JS: Add: Test case for Array.protype.with taint step

Napalys · Napalys · commit f04fd5cdcc5c · 2024-11-15T10:27:44.000+01:00
diff --git a/javascript/ql/test/library-tests/TaintTracking/tst.js b/javascript/ql/test/library-tests/TaintTracking/tst.js
@@ -68,4 +68,8 @@ function test() {
     sink(x.toReversed()) // NOT OK
     const xReversed = x.toReversed();
     sink(xReversed) // NOT OK
+
+    sink(x.with()) // NOT OK -- Should be flagged as a taint sink, but it is not
+    const xWith = x.with();
+    sink(xWith) // NOT OK -- Should be flagged as a taint sink, but it is not
 }

Original file line number	Diff line number	Diff line change
`@@ -68,4 +68,8 @@ function test() {`
`68`	`68`	`sink(x.toReversed()) // NOT OK`
`69`	`69`	`const xReversed = x.toReversed();`
`70`	`70`	`sink(xReversed) // NOT OK`
	`71`	`+`
	`72`	`+ sink(x.with()) // NOT OK -- Should be flagged as a taint sink, but it is not`
	`73`	`+ const xWith = x.with();`
	`74`	`+ sink(xWith) // NOT OK -- Should be flagged as a taint sink, but it is not`
`71`	`75`	`}`