Skip to content

Commit 1e663b8

Browse files
committed
Update HeuristicSourceCodeInjection.expected
1 parent bb67a90 commit 1e663b8

File tree

1 file changed

+73
-61
lines changed

1 file changed

+73
-61
lines changed

javascript/ql/test/query-tests/Security/CWE-094/CodeInjection/HeuristicSourceCodeInjection.expected

Lines changed: 73 additions & 61 deletions
Original file line numberDiff line numberDiff line change
@@ -116,37 +116,41 @@ nodes
116116
| react.js:10:56:10:77 | documen ... on.hash |
117117
| react.js:10:56:10:77 | documen ... on.hash |
118118
| react.js:10:56:10:77 | documen ... on.hash |
119-
| template-sinks.js:17:9:17:31 | tainted |
120-
| template-sinks.js:17:19:17:31 | req.query.foo |
121-
| template-sinks.js:17:19:17:31 | req.query.foo |
122-
| template-sinks.js:19:17:19:23 | tainted |
123-
| template-sinks.js:19:17:19:23 | tainted |
124-
| template-sinks.js:20:16:20:22 | tainted |
125-
| template-sinks.js:20:16:20:22 | tainted |
126-
| template-sinks.js:21:18:21:24 | tainted |
127-
| template-sinks.js:21:18:21:24 | tainted |
128-
| template-sinks.js:22:17:22:23 | tainted |
129-
| template-sinks.js:22:17:22:23 | tainted |
130-
| template-sinks.js:23:18:23:24 | tainted |
131-
| template-sinks.js:23:18:23:24 | tainted |
132-
| template-sinks.js:24:16:24:22 | tainted |
133-
| template-sinks.js:24:16:24:22 | tainted |
134-
| template-sinks.js:25:27:25:33 | tainted |
135-
| template-sinks.js:25:27:25:33 | tainted |
136-
| template-sinks.js:26:21:26:27 | tainted |
137-
| template-sinks.js:26:21:26:27 | tainted |
138-
| template-sinks.js:27:17:27:23 | tainted |
139-
| template-sinks.js:27:17:27:23 | tainted |
140-
| template-sinks.js:28:24:28:30 | tainted |
141-
| template-sinks.js:28:24:28:30 | tainted |
142-
| template-sinks.js:29:21:29:27 | tainted |
143-
| template-sinks.js:29:21:29:27 | tainted |
144-
| template-sinks.js:30:19:30:25 | tainted |
145-
| template-sinks.js:30:19:30:25 | tainted |
146-
| template-sinks.js:31:16:31:22 | tainted |
147-
| template-sinks.js:31:16:31:22 | tainted |
148-
| template-sinks.js:32:17:32:23 | tainted |
149-
| template-sinks.js:32:17:32:23 | tainted |
119+
| template-sinks.js:18:9:18:31 | tainted |
120+
| template-sinks.js:18:19:18:31 | req.query.foo |
121+
| template-sinks.js:18:19:18:31 | req.query.foo |
122+
| template-sinks.js:20:17:20:23 | tainted |
123+
| template-sinks.js:20:17:20:23 | tainted |
124+
| template-sinks.js:21:16:21:22 | tainted |
125+
| template-sinks.js:21:16:21:22 | tainted |
126+
| template-sinks.js:22:18:22:24 | tainted |
127+
| template-sinks.js:22:18:22:24 | tainted |
128+
| template-sinks.js:23:17:23:23 | tainted |
129+
| template-sinks.js:23:17:23:23 | tainted |
130+
| template-sinks.js:24:18:24:24 | tainted |
131+
| template-sinks.js:24:18:24:24 | tainted |
132+
| template-sinks.js:25:16:25:22 | tainted |
133+
| template-sinks.js:25:16:25:22 | tainted |
134+
| template-sinks.js:26:27:26:33 | tainted |
135+
| template-sinks.js:26:27:26:33 | tainted |
136+
| template-sinks.js:27:21:27:27 | tainted |
137+
| template-sinks.js:27:21:27:27 | tainted |
138+
| template-sinks.js:28:17:28:23 | tainted |
139+
| template-sinks.js:28:17:28:23 | tainted |
140+
| template-sinks.js:29:24:29:30 | tainted |
141+
| template-sinks.js:29:24:29:30 | tainted |
142+
| template-sinks.js:30:21:30:27 | tainted |
143+
| template-sinks.js:30:21:30:27 | tainted |
144+
| template-sinks.js:31:19:31:25 | tainted |
145+
| template-sinks.js:31:19:31:25 | tainted |
146+
| template-sinks.js:32:16:32:22 | tainted |
147+
| template-sinks.js:32:16:32:22 | tainted |
148+
| template-sinks.js:33:17:33:23 | tainted |
149+
| template-sinks.js:33:17:33:23 | tainted |
150+
| template-sinks.js:34:26:34:32 | tainted |
151+
| template-sinks.js:34:26:34:32 | tainted |
152+
| template-sinks.js:35:47:35:53 | tainted |
153+
| template-sinks.js:35:47:35:53 | tainted |
150154
| tst.js:2:6:2:27 | documen ... on.href |
151155
| tst.js:2:6:2:27 | documen ... on.href |
152156
| tst.js:2:6:2:83 | documen ... t=")+8) |
@@ -185,6 +189,9 @@ nodes
185189
| tst.js:35:28:35:33 | source |
186190
| tst.js:37:33:37:38 | source |
187191
| tst.js:37:33:37:38 | source |
192+
| webix.js:3:12:3:33 | documen ... on.hash |
193+
| webix.js:3:12:3:33 | documen ... on.hash |
194+
| webix.js:3:12:3:33 | documen ... on.hash |
188195
edges
189196
| NoSQLCodeInjection.js:18:24:18:31 | req.body | NoSQLCodeInjection.js:18:24:18:37 | req.body.query |
190197
| NoSQLCodeInjection.js:18:24:18:31 | req.body | NoSQLCodeInjection.js:18:24:18:37 | req.body.query |
@@ -254,36 +261,40 @@ edges
254261
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted |
255262
| react-native.js:7:17:7:33 | req.param("code") | react-native.js:7:7:7:33 | tainted |
256263
| react.js:10:56:10:77 | documen ... on.hash | react.js:10:56:10:77 | documen ... on.hash |
257-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:19:17:19:23 | tainted |
258-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:19:17:19:23 | tainted |
259-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:20:16:20:22 | tainted |
260-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:20:16:20:22 | tainted |
261-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:21:18:21:24 | tainted |
262-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:21:18:21:24 | tainted |
263-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:22:17:22:23 | tainted |
264-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:22:17:22:23 | tainted |
265-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:23:18:23:24 | tainted |
266-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:23:18:23:24 | tainted |
267-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:24:16:24:22 | tainted |
268-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:24:16:24:22 | tainted |
269-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:25:27:25:33 | tainted |
270-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:25:27:25:33 | tainted |
271-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:26:21:26:27 | tainted |
272-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:26:21:26:27 | tainted |
273-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:27:17:27:23 | tainted |
274-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:27:17:27:23 | tainted |
275-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:28:24:28:30 | tainted |
276-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:28:24:28:30 | tainted |
277-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:29:21:29:27 | tainted |
278-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:29:21:29:27 | tainted |
279-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:30:19:30:25 | tainted |
280-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:30:19:30:25 | tainted |
281-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:31:16:31:22 | tainted |
282-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:31:16:31:22 | tainted |
283-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:32:17:32:23 | tainted |
284-
| template-sinks.js:17:9:17:31 | tainted | template-sinks.js:32:17:32:23 | tainted |
285-
| template-sinks.js:17:19:17:31 | req.query.foo | template-sinks.js:17:9:17:31 | tainted |
286-
| template-sinks.js:17:19:17:31 | req.query.foo | template-sinks.js:17:9:17:31 | tainted |
264+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:20:17:20:23 | tainted |
265+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:20:17:20:23 | tainted |
266+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:21:16:21:22 | tainted |
267+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:21:16:21:22 | tainted |
268+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:22:18:22:24 | tainted |
269+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:22:18:22:24 | tainted |
270+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:23:17:23:23 | tainted |
271+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:23:17:23:23 | tainted |
272+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:24:18:24:24 | tainted |
273+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:24:18:24:24 | tainted |
274+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:25:16:25:22 | tainted |
275+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:25:16:25:22 | tainted |
276+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:26:27:26:33 | tainted |
277+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:26:27:26:33 | tainted |
278+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:27:21:27:27 | tainted |
279+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:27:21:27:27 | tainted |
280+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:28:17:28:23 | tainted |
281+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:28:17:28:23 | tainted |
282+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:29:24:29:30 | tainted |
283+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:29:24:29:30 | tainted |
284+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:30:21:30:27 | tainted |
285+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:30:21:30:27 | tainted |
286+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:31:19:31:25 | tainted |
287+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:31:19:31:25 | tainted |
288+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:32:16:32:22 | tainted |
289+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:32:16:32:22 | tainted |
290+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:33:17:33:23 | tainted |
291+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:33:17:33:23 | tainted |
292+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:34:26:34:32 | tainted |
293+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:34:26:34:32 | tainted |
294+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:35:47:35:53 | tainted |
295+
| template-sinks.js:18:9:18:31 | tainted | template-sinks.js:35:47:35:53 | tainted |
296+
| template-sinks.js:18:19:18:31 | req.query.foo | template-sinks.js:18:9:18:31 | tainted |
297+
| template-sinks.js:18:19:18:31 | req.query.foo | template-sinks.js:18:9:18:31 | tainted |
287298
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) |
288299
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) |
289300
| tst.js:2:6:2:27 | documen ... on.href | tst.js:2:6:2:83 | documen ... t=")+8) |
@@ -314,5 +325,6 @@ edges
314325
| tst.js:29:18:29:41 | documen ... .search | tst.js:29:18:29:82 | documen ... , "$1") |
315326
| tst.js:29:18:29:41 | documen ... .search | tst.js:29:18:29:82 | documen ... , "$1") |
316327
| tst.js:29:18:29:82 | documen ... , "$1") | tst.js:29:9:29:82 | source |
328+
| webix.js:3:12:3:33 | documen ... on.hash | webix.js:3:12:3:33 | documen ... on.hash |
317329
#select
318330
| eslint-escope-build.js:21:16:21:16 | c | eslint-escope-build.js:20:22:20:22 | c | eslint-escope-build.js:21:16:21:16 | c | $@ flows to here and is interpreted as code. | eslint-escope-build.js:20:22:20:22 | c | User-provided value |

0 commit comments

Comments
 (0)