Skip to content

Commit f0a467e

Browse files
am0o0am0o0
committed
update tests
1 parent 84b9d4d commit f0a467e

File tree

2 files changed

+21
-26
lines changed

2 files changed

+21
-26
lines changed

‎javascript/ql/test/experimental/Security/CWE-099/EnvValueAndKeyInjection/EnvValueAndKeyInjection.expected

Lines changed: 21 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -14,19 +14,17 @@ nodes
1414
| test.js:7:15:7:20 | EnvKey |
1515
| test.js:7:25:7:32 | EnvValue |
1616
| test.js:7:25:7:32 | EnvValue |
17-
| test.js:8:24:8:31 | EnvValue |
18-
| test.js:8:24:8:31 | EnvValue |
19-
| test.js:14:9:14:28 | { EnvValue, EnvKey } |
20-
| test.js:14:9:14:39 | EnvKey |
21-
| test.js:14:9:14:39 | EnvValue |
22-
| test.js:14:11:14:18 | EnvValue |
23-
| test.js:14:21:14:26 | EnvKey |
24-
| test.js:14:32:14:39 | req.body |
25-
| test.js:14:32:14:39 | req.body |
26-
| test.js:16:15:16:20 | EnvKey |
27-
| test.js:16:15:16:20 | EnvKey |
28-
| test.js:17:26:17:33 | EnvValue |
29-
| test.js:17:26:17:33 | EnvValue |
17+
| test.js:13:9:13:28 | { EnvValue, EnvKey } |
18+
| test.js:13:9:13:39 | EnvKey |
19+
| test.js:13:9:13:39 | EnvValue |
20+
| test.js:13:11:13:18 | EnvValue |
21+
| test.js:13:21:13:26 | EnvKey |
22+
| test.js:13:32:13:39 | req.body |
23+
| test.js:13:32:13:39 | req.body |
24+
| test.js:15:15:15:20 | EnvKey |
25+
| test.js:15:15:15:20 | EnvKey |
26+
| test.js:16:26:16:33 | EnvValue |
27+
| test.js:16:26:16:33 | EnvValue |
3028
edges
3129
| test.js:5:9:5:28 | { EnvValue, EnvKey } | test.js:5:11:5:18 | EnvValue |
3230
| test.js:5:9:5:28 | { EnvValue, EnvKey } | test.js:5:21:5:26 | EnvKey |
@@ -38,22 +36,20 @@ edges
3836
| test.js:5:9:5:39 | EnvValue | test.js:6:25:6:32 | EnvValue |
3937
| test.js:5:9:5:39 | EnvValue | test.js:7:25:7:32 | EnvValue |
4038
| test.js:5:9:5:39 | EnvValue | test.js:7:25:7:32 | EnvValue |
41-
| test.js:5:9:5:39 | EnvValue | test.js:8:24:8:31 | EnvValue |
42-
| test.js:5:9:5:39 | EnvValue | test.js:8:24:8:31 | EnvValue |
4339
| test.js:5:11:5:18 | EnvValue | test.js:5:9:5:39 | EnvValue |
4440
| test.js:5:21:5:26 | EnvKey | test.js:5:9:5:39 | EnvKey |
4541
| test.js:5:32:5:39 | req.body | test.js:5:9:5:28 | { EnvValue, EnvKey } |
4642
| test.js:5:32:5:39 | req.body | test.js:5:9:5:28 | { EnvValue, EnvKey } |
47-
| test.js:14:9:14:28 | { EnvValue, EnvKey } | test.js:14:11:14:18 | EnvValue |
48-
| test.js:14:9:14:28 | { EnvValue, EnvKey } | test.js:14:21:14:26 | EnvKey |
49-
| test.js:14:9:14:39 | EnvKey | test.js:16:15:16:20 | EnvKey |
50-
| test.js:14:9:14:39 | EnvKey | test.js:16:15:16:20 | EnvKey |
51-
| test.js:14:9:14:39 | EnvValue | test.js:17:26:17:33 | EnvValue |
52-
| test.js:14:9:14:39 | EnvValue | test.js:17:26:17:33 | EnvValue |
53-
| test.js:14:11:14:18 | EnvValue | test.js:14:9:14:39 | EnvValue |
54-
| test.js:14:21:14:26 | EnvKey | test.js:14:9:14:39 | EnvKey |
55-
| test.js:14:32:14:39 | req.body | test.js:14:9:14:28 | { EnvValue, EnvKey } |
56-
| test.js:14:32:14:39 | req.body | test.js:14:9:14:28 | { EnvValue, EnvKey } |
43+
| test.js:13:9:13:28 | { EnvValue, EnvKey } | test.js:13:11:13:18 | EnvValue |
44+
| test.js:13:9:13:28 | { EnvValue, EnvKey } | test.js:13:21:13:26 | EnvKey |
45+
| test.js:13:9:13:39 | EnvKey | test.js:15:15:15:20 | EnvKey |
46+
| test.js:13:9:13:39 | EnvKey | test.js:15:15:15:20 | EnvKey |
47+
| test.js:13:9:13:39 | EnvValue | test.js:16:26:16:33 | EnvValue |
48+
| test.js:13:9:13:39 | EnvValue | test.js:16:26:16:33 | EnvValue |
49+
| test.js:13:11:13:18 | EnvValue | test.js:13:9:13:39 | EnvValue |
50+
| test.js:13:21:13:26 | EnvKey | test.js:13:9:13:39 | EnvKey |
51+
| test.js:13:32:13:39 | req.body | test.js:13:9:13:28 | { EnvValue, EnvKey } |
52+
| test.js:13:32:13:39 | req.body | test.js:13:9:13:28 | { EnvValue, EnvKey } |
5753
#select
5854
| test.js:6:15:6:20 | EnvKey | test.js:5:32:5:39 | req.body | test.js:6:15:6:20 | EnvKey | arbitrary environment variable assignment from this $@. | test.js:5:32:5:39 | req.body | user controllable source |
5955
| test.js:7:15:7:20 | EnvKey | test.js:5:32:5:39 | req.body | test.js:7:15:7:20 | EnvKey | arbitrary environment variable assignment from this $@. | test.js:5:32:5:39 | req.body | user controllable source |

‎javascript/ql/test/experimental/Security/CWE-099/EnvValueAndKeyInjection/test.js

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,6 @@ http.createServer((req, res) => {
55
const { EnvValue, EnvKey } = req.body;
66
process.env[EnvKey] = EnvValue; // NOT OK
77
process.env[EnvKey] = EnvValue; // NOT OK
8-
process.env.EnvKey = EnvValue; // NOT OK
98

109
res.end('env has been injected!');
1110
});

0 commit comments

Comments
 (0)