mirror of
https://github.com/github/codeql.git
synced 2026-02-15 06:23:42 +01:00
192 lines
17 KiB
Plaintext
192 lines
17 KiB
Plaintext
nodes
|
|
| TaintedPath-es6.js:7:7:7:44 | path |
|
|
| TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) |
|
|
| TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query |
|
|
| TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path |
|
|
| TaintedPath-es6.js:7:20:7:26 | req.url |
|
|
| TaintedPath-es6.js:10:26:10:45 | join("public", path) |
|
|
| TaintedPath-es6.js:10:41:10:44 | path |
|
|
| TaintedPath.js:9:7:9:48 | path |
|
|
| TaintedPath.js:9:14:9:37 | url.par ... , true) |
|
|
| TaintedPath.js:9:14:9:43 | url.par ... ).query |
|
|
| TaintedPath.js:9:14:9:48 | url.par ... ry.path |
|
|
| TaintedPath.js:9:24:9:30 | req.url |
|
|
| TaintedPath.js:12:29:12:32 | path |
|
|
| TaintedPath.js:15:29:15:48 | "/home/user/" + path |
|
|
| TaintedPath.js:15:45:15:48 | path |
|
|
| TaintedPath.js:19:33:19:36 | path |
|
|
| TaintedPath.js:23:33:23:36 | path |
|
|
| TaintedPath.js:27:33:27:36 | path |
|
|
| TaintedPath.js:30:7:30:24 | path |
|
|
| TaintedPath.js:34:3:34:3 | path |
|
|
| TaintedPath.js:34:7:34:24 | path |
|
|
| TaintedPath.js:34:29:34:46 | path |
|
|
| TaintedPath.js:38:3:38:3 | path |
|
|
| TaintedPath.js:38:7:38:24 | path |
|
|
| TaintedPath.js:38:29:38:46 | path |
|
|
| TaintedPath.js:39:5:39:5 | path |
|
|
| TaintedPath.js:39:31:39:34 | path |
|
|
| TaintedPath.js:45:3:45:44 | path |
|
|
| TaintedPath.js:45:10:45:33 | url.par ... , true) |
|
|
| TaintedPath.js:45:10:45:39 | url.par ... ).query |
|
|
| TaintedPath.js:45:10:45:44 | url.par ... ry.path |
|
|
| TaintedPath.js:45:20:45:26 | req.url |
|
|
| TaintedPath.js:47:29:47:53 | pathMod ... e(path) |
|
|
| TaintedPath.js:47:49:47:52 | path |
|
|
| TaintedPath.js:49:29:49:52 | pathMod ... e(path) |
|
|
| TaintedPath.js:49:48:49:51 | path |
|
|
| TaintedPath.js:51:29:51:52 | pathMod ... e(path) |
|
|
| TaintedPath.js:51:48:51:51 | path |
|
|
| TaintedPath.js:53:29:53:49 | pathMod ... n(path) |
|
|
| TaintedPath.js:53:45:53:48 | path |
|
|
| TaintedPath.js:55:29:55:58 | pathMod ... ath, z) |
|
|
| TaintedPath.js:55:51:55:54 | path |
|
|
| TaintedPath.js:57:29:57:54 | pathMod ... e(path) |
|
|
| TaintedPath.js:57:50:57:53 | path |
|
|
| TaintedPath.js:59:29:59:56 | pathMod ... , path) |
|
|
| TaintedPath.js:59:52:59:55 | path |
|
|
| TaintedPath.js:61:29:61:56 | pathMod ... ath, x) |
|
|
| TaintedPath.js:61:49:61:52 | path |
|
|
| TaintedPath.js:63:29:63:52 | pathMod ... e(path) |
|
|
| TaintedPath.js:63:48:63:51 | path |
|
|
| TaintedPath.js:65:29:65:61 | pathMod ... ath, z) |
|
|
| TaintedPath.js:65:54:65:57 | path |
|
|
| TaintedPath.js:67:29:67:61 | pathMod ... h(path) |
|
|
| TaintedPath.js:67:57:67:60 | path |
|
|
| TaintedPath.js:78:26:78:40 | document.cookie |
|
|
| TaintedPath.js:84:31:84:70 | require ... eq.url) |
|
|
| TaintedPath.js:84:31:84:76 | require ... ).query |
|
|
| TaintedPath.js:84:63:84:69 | req.url |
|
|
| TaintedPath.js:85:31:85:68 | require ... eq.url) |
|
|
| TaintedPath.js:85:31:85:74 | require ... ).query |
|
|
| TaintedPath.js:85:61:85:67 | req.url |
|
|
| TaintedPath.js:86:31:86:67 | require ... eq.url) |
|
|
| TaintedPath.js:86:31:86:73 | require ... ).query |
|
|
| TaintedPath.js:86:60:86:66 | req.url |
|
|
| TaintedPath.js:94:48:94:60 | req.params[0] |
|
|
| tainted-array-steps.js:9:7:9:48 | path |
|
|
| tainted-array-steps.js:9:14:9:37 | url.par ... , true) |
|
|
| tainted-array-steps.js:9:14:9:43 | url.par ... ).query |
|
|
| tainted-array-steps.js:9:14:9:48 | url.par ... ry.path |
|
|
| tainted-array-steps.js:9:24:9:30 | req.url |
|
|
| tainted-array-steps.js:11:29:11:44 | ['public', path] |
|
|
| tainted-array-steps.js:11:29:11:54 | ['publi ... in('/') |
|
|
| tainted-array-steps.js:11:40:11:43 | path |
|
|
| tainted-array-steps.js:13:15:13:30 | ['public', path] |
|
|
| tainted-array-steps.js:13:26:13:29 | path |
|
|
| tainted-array-steps.js:14:3:14:41 | parts |
|
|
| tainted-array-steps.js:14:11:14:41 | parts.m ... Case()) |
|
|
| tainted-array-steps.js:14:21:14:21 | x |
|
|
| tainted-array-steps.js:14:26:14:26 | x |
|
|
| tainted-array-steps.js:14:26:14:40 | x.toLowerCase() |
|
|
| tainted-array-steps.js:15:29:15:33 | parts |
|
|
| tainted-array-steps.js:15:29:15:43 | parts.join('/') |
|
|
| tainted-require.js:7:19:7:37 | req.param("module") |
|
|
| tainted-sendFile.js:7:16:7:33 | req.param("gimme") |
|
|
| tainted-sendFile.js:9:16:9:33 | req.param("gimme") |
|
|
| views.js:1:43:1:55 | req.params[0] |
|
|
edges
|
|
| TaintedPath-es6.js:7:7:7:44 | path | TaintedPath-es6.js:10:41:10:44 | path |
|
|
| TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) | TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query |
|
|
| TaintedPath-es6.js:7:14:7:39 | parse(r ... ).query | TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path |
|
|
| TaintedPath-es6.js:7:14:7:44 | parse(r ... ry.path | TaintedPath-es6.js:7:7:7:44 | path |
|
|
| TaintedPath-es6.js:7:20:7:26 | req.url | TaintedPath-es6.js:7:14:7:33 | parse(req.url, true) |
|
|
| TaintedPath-es6.js:10:41:10:44 | path | TaintedPath-es6.js:10:26:10:45 | join("public", path) |
|
|
| TaintedPath.js:9:7:9:48 | path | TaintedPath.js:12:29:12:32 | path |
|
|
| TaintedPath.js:9:7:9:48 | path | TaintedPath.js:15:45:15:48 | path |
|
|
| TaintedPath.js:9:7:9:48 | path | TaintedPath.js:19:33:19:36 | path |
|
|
| TaintedPath.js:9:7:9:48 | path | TaintedPath.js:23:33:23:36 | path |
|
|
| TaintedPath.js:9:7:9:48 | path | TaintedPath.js:27:33:27:36 | path |
|
|
| TaintedPath.js:9:7:9:48 | path | TaintedPath.js:30:7:30:24 | path |
|
|
| TaintedPath.js:9:14:9:37 | url.par ... , true) | TaintedPath.js:9:14:9:43 | url.par ... ).query |
|
|
| TaintedPath.js:9:14:9:43 | url.par ... ).query | TaintedPath.js:9:14:9:48 | url.par ... ry.path |
|
|
| TaintedPath.js:9:14:9:48 | url.par ... ry.path | TaintedPath.js:9:7:9:48 | path |
|
|
| TaintedPath.js:9:24:9:30 | req.url | TaintedPath.js:9:14:9:37 | url.par ... , true) |
|
|
| TaintedPath.js:15:45:15:48 | path | TaintedPath.js:15:29:15:48 | "/home/user/" + path |
|
|
| TaintedPath.js:30:7:30:24 | path | TaintedPath.js:34:3:34:3 | path |
|
|
| TaintedPath.js:34:3:34:3 | path | TaintedPath.js:34:7:34:24 | path |
|
|
| TaintedPath.js:34:7:34:24 | path | TaintedPath.js:34:29:34:46 | path |
|
|
| TaintedPath.js:34:29:34:46 | path | TaintedPath.js:38:3:38:3 | path |
|
|
| TaintedPath.js:38:3:38:3 | path | TaintedPath.js:38:7:38:24 | path |
|
|
| TaintedPath.js:38:7:38:24 | path | TaintedPath.js:38:29:38:46 | path |
|
|
| TaintedPath.js:38:29:38:46 | path | TaintedPath.js:39:5:39:5 | path |
|
|
| TaintedPath.js:39:5:39:5 | path | TaintedPath.js:39:31:39:34 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:47:49:47:52 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:49:48:49:51 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:51:48:51:51 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:53:45:53:48 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:55:51:55:54 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:57:50:57:53 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:59:52:59:55 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:61:49:61:52 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:63:48:63:51 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:65:54:65:57 | path |
|
|
| TaintedPath.js:45:3:45:44 | path | TaintedPath.js:67:57:67:60 | path |
|
|
| TaintedPath.js:45:10:45:33 | url.par ... , true) | TaintedPath.js:45:10:45:39 | url.par ... ).query |
|
|
| TaintedPath.js:45:10:45:39 | url.par ... ).query | TaintedPath.js:45:10:45:44 | url.par ... ry.path |
|
|
| TaintedPath.js:45:10:45:44 | url.par ... ry.path | TaintedPath.js:45:3:45:44 | path |
|
|
| TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:45:10:45:33 | url.par ... , true) |
|
|
| TaintedPath.js:47:49:47:52 | path | TaintedPath.js:47:29:47:53 | pathMod ... e(path) |
|
|
| TaintedPath.js:49:48:49:51 | path | TaintedPath.js:49:29:49:52 | pathMod ... e(path) |
|
|
| TaintedPath.js:51:48:51:51 | path | TaintedPath.js:51:29:51:52 | pathMod ... e(path) |
|
|
| TaintedPath.js:53:45:53:48 | path | TaintedPath.js:53:29:53:49 | pathMod ... n(path) |
|
|
| TaintedPath.js:55:51:55:54 | path | TaintedPath.js:55:29:55:58 | pathMod ... ath, z) |
|
|
| TaintedPath.js:57:50:57:53 | path | TaintedPath.js:57:29:57:54 | pathMod ... e(path) |
|
|
| TaintedPath.js:59:52:59:55 | path | TaintedPath.js:59:29:59:56 | pathMod ... , path) |
|
|
| TaintedPath.js:61:49:61:52 | path | TaintedPath.js:61:29:61:56 | pathMod ... ath, x) |
|
|
| TaintedPath.js:63:48:63:51 | path | TaintedPath.js:63:29:63:52 | pathMod ... e(path) |
|
|
| TaintedPath.js:65:54:65:57 | path | TaintedPath.js:65:29:65:61 | pathMod ... ath, z) |
|
|
| TaintedPath.js:67:57:67:60 | path | TaintedPath.js:67:29:67:61 | pathMod ... h(path) |
|
|
| TaintedPath.js:84:31:84:70 | require ... eq.url) | TaintedPath.js:84:31:84:76 | require ... ).query |
|
|
| TaintedPath.js:84:63:84:69 | req.url | TaintedPath.js:84:31:84:70 | require ... eq.url) |
|
|
| TaintedPath.js:85:31:85:68 | require ... eq.url) | TaintedPath.js:85:31:85:74 | require ... ).query |
|
|
| TaintedPath.js:85:61:85:67 | req.url | TaintedPath.js:85:31:85:68 | require ... eq.url) |
|
|
| TaintedPath.js:86:31:86:67 | require ... eq.url) | TaintedPath.js:86:31:86:73 | require ... ).query |
|
|
| TaintedPath.js:86:60:86:66 | req.url | TaintedPath.js:86:31:86:67 | require ... eq.url) |
|
|
| tainted-array-steps.js:9:7:9:48 | path | tainted-array-steps.js:11:40:11:43 | path |
|
|
| tainted-array-steps.js:9:7:9:48 | path | tainted-array-steps.js:13:26:13:29 | path |
|
|
| tainted-array-steps.js:9:14:9:37 | url.par ... , true) | tainted-array-steps.js:9:14:9:43 | url.par ... ).query |
|
|
| tainted-array-steps.js:9:14:9:43 | url.par ... ).query | tainted-array-steps.js:9:14:9:48 | url.par ... ry.path |
|
|
| tainted-array-steps.js:9:14:9:48 | url.par ... ry.path | tainted-array-steps.js:9:7:9:48 | path |
|
|
| tainted-array-steps.js:9:24:9:30 | req.url | tainted-array-steps.js:9:14:9:37 | url.par ... , true) |
|
|
| tainted-array-steps.js:11:29:11:44 | ['public', path] | tainted-array-steps.js:11:29:11:54 | ['publi ... in('/') |
|
|
| tainted-array-steps.js:11:40:11:43 | path | tainted-array-steps.js:11:29:11:44 | ['public', path] |
|
|
| tainted-array-steps.js:13:15:13:30 | ['public', path] | tainted-array-steps.js:14:21:14:21 | x |
|
|
| tainted-array-steps.js:13:26:13:29 | path | tainted-array-steps.js:13:15:13:30 | ['public', path] |
|
|
| tainted-array-steps.js:14:3:14:41 | parts | tainted-array-steps.js:15:29:15:33 | parts |
|
|
| tainted-array-steps.js:14:11:14:41 | parts.m ... Case()) | tainted-array-steps.js:14:3:14:41 | parts |
|
|
| tainted-array-steps.js:14:21:14:21 | x | tainted-array-steps.js:14:26:14:26 | x |
|
|
| tainted-array-steps.js:14:26:14:26 | x | tainted-array-steps.js:14:26:14:40 | x.toLowerCase() |
|
|
| tainted-array-steps.js:14:26:14:40 | x.toLowerCase() | tainted-array-steps.js:14:11:14:41 | parts.m ... Case()) |
|
|
| tainted-array-steps.js:15:29:15:33 | parts | tainted-array-steps.js:15:29:15:43 | parts.join('/') |
|
|
#select
|
|
| TaintedPath-es6.js:10:26:10:45 | join("public", path) | TaintedPath-es6.js:7:20:7:26 | req.url | TaintedPath-es6.js:10:26:10:45 | join("public", path) | This path depends on $@. | TaintedPath-es6.js:7:20:7:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:12:29:12:32 | path | TaintedPath.js:9:24:9:30 | req.url | TaintedPath.js:12:29:12:32 | path | This path depends on $@. | TaintedPath.js:9:24:9:30 | req.url | a user-provided value |
|
|
| TaintedPath.js:15:29:15:48 | "/home/user/" + path | TaintedPath.js:9:24:9:30 | req.url | TaintedPath.js:15:29:15:48 | "/home/user/" + path | This path depends on $@. | TaintedPath.js:9:24:9:30 | req.url | a user-provided value |
|
|
| TaintedPath.js:19:33:19:36 | path | TaintedPath.js:9:24:9:30 | req.url | TaintedPath.js:19:33:19:36 | path | This path depends on $@. | TaintedPath.js:9:24:9:30 | req.url | a user-provided value |
|
|
| TaintedPath.js:23:33:23:36 | path | TaintedPath.js:9:24:9:30 | req.url | TaintedPath.js:23:33:23:36 | path | This path depends on $@. | TaintedPath.js:9:24:9:30 | req.url | a user-provided value |
|
|
| TaintedPath.js:27:33:27:36 | path | TaintedPath.js:9:24:9:30 | req.url | TaintedPath.js:27:33:27:36 | path | This path depends on $@. | TaintedPath.js:9:24:9:30 | req.url | a user-provided value |
|
|
| TaintedPath.js:39:31:39:34 | path | TaintedPath.js:9:24:9:30 | req.url | TaintedPath.js:39:31:39:34 | path | This path depends on $@. | TaintedPath.js:9:24:9:30 | req.url | a user-provided value |
|
|
| TaintedPath.js:47:29:47:53 | pathMod ... e(path) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:47:29:47:53 | pathMod ... e(path) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:49:29:49:52 | pathMod ... e(path) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:49:29:49:52 | pathMod ... e(path) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:51:29:51:52 | pathMod ... e(path) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:51:29:51:52 | pathMod ... e(path) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:53:29:53:49 | pathMod ... n(path) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:53:29:53:49 | pathMod ... n(path) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:55:29:55:58 | pathMod ... ath, z) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:55:29:55:58 | pathMod ... ath, z) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:57:29:57:54 | pathMod ... e(path) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:57:29:57:54 | pathMod ... e(path) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:59:29:59:56 | pathMod ... , path) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:59:29:59:56 | pathMod ... , path) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:61:29:61:56 | pathMod ... ath, x) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:61:29:61:56 | pathMod ... ath, x) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:63:29:63:52 | pathMod ... e(path) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:63:29:63:52 | pathMod ... e(path) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:65:29:65:61 | pathMod ... ath, z) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:65:29:65:61 | pathMod ... ath, z) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:67:29:67:61 | pathMod ... h(path) | TaintedPath.js:45:20:45:26 | req.url | TaintedPath.js:67:29:67:61 | pathMod ... h(path) | This path depends on $@. | TaintedPath.js:45:20:45:26 | req.url | a user-provided value |
|
|
| TaintedPath.js:78:26:78:40 | document.cookie | TaintedPath.js:78:26:78:40 | document.cookie | TaintedPath.js:78:26:78:40 | document.cookie | This path depends on $@. | TaintedPath.js:78:26:78:40 | document.cookie | a user-provided value |
|
|
| TaintedPath.js:84:31:84:76 | require ... ).query | TaintedPath.js:84:63:84:69 | req.url | TaintedPath.js:84:31:84:76 | require ... ).query | This path depends on $@. | TaintedPath.js:84:63:84:69 | req.url | a user-provided value |
|
|
| TaintedPath.js:85:31:85:74 | require ... ).query | TaintedPath.js:85:61:85:67 | req.url | TaintedPath.js:85:31:85:74 | require ... ).query | This path depends on $@. | TaintedPath.js:85:61:85:67 | req.url | a user-provided value |
|
|
| TaintedPath.js:86:31:86:73 | require ... ).query | TaintedPath.js:86:60:86:66 | req.url | TaintedPath.js:86:31:86:73 | require ... ).query | This path depends on $@. | TaintedPath.js:86:60:86:66 | req.url | a user-provided value |
|
|
| TaintedPath.js:94:48:94:60 | req.params[0] | TaintedPath.js:94:48:94:60 | req.params[0] | TaintedPath.js:94:48:94:60 | req.params[0] | This path depends on $@. | TaintedPath.js:94:48:94:60 | req.params[0] | a user-provided value |
|
|
| tainted-array-steps.js:11:29:11:54 | ['publi ... in('/') | tainted-array-steps.js:9:24:9:30 | req.url | tainted-array-steps.js:11:29:11:54 | ['publi ... in('/') | This path depends on $@. | tainted-array-steps.js:9:24:9:30 | req.url | a user-provided value |
|
|
| tainted-array-steps.js:15:29:15:43 | parts.join('/') | tainted-array-steps.js:9:24:9:30 | req.url | tainted-array-steps.js:15:29:15:43 | parts.join('/') | This path depends on $@. | tainted-array-steps.js:9:24:9:30 | req.url | a user-provided value |
|
|
| tainted-require.js:7:19:7:37 | req.param("module") | tainted-require.js:7:19:7:37 | req.param("module") | tainted-require.js:7:19:7:37 | req.param("module") | This path depends on $@. | tainted-require.js:7:19:7:37 | req.param("module") | a user-provided value |
|
|
| tainted-sendFile.js:7:16:7:33 | req.param("gimme") | tainted-sendFile.js:7:16:7:33 | req.param("gimme") | tainted-sendFile.js:7:16:7:33 | req.param("gimme") | This path depends on $@. | tainted-sendFile.js:7:16:7:33 | req.param("gimme") | a user-provided value |
|
|
| tainted-sendFile.js:9:16:9:33 | req.param("gimme") | tainted-sendFile.js:9:16:9:33 | req.param("gimme") | tainted-sendFile.js:9:16:9:33 | req.param("gimme") | This path depends on $@. | tainted-sendFile.js:9:16:9:33 | req.param("gimme") | a user-provided value |
|
|
| views.js:1:43:1:55 | req.params[0] | views.js:1:43:1:55 | req.params[0] | views.js:1:43:1:55 | req.params[0] | This path depends on $@. | views.js:1:43:1:55 | req.params[0] | a user-provided value |
|