mirror of
https://github.com/github/codeql.git
synced 2025-12-17 09:13:20 +01:00
10a7294327
This adds Alert annotations for alerts that seem intentional by the test but has not been annotated with 'NOT OK', or the comment was in the wrong place. In a few cases I included 'Source' expectations to make it easier to see what happened. Other 'Source' expectations will be added in bulk a later commit.
109 lines
2.5 KiB
JavaScript
109 lines
2.5 KiB
JavaScript
const express = require('express');
|
|
const app = express();
|
|
const unknown = require('~something/blah');
|
|
|
|
app.all(/\/.*/, unknown()); // OK - does not contain letters
|
|
app.all(/\/.*/i, unknown());
|
|
|
|
app.all(/\/foo\/.*/, unknown()); // $ Alert
|
|
app.all(/\/foo\/.*/i, unknown()); // OK - case insensitive
|
|
|
|
app.use(/\/x\/#\d{6}/, express.static('images/')); // OK - not a middleware
|
|
|
|
app.get(
|
|
new RegExp('^/foo(.*)?'), // $ Alert - case sensitive
|
|
unknown(),
|
|
function(req, res, next) {
|
|
if (req.params.blah) {
|
|
next();
|
|
}
|
|
}
|
|
);
|
|
|
|
app.get(
|
|
new RegExp('^/foo(.*)?', 'i'), // OK - case insensitive
|
|
unknown(),
|
|
function(req, res, next) {
|
|
if (req.params.blah) {
|
|
next();
|
|
}
|
|
}
|
|
);
|
|
|
|
app.get(
|
|
new RegExp('^/foo(.*)?'), // OK - not a middleware
|
|
unknown(),
|
|
function(req,res) {
|
|
res.send('Hello World!');
|
|
}
|
|
);
|
|
|
|
app.use(/\/foo\/([0-9]+)/, (req, res, next) => { // $ Alert - case sensitive
|
|
unknown(req);
|
|
next();
|
|
});
|
|
|
|
app.use(/\/foo\/([0-9]+)/i, (req, res, next) => { // OK - case insensitive
|
|
unknown(req);
|
|
next();
|
|
});
|
|
|
|
|
|
app.use(/\/foo\/([0-9]+)/, (req, res) => { // OK - not middleware
|
|
unknown(req, res);
|
|
});
|
|
|
|
app.use(/\/foo\/([0-9]+)/i, (req, res) => { // OK - not middleware (also case insensitive)
|
|
unknown(req, res);
|
|
});
|
|
|
|
app.get('/foo/:param', (req, res) => { // OK - not a middleware
|
|
});
|
|
|
|
app.get(
|
|
new RegExp('^/bar(.*)?'), // $ Alert - case sensitive
|
|
unknown(),
|
|
function(req, res, next) {
|
|
if (req.params.blah) {
|
|
next();
|
|
}
|
|
}
|
|
);
|
|
|
|
app.get('/bar/*', (req, res) => { // OK - not a middleware
|
|
});
|
|
|
|
app.use(/\/baz\/bla/, unknown()); // $ Alert - case sensitive
|
|
app.get('/baz/bla', (req, resp) => {
|
|
resp.send({ test: 123 });
|
|
});
|
|
|
|
app.use(/\/[Bb][Aa][Zz]2\/[aA]/, unknown()); // OK - not case sensitive
|
|
app.get('/baz2/a', (req, resp) => {
|
|
resp.send({ test: 123 });
|
|
});
|
|
|
|
app.use(/\/[Bb][Aa][Zz]3\/[a]/, unknown()); // $ Alert - case sensitive
|
|
app.get('/baz3/a', (req, resp) => {
|
|
resp.send({ test: 123 });
|
|
});
|
|
|
|
app.use(/\/summonerByName|\/currentGame/,apiLimit1, apiLimit2); // $ Alert
|
|
|
|
app.get('/currentGame', function (req, res) {
|
|
res.send("FOO");
|
|
});
|
|
|
|
app.get(
|
|
new RegExp('^/bar(.*)?', unknownFlag()), // OK - Might be OK if the unknown flag evaluates to case insensitive one
|
|
unknown(),
|
|
function(req, res, next) {
|
|
if (req.params.blah) {
|
|
next();
|
|
}
|
|
}
|
|
);
|
|
|
|
app.get('/bar/*', (req, res) => { // OK - not a middleware
|
|
});
|