File tree Expand file tree Collapse file tree 6 files changed +12
-0
lines changed
query-tests/Security/CWE-079 Expand file tree Collapse file tree 6 files changed +12
-0
lines changed Original file line number Diff line number Diff line change 10
10
| arrays.js:29:21:29:28 | "source" | arrays.js:33:8:33:17 | arr5.pop() |
11
11
| arrays.js:29:21:29:28 | "source" | arrays.js:35:8:35:26 | arr5.slice(2).pop() |
12
12
| arrays.js:29:21:29:28 | "source" | arrays.js:41:8:41:17 | arr6.pop() |
13
+ | arrays.js:44:14:44:21 | "source" | arrays.js:45:10:45:18 | ary.pop() |
Original file line number Diff line number Diff line change 2
2
| a.js:1:15:1:23 | "tainted" | b.js:6:13:6:13 | x |
3
3
| a.js:2:15:2:28 | "also tainted" | b.js:5:13:5:29 | notTaintedTrustMe |
4
4
| callback.js:16:14:16:21 | "source" | callback.js:13:14:13:14 | x |
5
+ | callback.js:17:15:17:23 | "source2" | callback.js:13:14:13:14 | x |
5
6
| callback.js:27:15:27:23 | "source3" | callback.js:13:14:13:14 | x |
6
7
| destructuring.js:2:16:2:24 | "tainted" | destructuring.js:9:15:9:22 | tainted2 |
7
8
| destructuring.js:19:15:19:23 | "tainted" | destructuring.js:14:15:14:15 | p |
44
45
| tst2.js:6:24:6:37 | "also tainted" | tst2.js:11:15:11:24 | g(source2) |
45
46
| tst6.mjs:12:14:12:21 | "source" | tst6.mjs:14:12:14:16 | a.m() |
46
47
| tst6.mjs:16:15:16:23 | "source2" | tst6.mjs:18:13:18:24 | a.m.call(a2) |
48
+ | tst.js:2:17:2:22 | "src1" | tst.js:28:20:28:22 | elt |
47
49
| tst.js:2:17:2:22 | "src1" | tst.js:39:17:39:17 | x |
48
50
| tst.js:2:17:2:22 | "src1" | tst.js:41:19:41:19 | x |
49
51
| tst.js:2:17:2:22 | "src1" | tst.js:45:17:45:17 | x |
Original file line number Diff line number Diff line change 2
2
| a.js:1:15:1:23 | "tainted" | b.js:6:13:6:13 | x |
3
3
| a.js:2:15:2:28 | "also tainted" | b.js:5:13:5:29 | notTaintedTrustMe |
4
4
| callback.js:16:14:16:21 | "source" | callback.js:13:14:13:14 | x |
5
+ | callback.js:17:15:17:23 | "source2" | callback.js:13:14:13:14 | x |
5
6
| callback.js:27:15:27:23 | "source3" | callback.js:13:14:13:14 | x |
6
7
| custom.js:1:14:1:26 | "verschmutzt" | custom.js:2:15:2:20 | quelle |
7
8
| destructuring.js:2:16:2:24 | "tainted" | destructuring.js:9:15:9:22 | tainted2 |
45
46
| tst2.js:6:24:6:37 | "also tainted" | tst2.js:11:15:11:24 | g(source2) |
46
47
| tst6.mjs:12:14:12:21 | "source" | tst6.mjs:14:12:14:16 | a.m() |
47
48
| tst6.mjs:16:15:16:23 | "source2" | tst6.mjs:18:13:18:24 | a.m.call(a2) |
49
+ | tst.js:2:17:2:22 | "src1" | tst.js:28:20:28:22 | elt |
48
50
| tst.js:2:17:2:22 | "src1" | tst.js:39:17:39:17 | x |
49
51
| tst.js:2:17:2:22 | "src1" | tst.js:41:19:41:19 | x |
50
52
| tst.js:2:17:2:22 | "src1" | tst.js:45:17:45:17 | x |
Original file line number Diff line number Diff line change
1
+ | missing | callback.js:17:15:17:23 | "source2" | callback.js:8:16:8:20 | xs[i] |
2
+ | missing | callback.js:17:15:17:23 | "source2" | callback.js:12:16:12:16 | x |
3
+ | missing | callback.js:17:15:17:23 | "source2" | callback.js:13:14:13:14 | x |
1
4
| missing | promises.js:1:2:1:2 | source | promises.js:6:26:6:28 | val |
2
5
| missing | promises.js:1:2:1:2 | source | promises.js:7:16:7:18 | val |
3
6
| missing | promises.js:1:2:1:2 | source | promises.js:37:11:37:11 | v |
30
33
| missing | promises.js:16:7:16:21 | exceptional return of rej(rej_source) | promises.js:24:20:24:20 | v |
31
34
| missing | promises.js:32:24:32:37 | "also tainted" | promises.js:37:11:37:11 | v |
32
35
| missing | promises.js:32:24:32:37 | "also tainted" | promises.js:38:32:38:32 | v |
36
+ | missing | tst.js:2:17:2:22 | "src1" | tst.js:27:22:27:24 | elt |
37
+ | missing | tst.js:2:17:2:22 | "src1" | tst.js:28:20:28:22 | elt |
Original file line number Diff line number Diff line change @@ -521,6 +521,7 @@ edges
521
521
| tst.js:73:3:73:19 | document.___location | tst.js:73:3:73:26 | documen ... .search |
522
522
| tst.js:73:3:73:19 | document.___location | tst.js:73:3:73:26 | documen ... .search |
523
523
| tst.js:73:3:73:26 | documen ... .search | tst.js:73:1:73:27 | [,docum ... search] |
524
+ | tst.js:73:3:73:26 | documen ... .search | tst.js:73:46:73:46 | x |
524
525
| tst.js:73:46:73:46 | x | tst.js:76:20:76:20 | x |
525
526
| tst.js:73:46:73:46 | x | tst.js:76:20:76:20 | x |
526
527
| tst.js:80:49:80:65 | document.___location | tst.js:80:49:80:72 | documen ... .search |
Original file line number Diff line number Diff line change @@ -525,6 +525,7 @@ edges
525
525
| tst.js:73:3:73:19 | document.___location | tst.js:73:3:73:26 | documen ... .search |
526
526
| tst.js:73:3:73:19 | document.___location | tst.js:73:3:73:26 | documen ... .search |
527
527
| tst.js:73:3:73:26 | documen ... .search | tst.js:73:1:73:27 | [,docum ... search] |
528
+ | tst.js:73:3:73:26 | documen ... .search | tst.js:73:46:73:46 | x |
528
529
| tst.js:73:46:73:46 | x | tst.js:76:20:76:20 | x |
529
530
| tst.js:73:46:73:46 | x | tst.js:76:20:76:20 | x |
530
531
| tst.js:80:49:80:65 | document.___location | tst.js:80:49:80:72 | documen ... .search |
You can’t perform that action at this time.
0 commit comments