mirror of
https://github.com/github/codeql.git
synced 2025-12-30 07:36:34 +01:00
474 lines
14 KiB
Plaintext
474 lines
14 KiB
Plaintext
#10000=@"/tst.html;sourcefile"
|
|
files(#10000,"/tst.html","tst","html",0)
|
|
#10001=@"/;folder"
|
|
folders(#10001,"/","")
|
|
containerparent(#10001,#10000)
|
|
#10002=@"loc,{#10000},0,0,0,0"
|
|
locations_default(#10002,#10000,0,0,0,0)
|
|
hasLocation(#10000,#10002)
|
|
#20000=@"global_scope"
|
|
scopes(#20000,0)
|
|
#20001=@"script;{#10000},5,17"
|
|
#20002=*
|
|
lines(#20002,#20001,"","
|
|
")
|
|
#20003=@"loc,{#10000},5,17,5,16"
|
|
locations_default(#20003,#10000,5,17,5,16)
|
|
hasLocation(#20002,#20003)
|
|
#20004=*
|
|
lines(#20004,#20001," alert(""Hello, world!"");","
|
|
")
|
|
#20005=@"loc,{#10000},6,1,6,35"
|
|
locations_default(#20005,#10000,6,1,6,35)
|
|
hasLocation(#20004,#20005)
|
|
indentation(#10000,6," ",12)
|
|
#20006=*
|
|
lines(#20006,#20001," ","")
|
|
#20007=@"loc,{#10000},7,1,7,8"
|
|
locations_default(#20007,#10000,7,1,7,8)
|
|
hasLocation(#20006,#20007)
|
|
numlines(#20001,3,1,0)
|
|
#20008=*
|
|
tokeninfo(#20008,6,#20001,0,"alert")
|
|
#20009=@"loc,{#10000},6,13,6,17"
|
|
locations_default(#20009,#10000,6,13,6,17)
|
|
hasLocation(#20008,#20009)
|
|
#20010=*
|
|
tokeninfo(#20010,8,#20001,1,"(")
|
|
#20011=@"loc,{#10000},6,18,6,18"
|
|
locations_default(#20011,#10000,6,18,6,18)
|
|
hasLocation(#20010,#20011)
|
|
#20012=*
|
|
tokeninfo(#20012,4,#20001,2,"""Hello, world!""")
|
|
#20013=@"loc,{#10000},6,19,6,33"
|
|
locations_default(#20013,#10000,6,19,6,33)
|
|
hasLocation(#20012,#20013)
|
|
#20014=*
|
|
tokeninfo(#20014,8,#20001,3,")")
|
|
#20015=@"loc,{#10000},6,34,6,34"
|
|
locations_default(#20015,#10000,6,34,6,34)
|
|
hasLocation(#20014,#20015)
|
|
#20016=*
|
|
tokeninfo(#20016,8,#20001,4,";")
|
|
#20017=@"loc,{#10000},6,35,6,35"
|
|
locations_default(#20017,#10000,6,35,6,35)
|
|
hasLocation(#20016,#20017)
|
|
#20018=*
|
|
tokeninfo(#20018,0,#20001,5,"")
|
|
#20019=@"loc,{#10000},7,9,7,8"
|
|
locations_default(#20019,#10000,7,9,7,8)
|
|
hasLocation(#20018,#20019)
|
|
toplevels(#20001,1)
|
|
#20020=@"loc,{#10000},5,17,7,8"
|
|
locations_default(#20020,#10000,5,17,7,8)
|
|
hasLocation(#20001,#20020)
|
|
#20021=*
|
|
stmts(#20021,2,#20001,0,"alert("" ... rld!"");")
|
|
#20022=@"loc,{#10000},6,13,6,35"
|
|
locations_default(#20022,#10000,6,13,6,35)
|
|
hasLocation(#20021,#20022)
|
|
stmt_containers(#20021,#20001)
|
|
#20023=*
|
|
exprs(#20023,13,#20021,0,"alert("" ... orld!"")")
|
|
#20024=@"loc,{#10000},6,13,6,34"
|
|
locations_default(#20024,#10000,6,13,6,34)
|
|
hasLocation(#20023,#20024)
|
|
enclosing_stmt(#20023,#20021)
|
|
expr_containers(#20023,#20001)
|
|
#20025=*
|
|
exprs(#20025,79,#20023,-1,"alert")
|
|
hasLocation(#20025,#20009)
|
|
enclosing_stmt(#20025,#20021)
|
|
expr_containers(#20025,#20001)
|
|
literals("alert","alert",#20025)
|
|
#20026=@"var;{alert};{#20000}"
|
|
variables(#20026,"alert",#20000)
|
|
bind(#20025,#20026)
|
|
#20027=*
|
|
exprs(#20027,4,#20023,0,"""Hello, world!""")
|
|
hasLocation(#20027,#20013)
|
|
enclosing_stmt(#20027,#20021)
|
|
expr_containers(#20027,#20001)
|
|
literals("Hello, world!","""Hello, world!""",#20027)
|
|
#20028=*
|
|
regexpterm(#20028,14,#20027,0,"Hello, world!")
|
|
#20029=@"loc,{#10000},6,20,6,32"
|
|
locations_default(#20029,#10000,6,20,6,32)
|
|
hasLocation(#20028,#20029)
|
|
regexp_const_value(#20028,"Hello, world!")
|
|
#20030=*
|
|
entry_cfg_node(#20030,#20001)
|
|
hasLocation(#20030,#20003)
|
|
#20031=*
|
|
exit_cfg_node(#20031,#20001)
|
|
hasLocation(#20031,#20019)
|
|
successor(#20021,#20025)
|
|
successor(#20027,#20023)
|
|
successor(#20025,#20027)
|
|
successor(#20023,#20031)
|
|
successor(#20030,#20021)
|
|
#20032=@"script;{#10000},8,17"
|
|
#20033=*
|
|
lines(#20033,#20032,";","")
|
|
#20034=@"loc,{#10000},8,17,8,17"
|
|
locations_default(#20034,#10000,8,17,8,17)
|
|
hasLocation(#20033,#20034)
|
|
numlines(#20032,1,1,0)
|
|
#20035=*
|
|
tokeninfo(#20035,8,#20032,0,";")
|
|
hasLocation(#20035,#20034)
|
|
#20036=*
|
|
tokeninfo(#20036,0,#20032,1,"")
|
|
#20037=@"loc,{#10000},8,18,8,17"
|
|
locations_default(#20037,#10000,8,18,8,17)
|
|
hasLocation(#20036,#20037)
|
|
toplevels(#20032,1)
|
|
hasLocation(#20032,#20034)
|
|
#20038=*
|
|
stmts(#20038,0,#20032,0,";")
|
|
hasLocation(#20038,#20034)
|
|
stmt_containers(#20038,#20032)
|
|
#20039=*
|
|
entry_cfg_node(#20039,#20032)
|
|
#20040=@"loc,{#10000},8,17,8,16"
|
|
locations_default(#20040,#10000,8,17,8,16)
|
|
hasLocation(#20039,#20040)
|
|
#20041=*
|
|
exit_cfg_node(#20041,#20032)
|
|
hasLocation(#20041,#20037)
|
|
successor(#20038,#20041)
|
|
successor(#20039,#20038)
|
|
#20042=@"script;{#10000},11,29"
|
|
#20043=*
|
|
lines(#20043,#20042,"void(alert('Nope!'))","")
|
|
#20044=@"loc,{#10000},11,29,11,48"
|
|
locations_default(#20044,#10000,11,29,11,48)
|
|
hasLocation(#20043,#20044)
|
|
numlines(#20042,1,1,0)
|
|
#20045=*
|
|
tokeninfo(#20045,7,#20042,0,"void")
|
|
#20046=@"loc,{#10000},11,29,11,32"
|
|
locations_default(#20046,#10000,11,29,11,32)
|
|
hasLocation(#20045,#20046)
|
|
#20047=*
|
|
tokeninfo(#20047,8,#20042,1,"(")
|
|
#20048=@"loc,{#10000},11,33,11,33"
|
|
locations_default(#20048,#10000,11,33,11,33)
|
|
hasLocation(#20047,#20048)
|
|
#20049=*
|
|
tokeninfo(#20049,6,#20042,2,"alert")
|
|
#20050=@"loc,{#10000},11,34,11,38"
|
|
locations_default(#20050,#10000,11,34,11,38)
|
|
hasLocation(#20049,#20050)
|
|
#20051=*
|
|
tokeninfo(#20051,8,#20042,3,"(")
|
|
#20052=@"loc,{#10000},11,39,11,39"
|
|
locations_default(#20052,#10000,11,39,11,39)
|
|
hasLocation(#20051,#20052)
|
|
#20053=*
|
|
tokeninfo(#20053,4,#20042,4,"'Nope!'")
|
|
#20054=@"loc,{#10000},11,40,11,46"
|
|
locations_default(#20054,#10000,11,40,11,46)
|
|
hasLocation(#20053,#20054)
|
|
#20055=*
|
|
tokeninfo(#20055,8,#20042,5,")")
|
|
#20056=@"loc,{#10000},11,47,11,47"
|
|
locations_default(#20056,#10000,11,47,11,47)
|
|
hasLocation(#20055,#20056)
|
|
#20057=*
|
|
tokeninfo(#20057,8,#20042,6,")")
|
|
#20058=@"loc,{#10000},11,48,11,48"
|
|
locations_default(#20058,#10000,11,48,11,48)
|
|
hasLocation(#20057,#20058)
|
|
#20059=*
|
|
tokeninfo(#20059,0,#20042,7,"")
|
|
#20060=@"loc,{#10000},11,49,11,48"
|
|
locations_default(#20060,#10000,11,49,11,48)
|
|
hasLocation(#20059,#20060)
|
|
toplevels(#20042,3)
|
|
hasLocation(#20042,#20044)
|
|
#20061=*
|
|
stmts(#20061,2,#20042,0,"void(alert('Nope!'))")
|
|
hasLocation(#20061,#20044)
|
|
stmt_containers(#20061,#20042)
|
|
#20062=*
|
|
exprs(#20062,21,#20061,0,"void(alert('Nope!'))")
|
|
hasLocation(#20062,#20044)
|
|
enclosing_stmt(#20062,#20061)
|
|
expr_containers(#20062,#20042)
|
|
#20063=*
|
|
exprs(#20063,63,#20062,0,"(alert('Nope!'))")
|
|
#20064=@"loc,{#10000},11,33,11,48"
|
|
locations_default(#20064,#10000,11,33,11,48)
|
|
hasLocation(#20063,#20064)
|
|
enclosing_stmt(#20063,#20061)
|
|
expr_containers(#20063,#20042)
|
|
#20065=*
|
|
exprs(#20065,13,#20063,0,"alert('Nope!')")
|
|
#20066=@"loc,{#10000},11,34,11,47"
|
|
locations_default(#20066,#10000,11,34,11,47)
|
|
hasLocation(#20065,#20066)
|
|
enclosing_stmt(#20065,#20061)
|
|
expr_containers(#20065,#20042)
|
|
#20067=*
|
|
exprs(#20067,79,#20065,-1,"alert")
|
|
hasLocation(#20067,#20050)
|
|
enclosing_stmt(#20067,#20061)
|
|
expr_containers(#20067,#20042)
|
|
literals("alert","alert",#20067)
|
|
bind(#20067,#20026)
|
|
#20068=*
|
|
exprs(#20068,4,#20065,0,"'Nope!'")
|
|
hasLocation(#20068,#20054)
|
|
enclosing_stmt(#20068,#20061)
|
|
expr_containers(#20068,#20042)
|
|
literals("Nope!","'Nope!'",#20068)
|
|
#20069=*
|
|
regexpterm(#20069,14,#20068,0,"Nope!")
|
|
#20070=@"loc,{#10000},11,41,11,45"
|
|
locations_default(#20070,#10000,11,41,11,45)
|
|
hasLocation(#20069,#20070)
|
|
regexp_const_value(#20069,"Nope!")
|
|
#20071=*
|
|
entry_cfg_node(#20071,#20042)
|
|
#20072=@"loc,{#10000},11,29,11,28"
|
|
locations_default(#20072,#10000,11,29,11,28)
|
|
hasLocation(#20071,#20072)
|
|
#20073=*
|
|
exit_cfg_node(#20073,#20042)
|
|
hasLocation(#20073,#20060)
|
|
successor(#20061,#20063)
|
|
successor(#20063,#20067)
|
|
successor(#20068,#20065)
|
|
successor(#20067,#20068)
|
|
successor(#20065,#20062)
|
|
successor(#20062,#20073)
|
|
successor(#20071,#20061)
|
|
#20074=@"script;{#10000},12,23"
|
|
#20075=*
|
|
lines(#20075,#20074,"alert('I said don\'t click!')","")
|
|
#20076=@"loc,{#10000},12,23,12,51"
|
|
locations_default(#20076,#10000,12,23,12,51)
|
|
hasLocation(#20075,#20076)
|
|
numlines(#20074,1,1,0)
|
|
#20077=*
|
|
tokeninfo(#20077,6,#20074,0,"alert")
|
|
#20078=@"loc,{#10000},12,23,12,27"
|
|
locations_default(#20078,#10000,12,23,12,27)
|
|
hasLocation(#20077,#20078)
|
|
#20079=*
|
|
tokeninfo(#20079,8,#20074,1,"(")
|
|
#20080=@"loc,{#10000},12,28,12,28"
|
|
locations_default(#20080,#10000,12,28,12,28)
|
|
hasLocation(#20079,#20080)
|
|
#20081=*
|
|
tokeninfo(#20081,4,#20074,2,"'I said don\'t click!'")
|
|
#20082=@"loc,{#10000},12,29,12,50"
|
|
locations_default(#20082,#10000,12,29,12,50)
|
|
hasLocation(#20081,#20082)
|
|
#20083=*
|
|
tokeninfo(#20083,8,#20074,3,")")
|
|
#20084=@"loc,{#10000},12,51,12,51"
|
|
locations_default(#20084,#10000,12,51,12,51)
|
|
hasLocation(#20083,#20084)
|
|
#20085=*
|
|
tokeninfo(#20085,0,#20074,4,"")
|
|
#20086=@"loc,{#10000},12,52,12,51"
|
|
locations_default(#20086,#10000,12,52,12,51)
|
|
hasLocation(#20085,#20086)
|
|
toplevels(#20074,2)
|
|
hasLocation(#20074,#20076)
|
|
#20087=*
|
|
stmts(#20087,2,#20074,0,"alert(' ... lick!')")
|
|
hasLocation(#20087,#20076)
|
|
stmt_containers(#20087,#20074)
|
|
#20088=*
|
|
exprs(#20088,13,#20087,0,"alert(' ... lick!')")
|
|
hasLocation(#20088,#20076)
|
|
enclosing_stmt(#20088,#20087)
|
|
expr_containers(#20088,#20074)
|
|
#20089=*
|
|
exprs(#20089,79,#20088,-1,"alert")
|
|
hasLocation(#20089,#20078)
|
|
enclosing_stmt(#20089,#20087)
|
|
expr_containers(#20089,#20074)
|
|
literals("alert","alert",#20089)
|
|
bind(#20089,#20026)
|
|
#20090=*
|
|
exprs(#20090,4,#20088,0,"'I said ... click!'")
|
|
hasLocation(#20090,#20082)
|
|
enclosing_stmt(#20090,#20087)
|
|
expr_containers(#20090,#20074)
|
|
literals("I said don't click!","'I said don\'t click!'",#20090)
|
|
#20091=*
|
|
regexpterm(#20091,14,#20090,0,"I said don't click!")
|
|
#20092=@"loc,{#10000},12,30,12,49"
|
|
locations_default(#20092,#10000,12,30,12,49)
|
|
hasLocation(#20091,#20092)
|
|
regexp_const_value(#20091,"I said don't click!")
|
|
#20093=*
|
|
entry_cfg_node(#20093,#20074)
|
|
#20094=@"loc,{#10000},12,23,12,22"
|
|
locations_default(#20094,#10000,12,23,12,22)
|
|
hasLocation(#20093,#20094)
|
|
#20095=*
|
|
exit_cfg_node(#20095,#20074)
|
|
hasLocation(#20095,#20086)
|
|
successor(#20087,#20089)
|
|
successor(#20090,#20088)
|
|
successor(#20089,#20090)
|
|
successor(#20088,#20095)
|
|
successor(#20093,#20087)
|
|
#20096=@"script;{#10000},13,21"
|
|
#20097=*
|
|
lines(#20097,#20096,"return false;","")
|
|
#20098=@"loc,{#10000},13,21,13,33"
|
|
locations_default(#20098,#10000,13,21,13,33)
|
|
hasLocation(#20097,#20098)
|
|
numlines(#20096,1,1,0)
|
|
#20099=*
|
|
tokeninfo(#20099,7,#20096,0,"return")
|
|
#20100=@"loc,{#10000},13,21,13,26"
|
|
locations_default(#20100,#10000,13,21,13,26)
|
|
hasLocation(#20099,#20100)
|
|
#20101=*
|
|
tokeninfo(#20101,2,#20096,1,"false")
|
|
#20102=@"loc,{#10000},13,28,13,32"
|
|
locations_default(#20102,#10000,13,28,13,32)
|
|
hasLocation(#20101,#20102)
|
|
#20103=*
|
|
tokeninfo(#20103,8,#20096,2,";")
|
|
#20104=@"loc,{#10000},13,33,13,33"
|
|
locations_default(#20104,#10000,13,33,13,33)
|
|
hasLocation(#20103,#20104)
|
|
#20105=*
|
|
tokeninfo(#20105,0,#20096,3,"")
|
|
#20106=@"loc,{#10000},13,34,13,33"
|
|
locations_default(#20106,#10000,13,34,13,33)
|
|
hasLocation(#20105,#20106)
|
|
toplevels(#20096,2)
|
|
hasLocation(#20096,#20098)
|
|
#20107=*
|
|
stmts(#20107,9,#20096,0,"return false;")
|
|
hasLocation(#20107,#20098)
|
|
stmt_containers(#20107,#20096)
|
|
#20108=*
|
|
exprs(#20108,2,#20107,0,"false")
|
|
hasLocation(#20108,#20102)
|
|
enclosing_stmt(#20108,#20107)
|
|
expr_containers(#20108,#20096)
|
|
literals("false","false",#20108)
|
|
#20109=*
|
|
entry_cfg_node(#20109,#20096)
|
|
#20110=@"loc,{#10000},13,21,13,20"
|
|
locations_default(#20110,#10000,13,21,13,20)
|
|
hasLocation(#20109,#20110)
|
|
#20111=*
|
|
exit_cfg_node(#20111,#20096)
|
|
hasLocation(#20111,#20106)
|
|
successor(#20108,#20107)
|
|
successor(#20107,#20111)
|
|
successor(#20109,#20108)
|
|
#20112=*
|
|
xmlElements(#20112,"html",#10000,0,#10000)
|
|
#20113=@"loc,{#10000},1,1,18,7"
|
|
locations_default(#20113,#10000,1,1,18,7)
|
|
xmllocations(#20112,#20113)
|
|
#20114=*
|
|
xmlElements(#20114,"script",#20112,4,#10000)
|
|
#20115=@"loc,{#10000},17,5,17,29"
|
|
locations_default(#20115,#10000,17,5,17,29)
|
|
xmllocations(#20114,#20115)
|
|
#20116=*
|
|
xmlAttrs(#20116,#20114,"type","",0,#10000)
|
|
#20117=@"loc,{#10000},17,13,17,19"
|
|
locations_default(#20117,#10000,17,13,17,19)
|
|
xmllocations(#20116,#20117)
|
|
#20118=*
|
|
xmlElements(#20118,"script",#20112,3,#10000)
|
|
#20119=@"loc,{#10000},16,5,16,71"
|
|
locations_default(#20119,#10000,16,5,16,71)
|
|
xmllocations(#20118,#20119)
|
|
#20120=*
|
|
xmlAttrs(#20120,#20118,"TYPE","text/x-handlebars-template",0,#10000)
|
|
#20121=@"loc,{#10000},16,13,16,45"
|
|
locations_default(#20121,#10000,16,13,16,45)
|
|
xmllocations(#20120,#20121)
|
|
#20122=*
|
|
xmlElements(#20122,"script",#20112,2,#10000)
|
|
#20123=@"loc,{#10000},15,5,15,71"
|
|
locations_default(#20123,#10000,15,5,15,71)
|
|
xmllocations(#20122,#20123)
|
|
#20124=*
|
|
xmlAttrs(#20124,#20122,"type","text/x-handlebars-template",0,#10000)
|
|
#20125=@"loc,{#10000},15,13,15,45"
|
|
locations_default(#20125,#10000,15,13,15,45)
|
|
xmllocations(#20124,#20125)
|
|
#20126=*
|
|
xmlElements(#20126,"body",#20112,1,#10000)
|
|
#20127=@"loc,{#10000},10,5,14,11"
|
|
locations_default(#20127,#10000,10,5,14,11)
|
|
xmllocations(#20126,#20127)
|
|
#20128=*
|
|
xmlElements(#20128,"a",#20126,2,#10000)
|
|
#20129=@"loc,{#10000},13,9,13,59"
|
|
locations_default(#20129,#10000,13,9,13,59)
|
|
xmllocations(#20128,#20129)
|
|
#20130=*
|
|
xmlAttrs(#20130,#20128,"onclick","return false;",0,#10000)
|
|
#20131=@"loc,{#10000},13,12,13,34"
|
|
locations_default(#20131,#10000,13,12,13,34)
|
|
xmllocations(#20130,#20131)
|
|
#20132=*
|
|
xmlElements(#20132,"div",#20126,1,#10000)
|
|
#20133=@"loc,{#10000},12,9,12,75"
|
|
locations_default(#20133,#10000,12,9,12,75)
|
|
xmllocations(#20132,#20133)
|
|
#20134=*
|
|
xmlAttrs(#20134,#20132,"onclick","alert('I said don\'t click!')",0,#10000)
|
|
#20135=@"loc,{#10000},12,14,12,52"
|
|
locations_default(#20135,#10000,12,14,12,52)
|
|
xmllocations(#20134,#20135)
|
|
#20136=*
|
|
xmlElements(#20136,"a",#20126,0,#10000)
|
|
#20137=@"loc,{#10000},11,9,11,64"
|
|
locations_default(#20137,#10000,11,9,11,64)
|
|
xmllocations(#20136,#20137)
|
|
#20138=*
|
|
xmlAttrs(#20138,#20136,"href","javascript:void(alert('Nope!'))",0,#10000)
|
|
#20139=@"loc,{#10000},11,12,11,49"
|
|
locations_default(#20139,#10000,11,12,11,49)
|
|
xmllocations(#20138,#20139)
|
|
#20140=*
|
|
xmlElements(#20140,"head",#20112,0,#10000)
|
|
#20141=@"loc,{#10000},2,5,9,11"
|
|
locations_default(#20141,#10000,2,5,9,11)
|
|
xmllocations(#20140,#20141)
|
|
#20142=*
|
|
xmlElements(#20142,"script",#20140,3,#10000)
|
|
#20143=@"loc,{#10000},8,9,8,26"
|
|
locations_default(#20143,#10000,8,9,8,26)
|
|
xmllocations(#20142,#20143)
|
|
#20144=*
|
|
xmlElements(#20144,"script",#20140,2,#10000)
|
|
#20145=@"loc,{#10000},5,9,7,17"
|
|
locations_default(#20145,#10000,5,9,7,17)
|
|
xmllocations(#20144,#20145)
|
|
#20146=*
|
|
xmlElements(#20146,"script",#20140,1,#10000)
|
|
#20147=@"loc,{#10000},4,9,4,43"
|
|
locations_default(#20147,#10000,4,9,4,43)
|
|
xmllocations(#20146,#20147)
|
|
#20148=*
|
|
xmlAttrs(#20148,#20146,"src","external.js",0,#10000)
|
|
#20149=@"loc,{#10000},4,17,4,33"
|
|
locations_default(#20149,#10000,4,17,4,33)
|
|
xmllocations(#20148,#20149)
|
|
#20150=*
|
|
xmlElements(#20150,"title",#20140,0,#10000)
|
|
#20151=@"loc,{#10000},3,9,3,32"
|
|
locations_default(#20151,#10000,3,9,3,32)
|
|
xmllocations(#20150,#20151)
|
|
numlines(#10000,18,5,0)
|
|
filetype(#10000,"html")
|