File tree Expand file tree Collapse file tree 1 file changed +14
-1
lines changed
powershell/ql/test/query-tests/security/cwe-502 Expand file tree Collapse file tree 1 file changed +14
-1
lines changed Original file line number Diff line number Diff line change 1
- | test.ps1:4:31:4:37 | stream | Unsafe deserializer is used. Make sure the value being deserialized comes from a trusted source. |
1
+ edges
2
+ | test.ps1:1:20:1:47 | Call to read-host | test.ps1:3:69:3:84 | untrustedBase64 | provenance | Src:MaD:0 |
3
+ | test.ps1:3:11:3:86 | Call to new | test.ps1:4:31:4:37 | stream | provenance | |
4
+ | test.ps1:3:41:3:85 | Call to frombase64string | test.ps1:3:11:3:86 | Call to new | provenance | Config |
5
+ | test.ps1:3:69:3:84 | untrustedBase64 | test.ps1:3:41:3:85 | Call to frombase64string | provenance | Config |
6
+ nodes
7
+ | test.ps1:1:20:1:47 | Call to read-host | semmle.label | Call to read-host |
8
+ | test.ps1:3:11:3:86 | Call to new | semmle.label | Call to new |
9
+ | test.ps1:3:41:3:85 | Call to frombase64string | semmle.label | Call to frombase64string |
10
+ | test.ps1:3:69:3:84 | untrustedBase64 | semmle.label | untrustedBase64 |
11
+ | test.ps1:4:31:4:37 | stream | semmle.label | stream |
12
+ subpaths
13
+ #select
14
+ | test.ps1:4:31:4:37 | stream | test.ps1:1:20:1:47 | Call to read-host | test.ps1:4:31:4:37 | stream | This unsafe deserializer deserializes on a $@. | test.ps1:1:20:1:47 | Call to read-host | read from stdin |
You can’t perform that action at this time.
0 commit comments