File tree Expand file tree Collapse file tree 2 files changed +5
-11
lines changed
javascript/ql/test/query-tests/Security/CWE-020/IncompleteUrlSchemeCheck Expand file tree Collapse file tree 2 files changed +5
-11
lines changed Original file line number Diff line number Diff line change 1
- #select
2
1
| IncompleteUrlSchemeCheck.js:5:9:5:35 | u.start ... ript:") | This check does not consider data: and vbscript:. |
3
2
| IncompleteUrlSchemeCheck.js:16:9:16:39 | badProt ... otocol) | This check does not consider vbscript:. |
4
3
| IncompleteUrlSchemeCheck.js:23:9:23:43 | badProt ... scheme) | This check does not consider vbscript:. |
12
11
| IncompleteUrlSchemeCheck.js:87:7:87:40 | /^(java ... scheme) | This check does not consider vbscript:. |
13
12
| IncompleteUrlSchemeCheck.js:94:10:94:15 | scheme | This check does not consider vbscript:. |
14
13
| IncompleteUrlSchemeCheck.js:104:6:104:39 | /^(java ... scheme) | This check does not consider vbscript:. |
15
- | IncompleteUrlSchemeCheck.js:110:12:112:29 | url // ... :/, "") | This check does not consider vbscript:. |
14
+ | IncompleteUrlSchemeCheck.js:110:12:112:29 | url\\n ... :/, "") | This check does not consider vbscript:. |
16
15
| IncompleteUrlSchemeCheck.js:124:11:124:34 | url.rep ... :/, "") | This check does not consider vbscript:. |
17
- testFailures
18
- | IncompleteUrlSchemeCheck.js:94:10:94:15 | This check does not consider vbscript:. | Unexpected result: Alert |
19
- | IncompleteUrlSchemeCheck.js:95:25:95:34 | // $ Alert | Missing result: Alert |
20
- | IncompleteUrlSchemeCheck.js:110:12:112:29 | This check does not consider vbscript:. | Unexpected result: Alert |
21
- | IncompleteUrlSchemeCheck.js:110:17:110:26 | // $ Alert | Missing result: Alert |
Original file line number Diff line number Diff line change @@ -91,8 +91,8 @@ function test12(url) {
91
91
92
92
function test13 ( url ) {
93
93
let scheme = goog . uri . utils . getScheme ( url ) ;
94
- switch ( scheme ) {
95
- case "javascript" : // $ Alert
94
+ switch ( scheme ) { // $ Alert
95
+ case "javascript" :
96
96
case "data" :
97
97
return "about:blank" ;
98
98
default :
@@ -107,9 +107,9 @@ function test14(url) {
107
107
}
108
108
109
109
function chain1 ( url ) {
110
- return url // $ Alert
110
+ return url
111
111
. replace ( / j a v a s c r i p t : / , "" )
112
- . replace ( / d a t a : / , "" ) ;
112
+ . replace ( / d a t a : / , "" ) ; // $ Alert
113
113
}
114
114
115
115
function chain2 ( url ) {
You can’t perform that action at this time.
0 commit comments