@@ -116,37 +116,41 @@ nodes
116
116
| react.js:10:56:10:77 | documen ... on.hash |
117
117
| react.js:10:56:10:77 | documen ... on.hash |
118
118
| react.js:10:56:10:77 | documen ... on.hash |
119
- | template-sinks.js:17:9:17:31 | tainted |
120
- | template-sinks.js:17:19:17:31 | req.query.foo |
121
- | template-sinks.js:17:19:17:31 | req.query.foo |
122
- | template-sinks.js:19:17:19:23 | tainted |
123
- | template-sinks.js:19:17:19:23 | tainted |
124
- | template-sinks.js:20:16:20:22 | tainted |
125
- | template-sinks.js:20:16:20:22 | tainted |
126
- | template-sinks.js:21:18:21:24 | tainted |
127
- | template-sinks.js:21:18:21:24 | tainted |
128
- | template-sinks.js:22:17:22:23 | tainted |
129
- | template-sinks.js:22:17:22:23 | tainted |
130
- | template-sinks.js:23:18:23:24 | tainted |
131
- | template-sinks.js:23:18:23:24 | tainted |
132
- | template-sinks.js:24:16:24:22 | tainted |
133
- | template-sinks.js:24:16:24:22 | tainted |
134
- | template-sinks.js:25:27:25:33 | tainted |
135
- | template-sinks.js:25:27:25:33 | tainted |
136
- | template-sinks.js:26:21:26:27 | tainted |
137
- | template-sinks.js:26:21:26:27 | tainted |
138
- | template-sinks.js:27:17:27:23 | tainted |
139
- | template-sinks.js:27:17:27:23 | tainted |
140
- | template-sinks.js:28:24:28:30 | tainted |
141
- | template-sinks.js:28:24:28:30 | tainted |
142
- | template-sinks.js:29:21:29:27 | tainted |
143
- | template-sinks.js:29:21:29:27 | tainted |
144
- | template-sinks.js:30:19:30:25 | tainted |
145
- | template-sinks.js:30:19:30:25 | tainted |
146
- | template-sinks.js:31:16:31:22 | tainted |
147
- | template-sinks.js:31:16:31:22 | tainted |
148
- | template-sinks.js:32:17:32:23 | tainted |
149
- | template-sinks.js:32:17:32:23 | tainted |
119
+ | template-sinks.js:18:9:18:31 | tainted |
120
+ | template-sinks.js:18:19:18:31 | req.query.foo |
121
+ | template-sinks.js:18:19:18:31 | req.query.foo |
122
+ | template-sinks.js:20:17:20:23 | tainted |
123
+ | template-sinks.js:20:17:20:23 | tainted |
124
+ | template-sinks.js:21:16:21:22 | tainted |
125
+ | template-sinks.js:21:16:21:22 | tainted |
126
+ | template-sinks.js:22:18:22:24 | tainted |
127
+ | template-sinks.js:22:18:22:24 | tainted |
128
+ | template-sinks.js:23:17:23:23 | tainted |
129
+ | template-sinks.js:23:17:23:23 | tainted |
130
+ | template-sinks.js:24:18:24:24 | tainted |
131
+ | template-sinks.js:24:18:24:24 | tainted |
132
+ | template-sinks.js:25:16:25:22 | tainted |
133
+ | template-sinks.js:25:16:25:22 | tainted |
134
+ | template-sinks.js:26:27:26:33 | tainted |
135
+ | template-sinks.js:26:27:26:33 | tainted |
136
+ | template-sinks.js:27:21:27:27 | tainted |
137
+ | template-sinks.js:27:21:27:27 | tainted |
138
+ | template-sinks.js:28:17:28:23 | tainted |
139
+ | template-sinks.js:28:17:28:23 | tainted |
140
+ | template-sinks.js:29:24:29:30 | tainted |
141
+ | template-sinks.js:29:24:29:30 | tainted |
142
+ | template-sinks.js:30:21:30:27 | tainted |
143
+ | template-sinks.js:30:21:30:27 | tainted |
144
+ | template-sinks.js:31:19:31:25 | tainted |
145
+ | template-sinks.js:31:19:31:25 | tainted |
146
+ | template-sinks.js:32:16:32:22 | tainted |
147
+ | template-sinks.js:32:16:32:22 | tainted |
148
+ | template-sinks.js:33:17:33:23 | tainted |
149
+ | template-sinks.js:33:17:33:23 | tainted |
150
+ | template-sinks.js:34:26:34:32 | tainted |
151
+ | template-sinks.js:34:26:34:32 | tainted |
152
+ | template-sinks.js:35:47:35:53 | tainted |
153
+ | template-sinks.js:35:47:35:53 | tainted |
150
154
| tst.js:2:6:2:27 | documen ... on.href |
151
155
| tst.js:2:6:2:27 | documen ... on.href |
152
156
| tst.js:2:6:2:83 | documen ... t=")+8) |
@@ -185,6 +189,9 @@ nodes
185
189
| tst.js:35:28:35:33 | source |
186
190
| tst.js:37:33:37:38 | source |
187
191
| tst.js:37:33:37:38 | source |
192
+ | webix.js:3:12:3:33 | documen ... on.hash |
193
+ | webix.js:3:12:3:33 | documen ... on.hash |
194
+ | webix.js:3:12:3:33 | documen ... on.hash |
188
195
edges
189
196
| NoSQLCodeInjection.js:18:24:18:31 | req.body | NoSQLCodeInjection.js:18:24:18:37 | req.body.query |
190
197
| NoSQLCodeInjection.js:18:24:18:31 | req.body | NoSQLCodeInjection.js:18:24:18:37 | req.body.query |
@@ -254,36 +261,40 @@ edges
254
261
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted |
255
262
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted |
256
263
| react.js:10:56:10:77 | documen ... on.hash | react.js:10:56:10:77 | documen ... on.hash |
257
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:19:17:19:23 | tainted |
258
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:19:17:19:23 | tainted |
259
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:20:16:20:22 | tainted |
260
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:20:16:20:22 | tainted |
261
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:21:18:21:24 | tainted |
262
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:21:18:21:24 | tainted |
263
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:22:17:22:23 | tainted |
264
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:22:17:22:23 | tainted |
265
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:23:18:23:24 | tainted |
266
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:23:18:23:24 | tainted |
267
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:24:16:24:22 | tainted |
268
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:24:16:24:22 | tainted |
269
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:25:27:25:33 | tainted |
270
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:25:27:25:33 | tainted |
271
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:26:21:26:27 | tainted |
272
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:26:21:26:27 | tainted |
273
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:27:17:27:23 | tainted |
274
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:27:17:27:23 | tainted |
275
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:28:24:28:30 | tainted |
276
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:28:24:28:30 | tainted |
277
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:29:21:29:27 | tainted |
278
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:29:21:29:27 | tainted |
279
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:30:19:30:25 | tainted |
280
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:30:19:30:25 | tainted |
281
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:31:16:31:22 | tainted |
282
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:31:16:31:22 | tainted |
283
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:32:17:32:23 | tainted |
284
- | template-sinks.js:17:9:17:31 | tainted | template-sinks.js:32:17:32:23 | tainted |
285
- | template-sinks.js:17:19:17:31 | req.query.foo | template-sinks.js:17:9:17:31 | tainted |
286
- | template-sinks.js:17:19:17:31 | req.query.foo | template-sinks.js:17:9:17:31 | tainted |
264
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:20:17:20:23 | tainted |
265
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:20:17:20:23 | tainted |
266
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:21:16:21:22 | tainted |
267
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:21:16:21:22 | tainted |
268
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:22:18:22:24 | tainted |
269
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:22:18:22:24 | tainted |
270
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:23:17:23:23 | tainted |
271
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:23:17:23:23 | tainted |
272
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:24:18:24:24 | tainted |
273
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:24:18:24:24 | tainted |
274
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:25:16:25:22 | tainted |
275
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:25:16:25:22 | tainted |
276
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:26:27:26:33 | tainted |
277
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:26:27:26:33 | tainted |
278
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:27:21:27:27 | tainted |
279
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:27:21:27:27 | tainted |
280
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:28:17:28:23 | tainted |
281
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:28:17:28:23 | tainted |
282
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:29:24:29:30 | tainted |
283
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:29:24:29:30 | tainted |
284
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:30:21:30:27 | tainted |
285
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:30:21:30:27 | tainted |
286
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:31:19:31:25 | tainted |
287
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:31:19:31:25 | tainted |
288
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:32:16:32:22 | tainted |
289
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:32:16:32:22 | tainted |
290
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:33:17:33:23 | tainted |
291
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:33:17:33:23 | tainted |
292
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:34:26:34:32 | tainted |
293
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:34:26:34:32 | tainted |
294
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:35:47:35:53 | tainted |
295
+ | template-sinks.js:18:9:18:31 | tainted | template-sinks.js:35:47:35:53 | tainted |
296
+ | template-sinks.js:18:19:18:31 | req.query.foo | template-sinks.js:18:9:18:31 | tainted |
297
+ | template-sinks.js:18:19:18:31 | req.query.foo | template-sinks.js:18:9:18:31 | tainted |
287
298
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) |
288
299
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) |
289
300
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) |
@@ -314,5 +325,6 @@ edges
314
325
| tst.js:29:18:29:41 | documen ... .search | tst.js:29:18:29:82 | documen ... , "$1") |
315
326
| tst.js:29:18:29:41 | documen ... .search | tst.js:29:18:29:82 | documen ... , "$1") |
316
327
| tst.js:29:18:29:82 | documen ... , "$1") | tst.js:29:9:29:82 | source |
328
+ | webix.js:3:12:3:33 | documen ... on.hash | webix.js:3:12:3:33 | documen ... on.hash |
317
329
#select
318
330
| eslint-escope-build.js:21:16:21:16 | c | eslint-escope-build.js:20:22:20:22 | c | eslint-escope-build.js:21:16:21:16 | c | $@ flows to here and is interpreted as code. | eslint-escope-build.js:20:22:20:22 | c | User-provided value |
0 commit comments