
class UselessCatConsistency extends ConsistencyConfiguration {
|
|
UselessCatConsistency() { this = "Cat" }
|
|
|
|
override DataFlow::Node getAnAlert() { result instanceof UselessCat }
|
|
|
|
override File getAFile() { result.getBaseName() = "uselesscat.js" }
|
|
}
|