Skip to content

Commit 03a3884

Browse files
jeongsoolee09jeongsoolee09
authored
Merge pull request #228 from advanced-security/codeql/upgrade-to-v2.23.0
Upgrade CodeQL CLI dependency to v2.23.0
2 parents fb69b74 + fbffb69 commit 03a3884

File tree

39 files changed

+713
-693
lines changed

39 files changed

+713
-693
lines changed

‎javascript/frameworks/cap/lib/codeql-pack.lock.yml‎

Lines changed: 14 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -2,27 +2,29 @@
22
lockVersion: 1.0.0
33
dependencies:
44
codeql/concepts:
5-
version: 0.0.3
5+
version: 0.0.4
6+
codeql/controlflow:
7+
version: 2.0.14
68
codeql/dataflow:
7-
version: 2.0.13
9+
version: 2.0.14
810
codeql/javascript-all:
9-
version: 2.6.9
11+
version: 2.6.10
1012
codeql/mad:
11-
version: 1.0.29
13+
version: 1.0.30
1214
codeql/regex:
13-
version: 1.0.29
15+
version: 1.0.30
1416
codeql/ssa:
15-
version: 2.0.5
17+
version: 2.0.6
1618
codeql/threat-models:
17-
version: 1.0.29
19+
version: 1.0.30
1820
codeql/tutorial:
19-
version: 1.0.29
21+
version: 1.0.30
2022
codeql/typetracking:
21-
version: 2.0.13
23+
version: 2.0.14
2224
codeql/util:
23-
version: 2.0.16
25+
version: 2.0.17
2426
codeql/xml:
25-
version: 1.0.29
27+
version: 1.0.30
2628
codeql/yaml:
27-
version: 1.0.29
29+
version: 1.0.30
2830
compiled: false

‎javascript/frameworks/cap/src/codeql-pack.lock.yml‎

Lines changed: 14 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -2,27 +2,29 @@
22
lockVersion: 1.0.0
33
dependencies:
44
codeql/concepts:
5-
version: 0.0.3
5+
version: 0.0.4
6+
codeql/controlflow:
7+
version: 2.0.14
68
codeql/dataflow:
7-
version: 2.0.13
9+
version: 2.0.14
810
codeql/javascript-all:
9-
version: 2.6.9
11+
version: 2.6.10
1012
codeql/mad:
11-
version: 1.0.29
13+
version: 1.0.30
1214
codeql/regex:
13-
version: 1.0.29
15+
version: 1.0.30
1416
codeql/ssa:
15-
version: 2.0.5
17+
version: 2.0.6
1618
codeql/threat-models:
17-
version: 1.0.29
19+
version: 1.0.30
1820
codeql/tutorial:
19-
version: 1.0.29
21+
version: 1.0.30
2022
codeql/typetracking:
21-
version: 2.0.13
23+
version: 2.0.14
2224
codeql/util:
23-
version: 2.0.16
25+
version: 2.0.17
2426
codeql/xml:
25-
version: 1.0.29
27+
version: 1.0.30
2628
codeql/yaml:
27-
version: 1.0.29
29+
version: 1.0.30
2830
compiled: false

‎javascript/frameworks/cap/test/codeql-pack.lock.yml‎

Lines changed: 14 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -2,27 +2,29 @@
22
lockVersion: 1.0.0
33
dependencies:
44
codeql/concepts:
5-
version: 0.0.3
5+
version: 0.0.4
6+
codeql/controlflow:
7+
version: 2.0.14
68
codeql/dataflow:
7-
version: 2.0.13
9+
version: 2.0.14
810
codeql/javascript-all:
9-
version: 2.6.9
11+
version: 2.6.10
1012
codeql/mad:
11-
version: 1.0.29
13+
version: 1.0.30
1214
codeql/regex:
13-
version: 1.0.29
15+
version: 1.0.30
1416
codeql/ssa:
15-
version: 2.0.5
17+
version: 2.0.6
1618
codeql/threat-models:
17-
version: 1.0.29
19+
version: 1.0.30
1820
codeql/tutorial:
19-
version: 1.0.29
21+
version: 1.0.30
2022
codeql/typetracking:
21-
version: 2.0.13
23+
version: 2.0.14
2224
codeql/util:
23-
version: 2.0.16
25+
version: 2.0.17
2426
codeql/xml:
25-
version: 1.0.29
27+
version: 1.0.30
2628
codeql/yaml:
27-
version: 1.0.29
29+
version: 1.0.30
2830
compiled: false

‎javascript/frameworks/cap/test/queries/cqlinjection/cqlinjection.expected‎

Lines changed: 327 additions & 327 deletions
Large diffs are not rendered by default.

‎javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service1-protocol-none/log-injection-with-service1-protocol-none.expected‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,10 @@
11
edges
2-
| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:15:7:42 | messageToPass | provenance | |
3-
| srv/service2.js:7:15:7:42 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | |
2+
| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:17:7:29 | messageToPass | provenance | |
3+
| srv/service2.js:7:17:7:29 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | |
44
| srv/service2.js:7:35:7:42 | msg.data | srv/service2.js:7:15:7:31 | { messageToPass } | provenance | |
55
nodes
66
| srv/service2.js:7:15:7:31 | { messageToPass } | semmle.label | { messageToPass } |
7-
| srv/service2.js:7:15:7:42 | messageToPass | semmle.label | messageToPass |
7+
| srv/service2.js:7:17:7:29 | messageToPass | semmle.label | messageToPass |
88
| srv/service2.js:7:35:7:42 | msg.data | semmle.label | msg.data |
99
| srv/service2.js:9:32:9:44 | messageToPass | semmle.label | messageToPass |
1010
subpaths

‎javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service2-protocol-none/log-injection-with-service2-protocol-none.expected‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,22 +1,22 @@
11
edges
2-
| srv/service1.js:7:19:7:35 | { messageToPass } | srv/service1.js:7:19:7:46 | messageToPass | provenance | |
3-
| srv/service1.js:7:19:7:46 | messageToPass | srv/service1.js:9:38:9:50 | messageToPass | provenance | |
2+
| srv/service1.js:7:19:7:35 | { messageToPass } | srv/service1.js:7:21:7:33 | messageToPass | provenance | |
3+
| srv/service1.js:7:21:7:33 | messageToPass | srv/service1.js:9:38:9:50 | messageToPass | provenance | |
44
| srv/service1.js:7:39:7:46 | req.data | srv/service1.js:7:19:7:35 | { messageToPass } | provenance | |
55
| srv/service1.js:9:36:9:52 | { messageToPass } | srv/service2.js:6:29:6:31 | msg | provenance | |
66
| srv/service1.js:9:38:9:50 | messageToPass | srv/service1.js:9:36:9:52 | { messageToPass } | provenance | |
77
| srv/service2.js:6:29:6:31 | msg | srv/service2.js:7:35:7:37 | msg | provenance | |
8-
| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:15:7:42 | messageToPass | provenance | |
9-
| srv/service2.js:7:15:7:42 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | |
8+
| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:17:7:29 | messageToPass | provenance | |
9+
| srv/service2.js:7:17:7:29 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | |
1010
| srv/service2.js:7:35:7:37 | msg | srv/service2.js:7:15:7:31 | { messageToPass } | provenance | |
1111
nodes
1212
| srv/service1.js:7:19:7:35 | { messageToPass } | semmle.label | { messageToPass } |
13-
| srv/service1.js:7:19:7:46 | messageToPass | semmle.label | messageToPass |
13+
| srv/service1.js:7:21:7:33 | messageToPass | semmle.label | messageToPass |
1414
| srv/service1.js:7:39:7:46 | req.data | semmle.label | req.data |
1515
| srv/service1.js:9:36:9:52 | { messageToPass } | semmle.label | { messageToPass } |
1616
| srv/service1.js:9:38:9:50 | messageToPass | semmle.label | messageToPass |
1717
| srv/service2.js:6:29:6:31 | msg | semmle.label | msg |
1818
| srv/service2.js:7:15:7:31 | { messageToPass } | semmle.label | { messageToPass } |
19-
| srv/service2.js:7:15:7:42 | messageToPass | semmle.label | messageToPass |
19+
| srv/service2.js:7:17:7:29 | messageToPass | semmle.label | messageToPass |
2020
| srv/service2.js:7:35:7:37 | msg | semmle.label | msg |
2121
| srv/service2.js:9:32:9:44 | messageToPass | semmle.label | messageToPass |
2222
subpaths

‎javascript/frameworks/cap/test/queries/loginjection/log-injection-without-protocol-none/log-injection-without-protocol-none.expected‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,23 +1,23 @@
11
edges
2-
| srv/service1.js:7:19:7:35 | { messageToPass } | srv/service1.js:7:19:7:46 | messageToPass | provenance | |
3-
| srv/service1.js:7:19:7:46 | messageToPass | srv/service1.js:9:38:9:50 | messageToPass | provenance | |
2+
| srv/service1.js:7:19:7:35 | { messageToPass } | srv/service1.js:7:21:7:33 | messageToPass | provenance | |
3+
| srv/service1.js:7:21:7:33 | messageToPass | srv/service1.js:9:38:9:50 | messageToPass | provenance | |
44
| srv/service1.js:7:39:7:46 | req.data | srv/service1.js:7:19:7:35 | { messageToPass } | provenance | |
55
| srv/service1.js:9:36:9:52 | { messageToPass } | srv/service2.js:6:29:6:31 | msg | provenance | |
66
| srv/service1.js:9:38:9:50 | messageToPass | srv/service1.js:9:36:9:52 | { messageToPass } | provenance | |
77
| srv/service2.js:6:29:6:31 | msg | srv/service2.js:7:35:7:37 | msg | provenance | |
8-
| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:15:7:42 | messageToPass | provenance | |
9-
| srv/service2.js:7:15:7:42 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | |
8+
| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:17:7:29 | messageToPass | provenance | |
9+
| srv/service2.js:7:17:7:29 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | |
1010
| srv/service2.js:7:35:7:37 | msg | srv/service2.js:7:15:7:31 | { messageToPass } | provenance | |
1111
| srv/service2.js:7:35:7:42 | msg.data | srv/service2.js:7:15:7:31 | { messageToPass } | provenance | |
1212
nodes
1313
| srv/service1.js:7:19:7:35 | { messageToPass } | semmle.label | { messageToPass } |
14-
| srv/service1.js:7:19:7:46 | messageToPass | semmle.label | messageToPass |
14+
| srv/service1.js:7:21:7:33 | messageToPass | semmle.label | messageToPass |
1515
| srv/service1.js:7:39:7:46 | req.data | semmle.label | req.data |
1616
| srv/service1.js:9:36:9:52 | { messageToPass } | semmle.label | { messageToPass } |
1717
| srv/service1.js:9:38:9:50 | messageToPass | semmle.label | messageToPass |
1818
| srv/service2.js:6:29:6:31 | msg | semmle.label | msg |
1919
| srv/service2.js:7:15:7:31 | { messageToPass } | semmle.label | { messageToPass } |
20-
| srv/service2.js:7:15:7:42 | messageToPass | semmle.label | messageToPass |
20+
| srv/service2.js:7:17:7:29 | messageToPass | semmle.label | messageToPass |
2121
| srv/service2.js:7:35:7:37 | msg | semmle.label | msg |
2222
| srv/service2.js:7:35:7:42 | msg.data | semmle.label | msg.data |
2323
| srv/service2.js:9:32:9:44 | messageToPass | semmle.label | messageToPass |

‎javascript/frameworks/cap/test/queries/path-traversal/pathinjection.expected‎

Lines changed: 40 additions & 40 deletions
Original file line numberDiff line numberDiff line change
@@ -1,61 +1,61 @@
11
edges
2-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:31:26:31:34 | userinput | provenance | |
3-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:33:38:33:46 | userinput | provenance | |
4-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:34:24:34:32 | userinput | provenance | |
5-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:36:44:36:52 | userinput | provenance | |
6-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:38:25:38:33 | userinput | provenance | |
7-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:40:26:40:34 | userinput | provenance | |
8-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:41:26:41:34 | userinput | provenance | |
9-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:43:25:43:33 | userinput | provenance | |
10-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:44:25:44:33 | userinput | provenance | |
11-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:46:26:46:34 | userinput | provenance | |
12-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:47:26:47:34 | userinput | provenance | |
13-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:49:22:49:30 | userinput | provenance | |
14-
| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:50:22:50:30 | userinput | provenance | |
15-
| pathinjection.js:8:31:8:38 | req.data | pathinjection.js:8:19:8:38 | userinput | provenance | |
16-
| pathinjection.js:9:19:9:44 | userinputtwo | pathinjection.js:37:25:37:36 | userinputtwo | provenance | |
17-
| pathinjection.js:9:34:9:44 | req.headers | pathinjection.js:9:19:9:44 | userinputtwo | provenance | |
18-
| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:12:38:12:51 | userinputthree | provenance | |
19-
| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:14:47:14:60 | userinputthree | provenance | |
20-
| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:16:34:16:47 | userinputthree | provenance | |
21-
| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:18:34:18:47 | userinputthree | provenance | |
22-
| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:20:35:20:48 | userinputthree | provenance | |
23-
| pathinjection.js:10:36:10:45 | req.params | pathinjection.js:10:19:10:45 | userinputthree | provenance | |
24-
| pathinjection.js:12:19:12:52 | taint1 | pathinjection.js:22:36:22:41 | taint1 | provenance | |
25-
| pathinjection.js:12:28:12:52 | decodeU ... tthree) | pathinjection.js:12:19:12:52 | taint1 | provenance | |
2+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:31:26:31:34 | userinput | provenance | |
3+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:33:38:33:46 | userinput | provenance | |
4+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:34:24:34:32 | userinput | provenance | |
5+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:36:44:36:52 | userinput | provenance | |
6+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:38:25:38:33 | userinput | provenance | |
7+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:40:26:40:34 | userinput | provenance | |
8+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:41:26:41:34 | userinput | provenance | |
9+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:43:25:43:33 | userinput | provenance | |
10+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:44:25:44:33 | userinput | provenance | |
11+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:46:26:46:34 | userinput | provenance | |
12+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:47:26:47:34 | userinput | provenance | |
13+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:49:22:49:30 | userinput | provenance | |
14+
| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:50:22:50:30 | userinput | provenance | |
15+
| pathinjection.js:8:31:8:38 | req.data | pathinjection.js:8:19:8:27 | userinput | provenance | |
16+
| pathinjection.js:9:19:9:30 | userinputtwo | pathinjection.js:37:25:37:36 | userinputtwo | provenance | |
17+
| pathinjection.js:9:34:9:44 | req.headers | pathinjection.js:9:19:9:30 | userinputtwo | provenance | |
18+
| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:12:38:12:51 | userinputthree | provenance | |
19+
| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:14:47:14:60 | userinputthree | provenance | |
20+
| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:16:34:16:47 | userinputthree | provenance | |
21+
| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:18:34:18:47 | userinputthree | provenance | |
22+
| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:20:35:20:48 | userinputthree | provenance | |
23+
| pathinjection.js:10:36:10:45 | req.params | pathinjection.js:10:19:10:32 | userinputthree | provenance | |
24+
| pathinjection.js:12:19:12:24 | taint1 | pathinjection.js:22:36:22:41 | taint1 | provenance | |
25+
| pathinjection.js:12:28:12:52 | decodeU ... tthree) | pathinjection.js:12:19:12:24 | taint1 | provenance | |
2626
| pathinjection.js:12:38:12:51 | userinputthree | pathinjection.js:12:28:12:52 | decodeU ... tthree) | provenance | Config |
27-
| pathinjection.js:14:19:14:61 | taint2 | pathinjection.js:24:40:24:45 | taint2 | provenance | |
28-
| pathinjection.js:14:28:14:61 | decodeU ... tthree) | pathinjection.js:14:19:14:61 | taint2 | provenance | |
27+
| pathinjection.js:14:19:14:24 | taint2 | pathinjection.js:24:40:24:45 | taint2 | provenance | |
28+
| pathinjection.js:14:28:14:61 | decodeU ... tthree) | pathinjection.js:14:19:14:24 | taint2 | provenance | |
2929
| pathinjection.js:14:47:14:60 | userinputthree | pathinjection.js:14:28:14:61 | decodeU ... tthree) | provenance | Config |
30-
| pathinjection.js:16:19:16:48 | taint3 | pathinjection.js:26:34:26:39 | taint3 | provenance | |
31-
| pathinjection.js:16:28:16:48 | local(u ... tthree) | pathinjection.js:16:19:16:48 | taint3 | provenance | |
30+
| pathinjection.js:16:19:16:24 | taint3 | pathinjection.js:26:34:26:39 | taint3 | provenance | |
31+
| pathinjection.js:16:28:16:48 | local(u ... tthree) | pathinjection.js:16:19:16:24 | taint3 | provenance | |
3232
| pathinjection.js:16:34:16:47 | userinputthree | pathinjection.js:16:28:16:48 | local(u ... tthree) | provenance | Config |
33-
| pathinjection.js:18:19:18:48 | taint4 | pathinjection.js:28:34:28:39 | taint4 | provenance | |
34-
| pathinjection.js:18:28:18:48 | isdir(u ... tthree) | pathinjection.js:18:19:18:48 | taint4 | provenance | |
33+
| pathinjection.js:18:19:18:24 | taint4 | pathinjection.js:28:34:28:39 | taint4 | provenance | |
34+
| pathinjection.js:18:28:18:48 | isdir(u ... tthree) | pathinjection.js:18:19:18:24 | taint4 | provenance | |
3535
| pathinjection.js:18:34:18:47 | userinputthree | pathinjection.js:18:28:18:48 | isdir(u ... tthree) | provenance | Config |
36-
| pathinjection.js:20:19:20:49 | taint5 | pathinjection.js:30:40:30:45 | taint5 | provenance | |
37-
| pathinjection.js:20:28:20:49 | isfile( ... tthree) | pathinjection.js:20:19:20:49 | taint5 | provenance | |
36+
| pathinjection.js:20:19:20:24 | taint5 | pathinjection.js:30:40:30:45 | taint5 | provenance | |
37+
| pathinjection.js:20:28:20:49 | isfile( ... tthree) | pathinjection.js:20:19:20:24 | taint5 | provenance | |
3838
| pathinjection.js:20:35:20:48 | userinputthree | pathinjection.js:20:28:20:49 | isfile( ... tthree) | provenance | Config |
3939
nodes
40-
| pathinjection.js:8:19:8:38 | userinput | semmle.label | userinput |
40+
| pathinjection.js:8:19:8:27 | userinput | semmle.label | userinput |
4141
| pathinjection.js:8:31:8:38 | req.data | semmle.label | req.data |
42-
| pathinjection.js:9:19:9:44 | userinputtwo | semmle.label | userinputtwo |
42+
| pathinjection.js:9:19:9:30 | userinputtwo | semmle.label | userinputtwo |
4343
| pathinjection.js:9:34:9:44 | req.headers | semmle.label | req.headers |
44-
| pathinjection.js:10:19:10:45 | userinputthree | semmle.label | userinputthree |
44+
| pathinjection.js:10:19:10:32 | userinputthree | semmle.label | userinputthree |
4545
| pathinjection.js:10:36:10:45 | req.params | semmle.label | req.params |
46-
| pathinjection.js:12:19:12:52 | taint1 | semmle.label | taint1 |
46+
| pathinjection.js:12:19:12:24 | taint1 | semmle.label | taint1 |
4747
| pathinjection.js:12:28:12:52 | decodeU ... tthree) | semmle.label | decodeU ... tthree) |
4848
| pathinjection.js:12:38:12:51 | userinputthree | semmle.label | userinputthree |
49-
| pathinjection.js:14:19:14:61 | taint2 | semmle.label | taint2 |
49+
| pathinjection.js:14:19:14:24 | taint2 | semmle.label | taint2 |
5050
| pathinjection.js:14:28:14:61 | decodeU ... tthree) | semmle.label | decodeU ... tthree) |
5151
| pathinjection.js:14:47:14:60 | userinputthree | semmle.label | userinputthree |
52-
| pathinjection.js:16:19:16:48 | taint3 | semmle.label | taint3 |
52+
| pathinjection.js:16:19:16:24 | taint3 | semmle.label | taint3 |
5353
| pathinjection.js:16:28:16:48 | local(u ... tthree) | semmle.label | local(u ... tthree) |
5454
| pathinjection.js:16:34:16:47 | userinputthree | semmle.label | userinputthree |
55-
| pathinjection.js:18:19:18:48 | taint4 | semmle.label | taint4 |
55+
| pathinjection.js:18:19:18:24 | taint4 | semmle.label | taint4 |
5656
| pathinjection.js:18:28:18:48 | isdir(u ... tthree) | semmle.label | isdir(u ... tthree) |
5757
| pathinjection.js:18:34:18:47 | userinputthree | semmle.label | userinputthree |
58-
| pathinjection.js:20:19:20:49 | taint5 | semmle.label | taint5 |
58+
| pathinjection.js:20:19:20:24 | taint5 | semmle.label | taint5 |
5959
| pathinjection.js:20:28:20:49 | isfile( ... tthree) | semmle.label | isfile( ... tthree) |
6060
| pathinjection.js:20:35:20:48 | userinputthree | semmle.label | userinputthree |
6161
| pathinjection.js:22:36:22:41 | taint1 | semmle.label | taint1 |

‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.expected‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,14 @@
11
edges
22
| sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) | sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` | provenance | |
33
| sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env | sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) | provenance | |
4-
| sensitive-exposure-heuristic-source.js:8:13:10:9 | obj [x] | sensitive-exposure-heuristic-source.js:11:18:11:20 | obj | provenance | |
5-
| sensitive-exposure-heuristic-source.js:8:19:10:9 | {\\n ... } [x] | sensitive-exposure-heuristic-source.js:8:13:10:9 | obj [x] | provenance | |
4+
| sensitive-exposure-heuristic-source.js:8:13:8:15 | obj [x] | sensitive-exposure-heuristic-source.js:11:18:11:20 | obj | provenance | |
5+
| sensitive-exposure-heuristic-source.js:8:19:10:9 | {\\n ... } [x] | sensitive-exposure-heuristic-source.js:8:13:8:15 | obj [x] | provenance | |
66
| sensitive-exposure-heuristic-source.js:9:16:9:23 | password | sensitive-exposure-heuristic-source.js:8:19:10:9 | {\\n ... } [x] | provenance | |
77
nodes
88
| sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` | semmle.label | `[INFO] ... .env)}` |
99
| sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) | semmle.label | JSON.st ... ss.env) |
1010
| sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env | semmle.label | process.env |
11-
| sensitive-exposure-heuristic-source.js:8:13:10:9 | obj [x] | semmle.label | obj [x] |
11+
| sensitive-exposure-heuristic-source.js:8:13:8:15 | obj [x] | semmle.label | obj [x] |
1212
| sensitive-exposure-heuristic-source.js:8:19:10:9 | {\\n ... } [x] | semmle.label | {\\n ... } [x] |
1313
| sensitive-exposure-heuristic-source.js:9:16:9:23 | password | semmle.label | password |
1414
| sensitive-exposure-heuristic-source.js:11:18:11:20 | obj | semmle.label | obj |

0 commit comments

Comments
 (0)