From 9285ed36c79d309241e45f3398b3edc16b162d8e Mon Sep 17 00:00:00 2001 From: lcartey <5377966+lcartey@users.noreply.github.com> Date: Tue, 9 Sep 2025 00:49:00 +0000 Subject: [PATCH 1/3] Upgrade CodeQL CLI dependency to v2.23.0 --- .../frameworks/cap/lib/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/cap/src/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/cap/test/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/ui5/lib/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/ui5/src/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/ui5/test/codeql-pack.lock.yml | 32 ++++++++++--------- .../frameworks/xsjs/lib/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/xsjs/src/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/xsjs/test/codeql-pack.lock.yml | 26 ++++++++------- .../tests/codeql-pack.lock.yml | 26 ++++++++------- qlt.conf.json | 6 ++-- 11 files changed, 146 insertions(+), 126 deletions(-) diff --git a/javascript/frameworks/cap/lib/codeql-pack.lock.yml b/javascript/frameworks/cap/lib/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/cap/lib/codeql-pack.lock.yml +++ b/javascript/frameworks/cap/lib/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/cap/src/codeql-pack.lock.yml b/javascript/frameworks/cap/src/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/cap/src/codeql-pack.lock.yml +++ b/javascript/frameworks/cap/src/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/cap/test/codeql-pack.lock.yml b/javascript/frameworks/cap/test/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/cap/test/codeql-pack.lock.yml +++ b/javascript/frameworks/cap/test/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/ui5/lib/codeql-pack.lock.yml b/javascript/frameworks/ui5/lib/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/ui5/lib/codeql-pack.lock.yml +++ b/javascript/frameworks/ui5/lib/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/ui5/src/codeql-pack.lock.yml b/javascript/frameworks/ui5/src/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/ui5/src/codeql-pack.lock.yml +++ b/javascript/frameworks/ui5/src/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/ui5/test/codeql-pack.lock.yml b/javascript/frameworks/ui5/test/codeql-pack.lock.yml index 62f7b3fa..9b33eb30 100644 --- a/javascript/frameworks/ui5/test/codeql-pack.lock.yml +++ b/javascript/frameworks/ui5/test/codeql-pack.lock.yml @@ -2,33 +2,35 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/javascript-queries: - version: 2.0.2 + version: 2.0.3 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/suite-helpers: - version: 1.0.29 + version: 1.0.30 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/typos: - version: 1.0.29 + version: 1.0.30 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml b/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml +++ b/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/xsjs/src/codeql-pack.lock.yml b/javascript/frameworks/xsjs/src/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/xsjs/src/codeql-pack.lock.yml +++ b/javascript/frameworks/xsjs/src/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/xsjs/test/codeql-pack.lock.yml b/javascript/frameworks/xsjs/test/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/xsjs/test/codeql-pack.lock.yml +++ b/javascript/frameworks/xsjs/test/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/heuristic-models/tests/codeql-pack.lock.yml b/javascript/heuristic-models/tests/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/heuristic-models/tests/codeql-pack.lock.yml +++ b/javascript/heuristic-models/tests/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/qlt.conf.json b/qlt.conf.json index 4a90e840..dcb5d04a 100644 --- a/qlt.conf.json +++ b/qlt.conf.json @@ -1,5 +1,5 @@ { - "CodeQLCLI": "2.22.4", - "CodeQLStandardLibrary": "codeql-cli/v2.22.4", - "CodeQLCLIBundle": "codeql-bundle-v2.22.4" + "CodeQLCLI": "2.23.0", + "CodeQLStandardLibrary": "codeql-cli/v2.23.0", + "CodeQLCLIBundle": "codeql-bundle-v2.23.0" } From 56909a9933d9bf26f1c1d1b9be88759c2dd1ffbd Mon Sep 17 00:00:00 2001 From: Jeongsoo Lee Date: Tue, 16 Sep 2025 15:26:19 -0400 Subject: [PATCH 2/3] Update expected results The latest changes in CodeQL for JavaScript apparently improve on the reported alert location. --- .../cqlinjection/cqlinjection.expected | 654 +++++++++--------- ...ction-with-service1-protocol-none.expected | 6 +- ...ction-with-service2-protocol-none.expected | 12 +- ...g-injection-without-protocol-none.expected | 12 +- .../path-traversal/pathinjection.expected | 80 +-- ...nsitive-exposure-heuristic-source.expected | 6 +- .../test/models/summary/summaryTest.expected | 72 +- .../UI5FormulaInjection.expected | 12 +- .../LogInjection.expected | 36 +- .../UI5LogInjection.expected | 36 +- .../UI5LogInjection.expected | 12 +- .../UI5LogInjection.expected | 6 +- .../UI5UnsafeLogAccess.expected | 6 +- .../UI5LogInjection.expected | 6 +- .../UI5LogsToHttp.expected | 12 +- .../UI5UnsafeLogAccess.expected | 6 +- .../log-entry-flows-to-sinks/UI5Xss.expected | 6 +- .../UI5LogInjection.expected | 6 +- .../UI5PathInjection.expected | 12 +- .../avoid-duplicate-alerts/UI5Xss.expected | 24 +- .../avoid-duplicate-alerts/Xss.expected | 36 +- .../UI5Xss/xss-book-example/UI5Xss.expected | 6 +- .../UI5Xss/xss-event-handlers/UI5Xss.expected | 18 +- .../xss-html-control-df/UI5Xss.expected | 6 +- .../XSJSReflectedXss.expected | 6 +- .../XSJSSqlInjection.expected | 20 +- .../XSJSUrlRedirect/XSJSUrlRedirect.expected | 6 +- .../queries/XSJSZipSlip/XSJSZipSlip.expected | 14 +- 28 files changed, 567 insertions(+), 567 deletions(-) diff --git a/javascript/frameworks/cap/test/queries/cqlinjection/cqlinjection.expected b/javascript/frameworks/cap/test/queries/cqlinjection/cqlinjection.expected index c57d5a83..99a38fc8 100644 --- a/javascript/frameworks/cap/test/queries/cqlinjection/cqlinjection.expected +++ b/javascript/frameworks/cap/test/queries/cqlinjection/cqlinjection.expected @@ -1,530 +1,530 @@ edges -| srv/service1.js:13:13:13:18 | { id } | srv/service1.js:13:13:13:29 | id | provenance | | -| srv/service1.js:13:13:13:29 | id | srv/service1.js:14:56:14:57 | id | provenance | | +| srv/service1.js:13:13:13:18 | { id } | srv/service1.js:13:15:13:16 | id | provenance | | +| srv/service1.js:13:15:13:16 | id | srv/service1.js:14:56:14:57 | id | provenance | | | srv/service1.js:13:22:13:29 | req.data | srv/service1.js:13:13:13:18 | { id } | provenance | | -| srv/service1.js:14:13:14:58 | query | srv/service1.js:15:15:15:19 | query | provenance | | -| srv/service1.js:14:21:14:58 | SELECT. ... " + id) | srv/service1.js:14:13:14:58 | query | provenance | | +| srv/service1.js:14:13:14:17 | query | srv/service1.js:15:15:15:19 | query | provenance | | +| srv/service1.js:14:21:14:58 | SELECT. ... " + id) | srv/service1.js:14:13:14:17 | query | provenance | | | srv/service1.js:14:48:14:57 | "ID=" + id | srv/service1.js:14:21:14:58 | SELECT. ... " + id) | provenance | Config | | srv/service1.js:14:56:14:57 | id | srv/service1.js:14:48:14:57 | "ID=" + id | provenance | | -| srv/service1.js:19:13:19:18 | { id } | srv/service1.js:19:13:19:29 | id | provenance | | -| srv/service1.js:19:13:19:29 | id | srv/service1.js:20:56:20:57 | id | provenance | | +| srv/service1.js:19:13:19:18 | { id } | srv/service1.js:19:15:19:16 | id | provenance | | +| srv/service1.js:19:15:19:16 | id | srv/service1.js:20:56:20:57 | id | provenance | | | srv/service1.js:19:22:19:29 | req.data | srv/service1.js:19:13:19:18 | { id } | provenance | | -| srv/service1.js:20:13:20:58 | query | srv/service1.js:21:15:21:19 | query | provenance | | -| srv/service1.js:20:21:20:58 | SELECT. ... ` + id) | srv/service1.js:20:13:20:58 | query | provenance | | +| srv/service1.js:20:13:20:17 | query | srv/service1.js:21:15:21:19 | query | provenance | | +| srv/service1.js:20:21:20:58 | SELECT. ... ` + id) | srv/service1.js:20:13:20:17 | query | provenance | | | srv/service1.js:20:48:20:57 | `ID=` + id | srv/service1.js:20:21:20:58 | SELECT. ... ` + id) | provenance | Config | | srv/service1.js:20:56:20:57 | id | srv/service1.js:20:48:20:57 | `ID=` + id | provenance | | -| srv/service1.js:25:13:25:18 | { id } | srv/service1.js:25:13:25:29 | id | provenance | | -| srv/service1.js:25:13:25:29 | id | srv/service1.js:26:54:26:55 | id | provenance | | +| srv/service1.js:25:13:25:18 | { id } | srv/service1.js:25:15:25:16 | id | provenance | | +| srv/service1.js:25:15:25:16 | id | srv/service1.js:26:54:26:55 | id | provenance | | | srv/service1.js:25:22:25:29 | req.data | srv/service1.js:25:13:25:18 | { id } | provenance | | -| srv/service1.js:26:13:26:58 | query | srv/service1.js:27:15:27:19 | query | provenance | | -| srv/service1.js:26:21:26:58 | SELECT. ... ${id}`) | srv/service1.js:26:13:26:58 | query | provenance | | +| srv/service1.js:26:13:26:17 | query | srv/service1.js:27:15:27:19 | query | provenance | | +| srv/service1.js:26:21:26:58 | SELECT. ... ${id}`) | srv/service1.js:26:13:26:17 | query | provenance | | | srv/service1.js:26:48:26:57 | `ID=${id}` | srv/service1.js:26:21:26:58 | SELECT. ... ${id}`) | provenance | Config | | srv/service1.js:26:54:26:55 | id | srv/service1.js:26:48:26:57 | `ID=${id}` | provenance | | -| srv/service1.js:37:13:37:18 | { id } | srv/service1.js:37:13:37:29 | id | provenance | | -| srv/service1.js:37:13:37:29 | id | srv/service1.js:38:42:38:43 | id | provenance | | +| srv/service1.js:37:13:37:18 | { id } | srv/service1.js:37:15:37:16 | id | provenance | | +| srv/service1.js:37:15:37:16 | id | srv/service1.js:38:42:38:43 | id | provenance | | | srv/service1.js:37:22:37:29 | req.data | srv/service1.js:37:13:37:18 | { id } | provenance | | | srv/service1.js:38:42:38:43 | id | srv/service1.js:38:33:38:43 | "ID =" + id | provenance | | -| srv/service1.js:42:13:42:18 | { id } | srv/service1.js:42:13:42:29 | id | provenance | | -| srv/service1.js:42:13:42:29 | id | srv/service1.js:43:42:43:43 | id | provenance | | +| srv/service1.js:42:13:42:18 | { id } | srv/service1.js:42:15:42:16 | id | provenance | | +| srv/service1.js:42:15:42:16 | id | srv/service1.js:43:42:43:43 | id | provenance | | | srv/service1.js:42:22:42:29 | req.data | srv/service1.js:42:13:42:18 | { id } | provenance | | | srv/service1.js:43:42:43:43 | id | srv/service1.js:43:33:43:43 | `ID =` + id | provenance | | -| srv/service1.js:47:13:47:18 | { id } | srv/service1.js:47:13:47:29 | id | provenance | | -| srv/service1.js:47:13:47:29 | id | srv/service1.js:48:39:48:40 | id | provenance | | +| srv/service1.js:47:13:47:18 | { id } | srv/service1.js:47:15:47:16 | id | provenance | | +| srv/service1.js:47:15:47:16 | id | srv/service1.js:48:39:48:40 | id | provenance | | | srv/service1.js:47:22:47:29 | req.data | srv/service1.js:47:13:47:18 | { id } | provenance | | | srv/service1.js:48:39:48:40 | id | srv/service1.js:48:33:48:42 | `ID=${id}` | provenance | | -| srv/service1.js:72:13:72:26 | { id, amount } | srv/service1.js:72:13:72:37 | amount | provenance | | -| srv/service1.js:72:13:72:26 | { id, amount } | srv/service1.js:72:13:72:37 | id | provenance | | -| srv/service1.js:72:13:72:37 | amount | srv/service1.js:73:49:73:54 | amount | provenance | | -| srv/service1.js:72:13:72:37 | id | srv/service1.js:73:75:73:76 | id | provenance | | +| srv/service1.js:72:13:72:26 | { id, amount } | srv/service1.js:72:15:72:16 | id | provenance | | +| srv/service1.js:72:13:72:26 | { id, amount } | srv/service1.js:72:19:72:24 | amount | provenance | | +| srv/service1.js:72:15:72:16 | id | srv/service1.js:73:75:73:76 | id | provenance | | +| srv/service1.js:72:19:72:24 | amount | srv/service1.js:73:49:73:54 | amount | provenance | | | srv/service1.js:72:30:72:37 | req.data | srv/service1.js:72:13:72:26 | { id, amount } | provenance | | | srv/service1.js:73:49:73:54 | amount | srv/service1.js:73:33:73:54 | "col1 = ... amount | provenance | | | srv/service1.js:73:75:73:76 | id | srv/service1.js:73:63:73:76 | "col1 = " + id | provenance | | -| srv/service1.js:77:13:77:26 | { id, amount } | srv/service1.js:77:13:77:37 | amount | provenance | | -| srv/service1.js:77:13:77:26 | { id, amount } | srv/service1.js:77:13:77:37 | id | provenance | | -| srv/service1.js:77:13:77:37 | amount | srv/service1.js:78:49:78:54 | amount | provenance | | -| srv/service1.js:77:13:77:37 | id | srv/service1.js:78:75:78:76 | id | provenance | | +| srv/service1.js:77:13:77:26 | { id, amount } | srv/service1.js:77:15:77:16 | id | provenance | | +| srv/service1.js:77:13:77:26 | { id, amount } | srv/service1.js:77:19:77:24 | amount | provenance | | +| srv/service1.js:77:15:77:16 | id | srv/service1.js:78:75:78:76 | id | provenance | | +| srv/service1.js:77:19:77:24 | amount | srv/service1.js:78:49:78:54 | amount | provenance | | | srv/service1.js:77:30:77:37 | req.data | srv/service1.js:77:13:77:26 | { id, amount } | provenance | | | srv/service1.js:78:49:78:54 | amount | srv/service1.js:78:33:78:54 | "col1 = ... amount | provenance | | | srv/service1.js:78:75:78:76 | id | srv/service1.js:78:63:78:76 | `col1 = ` + id | provenance | | -| srv/service1.js:82:13:82:26 | { id, amount } | srv/service1.js:82:13:82:37 | amount | provenance | | -| srv/service1.js:82:13:82:26 | { id, amount } | srv/service1.js:82:13:82:37 | id | provenance | | -| srv/service1.js:82:13:82:37 | amount | srv/service1.js:83:49:83:54 | amount | provenance | | -| srv/service1.js:82:13:82:37 | id | srv/service1.js:83:73:83:74 | id | provenance | | +| srv/service1.js:82:13:82:26 | { id, amount } | srv/service1.js:82:15:82:16 | id | provenance | | +| srv/service1.js:82:13:82:26 | { id, amount } | srv/service1.js:82:19:82:24 | amount | provenance | | +| srv/service1.js:82:15:82:16 | id | srv/service1.js:83:73:83:74 | id | provenance | | +| srv/service1.js:82:19:82:24 | amount | srv/service1.js:83:49:83:54 | amount | provenance | | | srv/service1.js:82:30:82:37 | req.data | srv/service1.js:82:13:82:26 | { id, amount } | provenance | | | srv/service1.js:83:49:83:54 | amount | srv/service1.js:83:33:83:54 | "col1 = ... amount | provenance | | | srv/service1.js:83:73:83:74 | id | srv/service1.js:83:63:83:76 | `col1 = ${id}` | provenance | | -| srv/service1.js:87:13:87:26 | { id, amount } | srv/service1.js:87:13:87:37 | amount | provenance | | -| srv/service1.js:87:13:87:37 | amount | srv/service1.js:88:49:88:54 | amount | provenance | | +| srv/service1.js:87:13:87:26 | { id, amount } | srv/service1.js:87:19:87:24 | amount | provenance | | +| srv/service1.js:87:19:87:24 | amount | srv/service1.js:88:49:88:54 | amount | provenance | | | srv/service1.js:87:30:87:37 | req.data | srv/service1.js:87:13:87:26 | { id, amount } | provenance | | | srv/service1.js:88:49:88:54 | amount | srv/service1.js:88:33:88:54 | "col1 = ... amount | provenance | | -| srv/service1.js:122:13:122:18 | { id } | srv/service1.js:122:13:122:29 | id | provenance | | -| srv/service1.js:122:13:122:29 | id | srv/service1.js:123:44:123:45 | id | provenance | | +| srv/service1.js:122:13:122:18 | { id } | srv/service1.js:122:15:122:16 | id | provenance | | +| srv/service1.js:122:15:122:16 | id | srv/service1.js:123:44:123:45 | id | provenance | | | srv/service1.js:122:22:122:29 | req.data | srv/service1.js:122:13:122:18 | { id } | provenance | | | srv/service1.js:123:44:123:45 | id | srv/service1.js:123:35:123:45 | "ID =" + id | provenance | | -| srv/service1.js:127:13:127:18 | { id } | srv/service1.js:127:13:127:29 | id | provenance | | -| srv/service1.js:127:13:127:29 | id | srv/service1.js:128:44:128:45 | id | provenance | | +| srv/service1.js:127:13:127:18 | { id } | srv/service1.js:127:15:127:16 | id | provenance | | +| srv/service1.js:127:15:127:16 | id | srv/service1.js:128:44:128:45 | id | provenance | | | srv/service1.js:127:22:127:29 | req.data | srv/service1.js:127:13:127:18 | { id } | provenance | | | srv/service1.js:128:44:128:45 | id | srv/service1.js:128:35:128:45 | `ID =` + id | provenance | | -| srv/service1.js:132:13:132:18 | { id } | srv/service1.js:132:13:132:29 | id | provenance | | -| srv/service1.js:132:13:132:29 | id | srv/service1.js:133:43:133:44 | id | provenance | | +| srv/service1.js:132:13:132:18 | { id } | srv/service1.js:132:15:132:16 | id | provenance | | +| srv/service1.js:132:15:132:16 | id | srv/service1.js:133:43:133:44 | id | provenance | | | srv/service1.js:132:22:132:29 | req.data | srv/service1.js:132:13:132:18 | { id } | provenance | | | srv/service1.js:133:43:133:44 | id | srv/service1.js:133:35:133:46 | `ID = ${id}` | provenance | | -| srv/service1.js:143:13:143:18 | { id } | srv/service1.js:143:13:143:29 | id | provenance | | -| srv/service1.js:143:13:143:29 | id | srv/service1.js:145:55:145:56 | id | provenance | | +| srv/service1.js:143:13:143:18 | { id } | srv/service1.js:143:15:143:16 | id | provenance | | +| srv/service1.js:143:15:143:16 | id | srv/service1.js:145:55:145:56 | id | provenance | | | srv/service1.js:143:22:143:29 | req.data | srv/service1.js:143:13:143:18 | { id } | provenance | | | srv/service1.js:145:13:145:57 | SELECT. ... " + id) | srv/service1.js:145:7:145:57 | await S ... " + id) | provenance | | | srv/service1.js:145:47:145:56 | "ID=" + id | srv/service1.js:145:13:145:57 | SELECT. ... " + id) | provenance | Config | | srv/service1.js:145:55:145:56 | id | srv/service1.js:145:47:145:56 | "ID=" + id | provenance | | -| srv/service1.js:149:13:149:18 | { id } | srv/service1.js:149:13:149:29 | id | provenance | | -| srv/service1.js:149:13:149:29 | id | srv/service1.js:151:55:151:56 | id | provenance | | +| srv/service1.js:149:13:149:18 | { id } | srv/service1.js:149:15:149:16 | id | provenance | | +| srv/service1.js:149:15:149:16 | id | srv/service1.js:151:55:151:56 | id | provenance | | | srv/service1.js:149:22:149:29 | req.data | srv/service1.js:149:13:149:18 | { id } | provenance | | | srv/service1.js:151:13:151:57 | SELECT. ... ` + id) | srv/service1.js:151:7:151:57 | await S ... ` + id) | provenance | | | srv/service1.js:151:47:151:56 | `ID=` + id | srv/service1.js:151:13:151:57 | SELECT. ... ` + id) | provenance | Config | | srv/service1.js:151:55:151:56 | id | srv/service1.js:151:47:151:56 | `ID=` + id | provenance | | -| srv/service1.js:155:13:155:18 | { id } | srv/service1.js:155:13:155:29 | id | provenance | | -| srv/service1.js:155:13:155:29 | id | srv/service1.js:157:53:157:54 | id | provenance | | +| srv/service1.js:155:13:155:18 | { id } | srv/service1.js:155:15:155:16 | id | provenance | | +| srv/service1.js:155:15:155:16 | id | srv/service1.js:157:53:157:54 | id | provenance | | | srv/service1.js:155:22:155:29 | req.data | srv/service1.js:155:13:155:18 | { id } | provenance | | | srv/service1.js:157:13:157:57 | SELECT. ... ${id}`) | srv/service1.js:157:7:157:57 | await S ... ${id}`) | provenance | | | srv/service1.js:157:47:157:56 | `ID=${id}` | srv/service1.js:157:13:157:57 | SELECT. ... ${id}`) | provenance | Config | | srv/service1.js:157:53:157:54 | id | srv/service1.js:157:47:157:56 | `ID=${id}` | provenance | | -| srv/service1.js:185:13:185:18 | { id } | srv/service1.js:185:13:185:29 | id | provenance | | -| srv/service1.js:185:13:185:29 | id | srv/service1.js:187:66:187:67 | id | provenance | | -| srv/service1.js:185:13:185:29 | id | srv/service1.js:187:85:187:86 | id | provenance | | +| srv/service1.js:185:13:185:18 | { id } | srv/service1.js:185:15:185:16 | id | provenance | | +| srv/service1.js:185:15:185:16 | id | srv/service1.js:187:66:187:67 | id | provenance | | +| srv/service1.js:185:15:185:16 | id | srv/service1.js:187:85:187:86 | id | provenance | | | srv/service1.js:185:22:185:29 | req.data | srv/service1.js:185:13:185:18 | { id } | provenance | | | srv/service1.js:187:13:187:87 | UPDATE. ... " + id) | srv/service1.js:187:7:187:87 | await U ... " + id) | provenance | | | srv/service1.js:187:47:187:67 | "col1 = ... " + id | srv/service1.js:187:13:187:87 | UPDATE. ... " + id) | provenance | Config | | srv/service1.js:187:66:187:67 | id | srv/service1.js:187:47:187:67 | "col1 = ... " + id | provenance | | | srv/service1.js:187:76:187:86 | "ID =" + id | srv/service1.js:187:13:187:87 | UPDATE. ... " + id) | provenance | Config | | srv/service1.js:187:85:187:86 | id | srv/service1.js:187:76:187:86 | "ID =" + id | provenance | | -| srv/service1.js:191:13:191:18 | { id } | srv/service1.js:191:13:191:29 | id | provenance | | -| srv/service1.js:191:13:191:29 | id | srv/service1.js:193:66:193:67 | id | provenance | | -| srv/service1.js:191:13:191:29 | id | srv/service1.js:193:85:193:86 | id | provenance | | +| srv/service1.js:191:13:191:18 | { id } | srv/service1.js:191:15:191:16 | id | provenance | | +| srv/service1.js:191:15:191:16 | id | srv/service1.js:193:66:193:67 | id | provenance | | +| srv/service1.js:191:15:191:16 | id | srv/service1.js:193:85:193:86 | id | provenance | | | srv/service1.js:191:22:191:29 | req.data | srv/service1.js:191:13:191:18 | { id } | provenance | | | srv/service1.js:193:13:193:87 | UPDATE. ... ` + id) | srv/service1.js:193:7:193:87 | await U ... ` + id) | provenance | | | srv/service1.js:193:47:193:67 | "col1 = ... " + id | srv/service1.js:193:13:193:87 | UPDATE. ... ` + id) | provenance | Config | | srv/service1.js:193:66:193:67 | id | srv/service1.js:193:47:193:67 | "col1 = ... " + id | provenance | | | srv/service1.js:193:76:193:86 | `ID =` + id | srv/service1.js:193:13:193:87 | UPDATE. ... ` + id) | provenance | Config | | srv/service1.js:193:85:193:86 | id | srv/service1.js:193:76:193:86 | `ID =` + id | provenance | | -| srv/service1.js:197:13:197:18 | { id } | srv/service1.js:197:13:197:29 | id | provenance | | -| srv/service1.js:197:13:197:29 | id | srv/service1.js:199:66:199:67 | id | provenance | | -| srv/service1.js:197:13:197:29 | id | srv/service1.js:199:84:199:85 | id | provenance | | +| srv/service1.js:197:13:197:18 | { id } | srv/service1.js:197:15:197:16 | id | provenance | | +| srv/service1.js:197:15:197:16 | id | srv/service1.js:199:66:199:67 | id | provenance | | +| srv/service1.js:197:15:197:16 | id | srv/service1.js:199:84:199:85 | id | provenance | | | srv/service1.js:197:22:197:29 | req.data | srv/service1.js:197:13:197:18 | { id } | provenance | | | srv/service1.js:199:13:199:88 | UPDATE. ... ${id}`) | srv/service1.js:199:7:199:88 | await U ... ${id}`) | provenance | | | srv/service1.js:199:47:199:67 | "col1 = ... " + id | srv/service1.js:199:13:199:88 | UPDATE. ... ${id}`) | provenance | Config | | srv/service1.js:199:66:199:67 | id | srv/service1.js:199:47:199:67 | "col1 = ... " + id | provenance | | | srv/service1.js:199:76:199:87 | `ID = ${id}` | srv/service1.js:199:13:199:88 | UPDATE. ... ${id}`) | provenance | Config | | srv/service1.js:199:84:199:85 | id | srv/service1.js:199:76:199:87 | `ID = ${id}` | provenance | | -| srv/service1.js:203:13:203:18 | { id } | srv/service1.js:203:13:203:29 | id | provenance | | -| srv/service1.js:203:13:203:29 | id | srv/service1.js:205:66:205:67 | id | provenance | | +| srv/service1.js:203:13:203:18 | { id } | srv/service1.js:203:15:203:16 | id | provenance | | +| srv/service1.js:203:15:203:16 | id | srv/service1.js:205:66:205:67 | id | provenance | | | srv/service1.js:203:22:203:29 | req.data | srv/service1.js:203:13:203:18 | { id } | provenance | | | srv/service1.js:205:13:205:86 | UPDATE. ... ${id}` | srv/service1.js:205:7:205:86 | await U ... ${id}` | provenance | | | srv/service1.js:205:47:205:67 | "col1 = ... " + id | srv/service1.js:205:13:205:86 | UPDATE. ... ${id}` | provenance | Config | | srv/service1.js:205:66:205:67 | id | srv/service1.js:205:47:205:67 | "col1 = ... " + id | provenance | | -| srv/service1.js:227:13:227:18 | { id } | srv/service1.js:227:13:227:29 | id | provenance | | -| srv/service1.js:227:13:227:29 | id | srv/service1.js:229:56:229:57 | id | provenance | | +| srv/service1.js:227:13:227:18 | { id } | srv/service1.js:227:15:227:16 | id | provenance | | +| srv/service1.js:227:15:227:16 | id | srv/service1.js:229:56:229:57 | id | provenance | | | srv/service1.js:227:22:227:29 | req.data | srv/service1.js:227:13:227:18 | { id } | provenance | | | srv/service1.js:229:13:229:58 | DELETE. ... " + id) | srv/service1.js:229:7:229:58 | await D ... " + id) | provenance | | | srv/service1.js:229:47:229:57 | "ID =" + id | srv/service1.js:229:13:229:58 | DELETE. ... " + id) | provenance | Config | | srv/service1.js:229:56:229:57 | id | srv/service1.js:229:47:229:57 | "ID =" + id | provenance | | -| srv/service1.js:233:13:233:18 | { id } | srv/service1.js:233:13:233:29 | id | provenance | | -| srv/service1.js:233:13:233:29 | id | srv/service1.js:235:56:235:57 | id | provenance | | +| srv/service1.js:233:13:233:18 | { id } | srv/service1.js:233:15:233:16 | id | provenance | | +| srv/service1.js:233:15:233:16 | id | srv/service1.js:235:56:235:57 | id | provenance | | | srv/service1.js:233:22:233:29 | req.data | srv/service1.js:233:13:233:18 | { id } | provenance | | | srv/service1.js:235:13:235:58 | DELETE. ... ` + id) | srv/service1.js:235:7:235:58 | await D ... ` + id) | provenance | | | srv/service1.js:235:47:235:57 | `ID =` + id | srv/service1.js:235:13:235:58 | DELETE. ... ` + id) | provenance | Config | | srv/service1.js:235:56:235:57 | id | srv/service1.js:235:47:235:57 | `ID =` + id | provenance | | -| srv/service1.js:239:13:239:18 | { id } | srv/service1.js:239:13:239:29 | id | provenance | | -| srv/service1.js:239:13:239:29 | id | srv/service1.js:241:55:241:56 | id | provenance | | +| srv/service1.js:239:13:239:18 | { id } | srv/service1.js:239:15:239:16 | id | provenance | | +| srv/service1.js:239:15:239:16 | id | srv/service1.js:241:55:241:56 | id | provenance | | | srv/service1.js:239:22:239:29 | req.data | srv/service1.js:239:13:239:18 | { id } | provenance | | | srv/service1.js:241:13:241:59 | DELETE. ... ${id}`) | srv/service1.js:241:7:241:59 | await D ... ${id}`) | provenance | | | srv/service1.js:241:47:241:58 | `ID = ${id}` | srv/service1.js:241:13:241:59 | DELETE. ... ${id}`) | provenance | Config | | srv/service1.js:241:55:241:56 | id | srv/service1.js:241:47:241:58 | `ID = ${id}` | provenance | | -| srv/service1.js:252:13:252:18 | { id } | srv/service1.js:252:13:252:29 | id | provenance | | -| srv/service1.js:252:13:252:29 | id | srv/service1.js:253:63:253:64 | id | provenance | | +| srv/service1.js:252:13:252:18 | { id } | srv/service1.js:252:15:252:16 | id | provenance | | +| srv/service1.js:252:15:252:16 | id | srv/service1.js:253:63:253:64 | id | provenance | | | srv/service1.js:252:22:252:29 | req.data | srv/service1.js:252:13:252:18 | { id } | provenance | | -| srv/service1.js:253:13:253:65 | query | srv/service1.js:254:16:254:20 | query | provenance | | -| srv/service1.js:253:21:253:65 | SELECT. ... " + id) | srv/service1.js:253:13:253:65 | query | provenance | | +| srv/service1.js:253:13:253:17 | query | srv/service1.js:254:16:254:20 | query | provenance | | +| srv/service1.js:253:21:253:65 | SELECT. ... " + id) | srv/service1.js:253:13:253:17 | query | provenance | | | srv/service1.js:253:55:253:64 | "ID=" + id | srv/service1.js:253:21:253:65 | SELECT. ... " + id) | provenance | Config | | srv/service1.js:253:63:253:64 | id | srv/service1.js:253:55:253:64 | "ID=" + id | provenance | | -| srv/service1.js:258:13:258:18 | { id } | srv/service1.js:258:13:258:29 | id | provenance | | -| srv/service1.js:258:13:258:29 | id | srv/service1.js:259:50:259:51 | id | provenance | | +| srv/service1.js:258:13:258:18 | { id } | srv/service1.js:258:15:258:16 | id | provenance | | +| srv/service1.js:258:15:258:16 | id | srv/service1.js:259:50:259:51 | id | provenance | | | srv/service1.js:258:22:258:29 | req.data | srv/service1.js:258:13:258:18 | { id } | provenance | | | srv/service1.js:259:50:259:51 | id | srv/service1.js:259:41:259:51 | "ID =" + id | provenance | | -| srv/service1.js:268:13:268:26 | { id, amount } | srv/service1.js:268:13:268:37 | amount | provenance | | -| srv/service1.js:268:13:268:26 | { id, amount } | srv/service1.js:268:13:268:37 | id | provenance | | -| srv/service1.js:268:13:268:37 | amount | srv/service1.js:269:57:269:62 | amount | provenance | | -| srv/service1.js:268:13:268:37 | id | srv/service1.js:269:83:269:84 | id | provenance | | +| srv/service1.js:268:13:268:26 | { id, amount } | srv/service1.js:268:15:268:16 | id | provenance | | +| srv/service1.js:268:13:268:26 | { id, amount } | srv/service1.js:268:19:268:24 | amount | provenance | | +| srv/service1.js:268:15:268:16 | id | srv/service1.js:269:83:269:84 | id | provenance | | +| srv/service1.js:268:19:268:24 | amount | srv/service1.js:269:57:269:62 | amount | provenance | | | srv/service1.js:268:30:268:37 | req.data | srv/service1.js:268:13:268:26 | { id, amount } | provenance | | | srv/service1.js:269:57:269:62 | amount | srv/service1.js:269:41:269:62 | "col1 = ... amount | provenance | | | srv/service1.js:269:83:269:84 | id | srv/service1.js:269:71:269:84 | "col1 = " + id | provenance | | -| srv/service1.js:283:13:283:18 | { id } | srv/service1.js:283:13:283:29 | id | provenance | | -| srv/service1.js:283:13:283:29 | id | srv/service1.js:284:52:284:53 | id | provenance | | +| srv/service1.js:283:13:283:18 | { id } | srv/service1.js:283:15:283:16 | id | provenance | | +| srv/service1.js:283:15:283:16 | id | srv/service1.js:284:52:284:53 | id | provenance | | | srv/service1.js:283:22:283:29 | req.data | srv/service1.js:283:13:283:18 | { id } | provenance | | | srv/service1.js:284:52:284:53 | id | srv/service1.js:284:43:284:53 | "ID =" + id | provenance | | -| srv/service1.js:289:13:289:18 | { id } | srv/service1.js:289:13:289:29 | id | provenance | | -| srv/service1.js:289:13:289:29 | id | srv/service1.js:291:63:291:64 | id | provenance | | +| srv/service1.js:289:13:289:18 | { id } | srv/service1.js:289:15:289:16 | id | provenance | | +| srv/service1.js:289:15:289:16 | id | srv/service1.js:291:63:291:64 | id | provenance | | | srv/service1.js:289:22:289:29 | req.data | srv/service1.js:289:13:289:18 | { id } | provenance | | -| srv/service1.js:291:13:291:65 | query | srv/service1.js:292:20:292:24 | query | provenance | | -| srv/service1.js:291:21:291:65 | SELECT. ... " + id) | srv/service1.js:291:13:291:65 | query | provenance | | +| srv/service1.js:291:13:291:17 | query | srv/service1.js:292:20:292:24 | query | provenance | | +| srv/service1.js:291:21:291:65 | SELECT. ... " + id) | srv/service1.js:291:13:291:17 | query | provenance | | | srv/service1.js:291:55:291:64 | "ID=" + id | srv/service1.js:291:21:291:65 | SELECT. ... " + id) | provenance | Config | | srv/service1.js:291:63:291:64 | id | srv/service1.js:291:55:291:64 | "ID=" + id | provenance | | -| srv/service1.js:296:13:296:18 | { id } | srv/service1.js:296:13:296:29 | id | provenance | | -| srv/service1.js:296:13:296:29 | id | srv/service1.js:298:54:298:55 | id | provenance | | +| srv/service1.js:296:13:296:18 | { id } | srv/service1.js:296:15:296:16 | id | provenance | | +| srv/service1.js:296:15:296:16 | id | srv/service1.js:298:54:298:55 | id | provenance | | | srv/service1.js:296:22:296:29 | req.data | srv/service1.js:296:13:296:18 | { id } | provenance | | | srv/service1.js:298:54:298:55 | id | srv/service1.js:298:45:298:55 | "ID =" + id | provenance | | -| srv/service1.js:308:13:308:26 | { id, amount } | srv/service1.js:308:13:308:37 | amount | provenance | | -| srv/service1.js:308:13:308:26 | { id, amount } | srv/service1.js:308:13:308:37 | id | provenance | | -| srv/service1.js:308:13:308:37 | amount | srv/service1.js:310:61:310:66 | amount | provenance | | -| srv/service1.js:308:13:308:37 | id | srv/service1.js:310:87:310:88 | id | provenance | | +| srv/service1.js:308:13:308:26 | { id, amount } | srv/service1.js:308:15:308:16 | id | provenance | | +| srv/service1.js:308:13:308:26 | { id, amount } | srv/service1.js:308:19:308:24 | amount | provenance | | +| srv/service1.js:308:15:308:16 | id | srv/service1.js:310:87:310:88 | id | provenance | | +| srv/service1.js:308:19:308:24 | amount | srv/service1.js:310:61:310:66 | amount | provenance | | | srv/service1.js:308:30:308:37 | req.data | srv/service1.js:308:13:308:26 | { id, amount } | provenance | | | srv/service1.js:310:61:310:66 | amount | srv/service1.js:310:45:310:66 | "col1 = ... amount | provenance | | | srv/service1.js:310:87:310:88 | id | srv/service1.js:310:75:310:88 | "col1 = " + id | provenance | | -| srv/service1.js:326:13:326:18 | { id } | srv/service1.js:326:13:326:29 | id | provenance | | -| srv/service1.js:326:13:326:29 | id | srv/service1.js:328:56:328:57 | id | provenance | | +| srv/service1.js:326:13:326:18 | { id } | srv/service1.js:326:15:326:16 | id | provenance | | +| srv/service1.js:326:15:326:16 | id | srv/service1.js:328:56:328:57 | id | provenance | | | srv/service1.js:326:22:326:29 | req.data | srv/service1.js:326:13:326:18 | { id } | provenance | | | srv/service1.js:328:56:328:57 | id | srv/service1.js:328:47:328:57 | "ID =" + id | provenance | | -| srv/service1.js:333:13:333:18 | { id } | srv/service1.js:333:13:333:29 | id | provenance | | -| srv/service1.js:333:13:333:29 | id | srv/service1.js:335:72:335:73 | id | provenance | | +| srv/service1.js:333:13:333:18 | { id } | srv/service1.js:333:15:333:16 | id | provenance | | +| srv/service1.js:333:15:333:16 | id | srv/service1.js:335:72:335:73 | id | provenance | | | srv/service1.js:333:22:333:29 | req.data | srv/service1.js:333:13:333:18 | { id } | provenance | | -| srv/service1.js:335:13:335:74 | query | srv/service1.js:336:20:336:24 | query | provenance | | -| srv/service1.js:335:21:335:74 | cds.ql( ... " + id) | srv/service1.js:335:13:335:74 | query | provenance | | +| srv/service1.js:335:13:335:17 | query | srv/service1.js:336:20:336:24 | query | provenance | | +| srv/service1.js:335:21:335:74 | cds.ql( ... " + id) | srv/service1.js:335:13:335:17 | query | provenance | | | srv/service1.js:335:28:335:73 | "SELECT ... =" + id | srv/service1.js:335:21:335:74 | cds.ql( ... " + id) | provenance | Config | | srv/service1.js:335:72:335:73 | id | srv/service1.js:335:28:335:73 | "SELECT ... =" + id | provenance | | -| srv/service1.js:340:13:340:18 | { id } | srv/service1.js:340:13:340:29 | id | provenance | | -| srv/service1.js:340:13:340:29 | id | srv/service1.js:342:72:342:73 | id | provenance | | +| srv/service1.js:340:13:340:18 | { id } | srv/service1.js:340:15:340:16 | id | provenance | | +| srv/service1.js:340:15:340:16 | id | srv/service1.js:342:72:342:73 | id | provenance | | | srv/service1.js:340:22:340:29 | req.data | srv/service1.js:340:13:340:18 | { id } | provenance | | -| srv/service1.js:342:13:342:74 | query | srv/service1.js:343:20:343:24 | query | provenance | | -| srv/service1.js:342:21:342:74 | cds.ql( ... ` + id) | srv/service1.js:342:13:342:74 | query | provenance | | +| srv/service1.js:342:13:342:17 | query | srv/service1.js:343:20:343:24 | query | provenance | | +| srv/service1.js:342:21:342:74 | cds.ql( ... ` + id) | srv/service1.js:342:13:342:17 | query | provenance | | | srv/service1.js:342:28:342:73 | `SELECT ... =` + id | srv/service1.js:342:21:342:74 | cds.ql( ... ` + id) | provenance | Config | | srv/service1.js:342:72:342:73 | id | srv/service1.js:342:28:342:73 | `SELECT ... =` + id | provenance | | -| srv/service1.js:347:13:347:18 | { id } | srv/service1.js:347:13:347:29 | id | provenance | | -| srv/service1.js:347:13:347:29 | id | srv/service1.js:349:71:349:72 | id | provenance | | +| srv/service1.js:347:13:347:18 | { id } | srv/service1.js:347:15:347:16 | id | provenance | | +| srv/service1.js:347:15:347:16 | id | srv/service1.js:349:71:349:72 | id | provenance | | | srv/service1.js:347:22:347:29 | req.data | srv/service1.js:347:13:347:18 | { id } | provenance | | -| srv/service1.js:349:13:349:75 | query | srv/service1.js:350:20:350:24 | query | provenance | | -| srv/service1.js:349:21:349:75 | cds.ql( ... ${id}`) | srv/service1.js:349:13:349:75 | query | provenance | | +| srv/service1.js:349:13:349:17 | query | srv/service1.js:350:20:350:24 | query | provenance | | +| srv/service1.js:349:21:349:75 | cds.ql( ... ${id}`) | srv/service1.js:349:13:349:17 | query | provenance | | | srv/service1.js:349:28:349:74 | `SELECT ... ${id}` | srv/service1.js:349:21:349:75 | cds.ql( ... ${id}`) | provenance | Config | | srv/service1.js:349:71:349:72 | id | srv/service1.js:349:28:349:74 | `SELECT ... ${id}` | provenance | | -| srv/service1.js:362:13:362:18 | { id } | srv/service1.js:362:13:362:29 | id | provenance | | -| srv/service1.js:362:13:362:29 | id | srv/service1.js:363:72:363:73 | id | provenance | | +| srv/service1.js:362:13:362:18 | { id } | srv/service1.js:362:15:362:16 | id | provenance | | +| srv/service1.js:362:15:362:16 | id | srv/service1.js:363:72:363:73 | id | provenance | | | srv/service1.js:362:22:362:29 | req.data | srv/service1.js:362:13:362:18 | { id } | provenance | | -| srv/service1.js:363:13:363:74 | query | srv/service1.js:364:15:364:19 | query | provenance | | -| srv/service1.js:363:21:363:74 | cds.par ... " + id) | srv/service1.js:363:13:363:74 | query | provenance | | +| srv/service1.js:363:13:363:17 | query | srv/service1.js:364:15:364:19 | query | provenance | | +| srv/service1.js:363:21:363:74 | cds.par ... " + id) | srv/service1.js:363:13:363:17 | query | provenance | | | srv/service1.js:363:35:363:73 | "SELECT ... =" + id | srv/service1.js:363:21:363:74 | cds.par ... " + id) | provenance | Config | | srv/service1.js:363:72:363:73 | id | srv/service1.js:363:35:363:73 | "SELECT ... =" + id | provenance | | -| srv/service1.js:368:13:368:18 | { id } | srv/service1.js:368:13:368:29 | id | provenance | | -| srv/service1.js:368:13:368:29 | id | srv/service1.js:369:72:369:73 | id | provenance | | +| srv/service1.js:368:13:368:18 | { id } | srv/service1.js:368:15:368:16 | id | provenance | | +| srv/service1.js:368:15:368:16 | id | srv/service1.js:369:72:369:73 | id | provenance | | | srv/service1.js:368:22:368:29 | req.data | srv/service1.js:368:13:368:18 | { id } | provenance | | -| srv/service1.js:369:13:369:74 | query | srv/service1.js:370:15:370:19 | query | provenance | | -| srv/service1.js:369:21:369:74 | cds.par ... ` + id) | srv/service1.js:369:13:369:74 | query | provenance | | +| srv/service1.js:369:13:369:17 | query | srv/service1.js:370:15:370:19 | query | provenance | | +| srv/service1.js:369:21:369:74 | cds.par ... ` + id) | srv/service1.js:369:13:369:17 | query | provenance | | | srv/service1.js:369:35:369:73 | `SELECT ... =` + id | srv/service1.js:369:21:369:74 | cds.par ... ` + id) | provenance | Config | | srv/service1.js:369:72:369:73 | id | srv/service1.js:369:35:369:73 | `SELECT ... =` + id | provenance | | -| srv/service1.js:374:13:374:18 | { id } | srv/service1.js:374:13:374:29 | id | provenance | | -| srv/service1.js:374:13:374:29 | id | srv/service1.js:375:71:375:72 | id | provenance | | +| srv/service1.js:374:13:374:18 | { id } | srv/service1.js:374:15:374:16 | id | provenance | | +| srv/service1.js:374:15:374:16 | id | srv/service1.js:375:71:375:72 | id | provenance | | | srv/service1.js:374:22:374:29 | req.data | srv/service1.js:374:13:374:18 | { id } | provenance | | -| srv/service1.js:375:13:375:75 | query | srv/service1.js:376:15:376:19 | query | provenance | | -| srv/service1.js:375:21:375:75 | cds.par ... ${id}`) | srv/service1.js:375:13:375:75 | query | provenance | | +| srv/service1.js:375:13:375:17 | query | srv/service1.js:376:15:376:19 | query | provenance | | +| srv/service1.js:375:21:375:75 | cds.par ... ${id}`) | srv/service1.js:375:13:375:17 | query | provenance | | | srv/service1.js:375:35:375:74 | `SELECT ... ${id}` | srv/service1.js:375:21:375:75 | cds.par ... ${id}`) | provenance | Config | | srv/service1.js:375:71:375:72 | id | srv/service1.js:375:35:375:74 | `SELECT ... ${id}` | provenance | | -| srv/service1.js:387:13:387:18 | { id } | srv/service1.js:387:13:387:29 | id | provenance | | -| srv/service1.js:387:13:387:29 | id | srv/service1.js:388:62:388:63 | id | provenance | | +| srv/service1.js:387:13:387:18 | { id } | srv/service1.js:387:15:387:16 | id | provenance | | +| srv/service1.js:387:15:387:16 | id | srv/service1.js:388:62:388:63 | id | provenance | | | srv/service1.js:387:22:387:29 | req.data | srv/service1.js:387:13:387:18 | { id } | provenance | | -| srv/service1.js:388:13:388:64 | query | srv/service1.js:389:15:389:19 | query | provenance | | -| srv/service1.js:388:21:388:64 | CQL("SE ... " + id) | srv/service1.js:388:13:388:64 | query | provenance | | +| srv/service1.js:388:13:388:17 | query | srv/service1.js:389:15:389:19 | query | provenance | | +| srv/service1.js:388:21:388:64 | CQL("SE ... " + id) | srv/service1.js:388:13:388:17 | query | provenance | | | srv/service1.js:388:25:388:63 | "SELECT ... =" + id | srv/service1.js:388:21:388:64 | CQL("SE ... " + id) | provenance | Config | | srv/service1.js:388:62:388:63 | id | srv/service1.js:388:25:388:63 | "SELECT ... =" + id | provenance | | -| srv/service1.js:393:13:393:18 | { id } | srv/service1.js:393:13:393:29 | id | provenance | | -| srv/service1.js:393:13:393:29 | id | srv/service1.js:394:62:394:63 | id | provenance | | +| srv/service1.js:393:13:393:18 | { id } | srv/service1.js:393:15:393:16 | id | provenance | | +| srv/service1.js:393:15:393:16 | id | srv/service1.js:394:62:394:63 | id | provenance | | | srv/service1.js:393:22:393:29 | req.data | srv/service1.js:393:13:393:18 | { id } | provenance | | -| srv/service1.js:394:13:394:64 | query | srv/service1.js:395:15:395:19 | query | provenance | | -| srv/service1.js:394:21:394:64 | CQL(`SE ... ` + id) | srv/service1.js:394:13:394:64 | query | provenance | | +| srv/service1.js:394:13:394:17 | query | srv/service1.js:395:15:395:19 | query | provenance | | +| srv/service1.js:394:21:394:64 | CQL(`SE ... ` + id) | srv/service1.js:394:13:394:17 | query | provenance | | | srv/service1.js:394:25:394:63 | `SELECT ... =` + id | srv/service1.js:394:21:394:64 | CQL(`SE ... ` + id) | provenance | Config | | srv/service1.js:394:62:394:63 | id | srv/service1.js:394:25:394:63 | `SELECT ... =` + id | provenance | | -| srv/service1.js:399:13:399:18 | { id } | srv/service1.js:399:13:399:29 | id | provenance | | -| srv/service1.js:399:13:399:29 | id | srv/service1.js:400:61:400:62 | id | provenance | | +| srv/service1.js:399:13:399:18 | { id } | srv/service1.js:399:15:399:16 | id | provenance | | +| srv/service1.js:399:15:399:16 | id | srv/service1.js:400:61:400:62 | id | provenance | | | srv/service1.js:399:22:399:29 | req.data | srv/service1.js:399:13:399:18 | { id } | provenance | | -| srv/service1.js:400:13:400:65 | query | srv/service1.js:401:15:401:19 | query | provenance | | -| srv/service1.js:400:21:400:65 | CQL(`SE ... ${id}`) | srv/service1.js:400:13:400:65 | query | provenance | | +| srv/service1.js:400:13:400:17 | query | srv/service1.js:401:15:401:19 | query | provenance | | +| srv/service1.js:400:21:400:65 | CQL(`SE ... ${id}`) | srv/service1.js:400:13:400:17 | query | provenance | | | srv/service1.js:400:25:400:64 | `SELECT ... ${id}` | srv/service1.js:400:21:400:65 | CQL(`SE ... ${id}`) | provenance | Config | | srv/service1.js:400:61:400:62 | id | srv/service1.js:400:25:400:64 | `SELECT ... ${id}` | provenance | | -| srv/service1.js:412:13:412:18 | { id } | srv/service1.js:412:13:412:29 | id | provenance | | -| srv/service1.js:412:13:412:29 | id | srv/service1.js:414:58:414:59 | id | provenance | | +| srv/service1.js:412:13:412:18 | { id } | srv/service1.js:412:15:412:16 | id | provenance | | +| srv/service1.js:412:15:412:16 | id | srv/service1.js:414:58:414:59 | id | provenance | | | srv/service1.js:412:22:412:29 | req.data | srv/service1.js:412:13:412:18 | { id } | provenance | | -| srv/service1.js:414:13:414:59 | query | srv/service1.js:415:20:415:24 | query | provenance | | -| srv/service1.js:414:58:414:59 | id | srv/service1.js:414:13:414:59 | query | provenance | | -| srv/service1.js:419:13:419:18 | { id } | srv/service1.js:419:13:419:29 | id | provenance | | -| srv/service1.js:419:13:419:29 | id | srv/service1.js:421:58:421:59 | id | provenance | | +| srv/service1.js:414:13:414:17 | query | srv/service1.js:415:20:415:24 | query | provenance | | +| srv/service1.js:414:58:414:59 | id | srv/service1.js:414:13:414:17 | query | provenance | | +| srv/service1.js:419:13:419:18 | { id } | srv/service1.js:419:15:419:16 | id | provenance | | +| srv/service1.js:419:15:419:16 | id | srv/service1.js:421:58:421:59 | id | provenance | | | srv/service1.js:419:22:419:29 | req.data | srv/service1.js:419:13:419:18 | { id } | provenance | | -| srv/service1.js:421:13:421:59 | query | srv/service1.js:422:20:422:24 | query | provenance | | -| srv/service1.js:421:58:421:59 | id | srv/service1.js:421:13:421:59 | query | provenance | | -| srv/service1.js:426:13:426:18 | { id } | srv/service1.js:426:13:426:29 | id | provenance | | -| srv/service1.js:426:13:426:29 | id | srv/service1.js:428:57:428:58 | id | provenance | | +| srv/service1.js:421:13:421:17 | query | srv/service1.js:422:20:422:24 | query | provenance | | +| srv/service1.js:421:58:421:59 | id | srv/service1.js:421:13:421:17 | query | provenance | | +| srv/service1.js:426:13:426:18 | { id } | srv/service1.js:426:15:426:16 | id | provenance | | +| srv/service1.js:426:15:426:16 | id | srv/service1.js:428:57:428:58 | id | provenance | | | srv/service1.js:426:22:426:29 | req.data | srv/service1.js:426:13:426:18 | { id } | provenance | | -| srv/service1.js:428:13:428:60 | query | srv/service1.js:429:20:429:24 | query | provenance | | -| srv/service1.js:428:57:428:58 | id | srv/service1.js:428:13:428:60 | query | provenance | | -| srv/service1.js:434:13:434:18 | { id } | srv/service1.js:434:13:434:29 | id | provenance | | -| srv/service1.js:434:13:434:29 | id | srv/service1.js:436:63:436:64 | id | provenance | | +| srv/service1.js:428:13:428:17 | query | srv/service1.js:429:20:429:24 | query | provenance | | +| srv/service1.js:428:57:428:58 | id | srv/service1.js:428:13:428:17 | query | provenance | | +| srv/service1.js:434:13:434:18 | { id } | srv/service1.js:434:15:434:16 | id | provenance | | +| srv/service1.js:434:15:434:16 | id | srv/service1.js:436:63:436:64 | id | provenance | | | srv/service1.js:434:22:434:29 | req.data | srv/service1.js:434:13:434:18 | { id } | provenance | | -| srv/service1.js:436:13:436:65 | query | srv/service1.js:438:16:438:20 | query | provenance | | -| srv/service1.js:436:21:436:65 | SELECT. ... " + id) | srv/service1.js:436:13:436:65 | query | provenance | | +| srv/service1.js:436:13:436:17 | query | srv/service1.js:438:16:438:20 | query | provenance | | +| srv/service1.js:436:21:436:65 | SELECT. ... " + id) | srv/service1.js:436:13:436:17 | query | provenance | | | srv/service1.js:436:55:436:64 | "ID=" + id | srv/service1.js:436:21:436:65 | SELECT. ... " + id) | provenance | Config | | srv/service1.js:436:63:436:64 | id | srv/service1.js:436:55:436:64 | "ID=" + id | provenance | | -| srv/service1.js:443:13:443:18 | { id } | srv/service1.js:443:13:443:29 | id | provenance | | -| srv/service1.js:443:13:443:29 | id | srv/service1.js:446:50:446:51 | id | provenance | | +| srv/service1.js:443:13:443:18 | { id } | srv/service1.js:443:15:443:16 | id | provenance | | +| srv/service1.js:443:15:443:16 | id | srv/service1.js:446:50:446:51 | id | provenance | | | srv/service1.js:443:22:443:29 | req.data | srv/service1.js:443:13:443:18 | { id } | provenance | | | srv/service1.js:446:50:446:51 | id | srv/service1.js:446:41:446:51 | "ID =" + id | provenance | | -| srv/service1.js:459:13:459:26 | { id, amount } | srv/service1.js:459:13:459:37 | amount | provenance | | -| srv/service1.js:459:13:459:26 | { id, amount } | srv/service1.js:459:13:459:37 | id | provenance | | -| srv/service1.js:459:13:459:37 | amount | srv/service1.js:462:57:462:62 | amount | provenance | | -| srv/service1.js:459:13:459:37 | id | srv/service1.js:462:83:462:84 | id | provenance | | +| srv/service1.js:459:13:459:26 | { id, amount } | srv/service1.js:459:15:459:16 | id | provenance | | +| srv/service1.js:459:13:459:26 | { id, amount } | srv/service1.js:459:19:459:24 | amount | provenance | | +| srv/service1.js:459:15:459:16 | id | srv/service1.js:462:83:462:84 | id | provenance | | +| srv/service1.js:459:19:459:24 | amount | srv/service1.js:462:57:462:62 | amount | provenance | | | srv/service1.js:459:30:459:37 | req.data | srv/service1.js:459:13:459:26 | { id, amount } | provenance | | | srv/service1.js:462:57:462:62 | amount | srv/service1.js:462:41:462:62 | "col1 = ... amount | provenance | | | srv/service1.js:462:83:462:84 | id | srv/service1.js:462:71:462:84 | "col1 = " + id | provenance | | -| srv/service1.js:483:13:483:18 | { id } | srv/service1.js:483:13:483:29 | id | provenance | | -| srv/service1.js:483:13:483:29 | id | srv/service1.js:486:52:486:53 | id | provenance | | +| srv/service1.js:483:13:483:18 | { id } | srv/service1.js:483:15:483:16 | id | provenance | | +| srv/service1.js:483:15:483:16 | id | srv/service1.js:486:52:486:53 | id | provenance | | | srv/service1.js:483:22:483:29 | req.data | srv/service1.js:483:13:483:18 | { id } | provenance | | | srv/service1.js:486:52:486:53 | id | srv/service1.js:486:43:486:53 | "ID =" + id | provenance | | -| srv/service1.js:492:13:492:18 | { id } | srv/service1.js:492:13:492:29 | id | provenance | | -| srv/service1.js:492:13:492:29 | id | srv/service1.js:493:63:493:64 | id | provenance | | +| srv/service1.js:492:13:492:18 | { id } | srv/service1.js:492:15:492:16 | id | provenance | | +| srv/service1.js:492:15:492:16 | id | srv/service1.js:493:63:493:64 | id | provenance | | | srv/service1.js:492:22:492:29 | req.data | srv/service1.js:492:13:492:18 | { id } | provenance | | -| srv/service1.js:493:13:493:65 | query | srv/service1.js:495:16:495:20 | query | provenance | | -| srv/service1.js:493:21:493:65 | SELECT. ... " + id) | srv/service1.js:493:13:493:65 | query | provenance | | +| srv/service1.js:493:13:493:17 | query | srv/service1.js:495:16:495:20 | query | provenance | | +| srv/service1.js:493:21:493:65 | SELECT. ... " + id) | srv/service1.js:493:13:493:17 | query | provenance | | | srv/service1.js:493:55:493:64 | "ID=" + id | srv/service1.js:493:21:493:65 | SELECT. ... " + id) | provenance | Config | | srv/service1.js:493:63:493:64 | id | srv/service1.js:493:55:493:64 | "ID=" + id | provenance | | -| srv/service1.js:500:13:500:18 | { id } | srv/service1.js:500:13:500:29 | id | provenance | | -| srv/service1.js:500:13:500:29 | id | srv/service1.js:502:50:502:51 | id | provenance | | +| srv/service1.js:500:13:500:18 | { id } | srv/service1.js:500:15:500:16 | id | provenance | | +| srv/service1.js:500:15:500:16 | id | srv/service1.js:502:50:502:51 | id | provenance | | | srv/service1.js:500:22:500:29 | req.data | srv/service1.js:500:13:500:18 | { id } | provenance | | | srv/service1.js:502:50:502:51 | id | srv/service1.js:502:41:502:51 | "ID =" + id | provenance | | -| srv/service1.js:514:13:514:26 | { id, amount } | srv/service1.js:514:13:514:37 | amount | provenance | | -| srv/service1.js:514:13:514:26 | { id, amount } | srv/service1.js:514:13:514:37 | id | provenance | | -| srv/service1.js:514:13:514:37 | amount | srv/service1.js:516:57:516:62 | amount | provenance | | -| srv/service1.js:514:13:514:37 | id | srv/service1.js:516:83:516:84 | id | provenance | | +| srv/service1.js:514:13:514:26 | { id, amount } | srv/service1.js:514:15:514:16 | id | provenance | | +| srv/service1.js:514:13:514:26 | { id, amount } | srv/service1.js:514:19:514:24 | amount | provenance | | +| srv/service1.js:514:15:514:16 | id | srv/service1.js:516:83:516:84 | id | provenance | | +| srv/service1.js:514:19:514:24 | amount | srv/service1.js:516:57:516:62 | amount | provenance | | | srv/service1.js:514:30:514:37 | req.data | srv/service1.js:514:13:514:26 | { id, amount } | provenance | | | srv/service1.js:516:57:516:62 | amount | srv/service1.js:516:41:516:62 | "col1 = ... amount | provenance | | | srv/service1.js:516:83:516:84 | id | srv/service1.js:516:71:516:84 | "col1 = " + id | provenance | | -| srv/service1.js:535:13:535:18 | { id } | srv/service1.js:535:13:535:29 | id | provenance | | -| srv/service1.js:535:13:535:29 | id | srv/service1.js:537:52:537:53 | id | provenance | | +| srv/service1.js:535:13:535:18 | { id } | srv/service1.js:535:15:535:16 | id | provenance | | +| srv/service1.js:535:15:535:16 | id | srv/service1.js:537:52:537:53 | id | provenance | | | srv/service1.js:535:22:535:29 | req.data | srv/service1.js:535:13:535:18 | { id } | provenance | | | srv/service1.js:537:52:537:53 | id | srv/service1.js:537:43:537:53 | "ID =" + id | provenance | | -| srv/service1.js:543:13:543:18 | { id } | srv/service1.js:543:13:543:29 | id | provenance | | -| srv/service1.js:543:13:543:29 | id | srv/service1.js:544:56:544:57 | id | provenance | | +| srv/service1.js:543:13:543:18 | { id } | srv/service1.js:543:15:543:16 | id | provenance | | +| srv/service1.js:543:15:543:16 | id | srv/service1.js:544:56:544:57 | id | provenance | | | srv/service1.js:543:22:543:29 | req.data | srv/service1.js:543:13:543:18 | { id } | provenance | | -| srv/service1.js:544:13:544:58 | query | srv/service1.js:546:16:546:20 | query | provenance | | -| srv/service1.js:544:21:544:58 | SELECT. ... " + id) | srv/service1.js:544:13:544:58 | query | provenance | | +| srv/service1.js:544:13:544:17 | query | srv/service1.js:546:16:546:20 | query | provenance | | +| srv/service1.js:544:21:544:58 | SELECT. ... " + id) | srv/service1.js:544:13:544:17 | query | provenance | | | srv/service1.js:544:48:544:57 | "ID=" + id | srv/service1.js:544:21:544:58 | SELECT. ... " + id) | provenance | Config | | srv/service1.js:544:56:544:57 | id | srv/service1.js:544:48:544:57 | "ID=" + id | provenance | | -| srv/service1.js:551:13:551:18 | { id } | srv/service1.js:551:13:551:29 | id | provenance | | -| srv/service1.js:551:13:551:29 | id | srv/service1.js:553:43:553:44 | id | provenance | | +| srv/service1.js:551:13:551:18 | { id } | srv/service1.js:551:15:551:16 | id | provenance | | +| srv/service1.js:551:15:551:16 | id | srv/service1.js:553:43:553:44 | id | provenance | | | srv/service1.js:551:22:551:29 | req.data | srv/service1.js:551:13:551:18 | { id } | provenance | | | srv/service1.js:553:43:553:44 | id | srv/service1.js:553:34:553:44 | "ID =" + id | provenance | | -| srv/service1.js:565:13:565:26 | { id, amount } | srv/service1.js:565:13:565:37 | amount | provenance | | -| srv/service1.js:565:13:565:26 | { id, amount } | srv/service1.js:565:13:565:37 | id | provenance | | -| srv/service1.js:565:13:565:37 | amount | srv/service1.js:567:50:567:55 | amount | provenance | | -| srv/service1.js:565:13:565:37 | id | srv/service1.js:567:76:567:77 | id | provenance | | +| srv/service1.js:565:13:565:26 | { id, amount } | srv/service1.js:565:15:565:16 | id | provenance | | +| srv/service1.js:565:13:565:26 | { id, amount } | srv/service1.js:565:19:565:24 | amount | provenance | | +| srv/service1.js:565:15:565:16 | id | srv/service1.js:567:76:567:77 | id | provenance | | +| srv/service1.js:565:19:565:24 | amount | srv/service1.js:567:50:567:55 | amount | provenance | | | srv/service1.js:565:30:565:37 | req.data | srv/service1.js:565:13:565:26 | { id, amount } | provenance | | | srv/service1.js:567:50:567:55 | amount | srv/service1.js:567:34:567:55 | "col1 = ... amount | provenance | | | srv/service1.js:567:76:567:77 | id | srv/service1.js:567:64:567:77 | "col1 = " + id | provenance | | -| srv/service1.js:586:13:586:18 | { id } | srv/service1.js:586:13:586:29 | id | provenance | | -| srv/service1.js:586:13:586:29 | id | srv/service1.js:588:45:588:46 | id | provenance | | +| srv/service1.js:586:13:586:18 | { id } | srv/service1.js:586:15:586:16 | id | provenance | | +| srv/service1.js:586:15:586:16 | id | srv/service1.js:588:45:588:46 | id | provenance | | | srv/service1.js:586:22:586:29 | req.data | srv/service1.js:586:13:586:18 | { id } | provenance | | | srv/service1.js:588:45:588:46 | id | srv/service1.js:588:36:588:46 | "ID =" + id | provenance | | -| srv/service1.js:594:13:594:18 | { id } | srv/service1.js:594:13:594:29 | id | provenance | | -| srv/service1.js:594:13:594:29 | id | srv/service1.js:595:56:595:57 | id | provenance | | +| srv/service1.js:594:13:594:18 | { id } | srv/service1.js:594:15:594:16 | id | provenance | | +| srv/service1.js:594:15:594:16 | id | srv/service1.js:595:56:595:57 | id | provenance | | | srv/service1.js:594:22:594:29 | req.data | srv/service1.js:594:13:594:18 | { id } | provenance | | -| srv/service1.js:595:13:595:58 | query | srv/service1.js:597:16:597:20 | query | provenance | | -| srv/service1.js:595:21:595:58 | SELECT. ... " + id) | srv/service1.js:595:13:595:58 | query | provenance | | +| srv/service1.js:595:13:595:17 | query | srv/service1.js:597:16:597:20 | query | provenance | | +| srv/service1.js:595:21:595:58 | SELECT. ... " + id) | srv/service1.js:595:13:595:17 | query | provenance | | | srv/service1.js:595:48:595:57 | "ID=" + id | srv/service1.js:595:21:595:58 | SELECT. ... " + id) | provenance | Config | | srv/service1.js:595:56:595:57 | id | srv/service1.js:595:48:595:57 | "ID=" + id | provenance | | -| srv/service1.js:602:13:602:18 | { id } | srv/service1.js:602:13:602:29 | id | provenance | | -| srv/service1.js:602:13:602:29 | id | srv/service1.js:604:43:604:44 | id | provenance | | +| srv/service1.js:602:13:602:18 | { id } | srv/service1.js:602:15:602:16 | id | provenance | | +| srv/service1.js:602:15:602:16 | id | srv/service1.js:604:43:604:44 | id | provenance | | | srv/service1.js:602:22:602:29 | req.data | srv/service1.js:602:13:602:18 | { id } | provenance | | | srv/service1.js:604:43:604:44 | id | srv/service1.js:604:34:604:44 | "ID =" + id | provenance | | -| srv/service1.js:616:13:616:26 | { id, amount } | srv/service1.js:616:13:616:37 | amount | provenance | | -| srv/service1.js:616:13:616:26 | { id, amount } | srv/service1.js:616:13:616:37 | id | provenance | | -| srv/service1.js:616:13:616:37 | amount | srv/service1.js:618:50:618:55 | amount | provenance | | -| srv/service1.js:616:13:616:37 | id | srv/service1.js:618:76:618:77 | id | provenance | | +| srv/service1.js:616:13:616:26 | { id, amount } | srv/service1.js:616:15:616:16 | id | provenance | | +| srv/service1.js:616:13:616:26 | { id, amount } | srv/service1.js:616:19:616:24 | amount | provenance | | +| srv/service1.js:616:15:616:16 | id | srv/service1.js:618:76:618:77 | id | provenance | | +| srv/service1.js:616:19:616:24 | amount | srv/service1.js:618:50:618:55 | amount | provenance | | | srv/service1.js:616:30:616:37 | req.data | srv/service1.js:616:13:616:26 | { id, amount } | provenance | | | srv/service1.js:618:50:618:55 | amount | srv/service1.js:618:34:618:55 | "col1 = ... amount | provenance | | | srv/service1.js:618:76:618:77 | id | srv/service1.js:618:64:618:77 | "col1 = " + id | provenance | | -| srv/service1.js:637:13:637:18 | { id } | srv/service1.js:637:13:637:29 | id | provenance | | -| srv/service1.js:637:13:637:29 | id | srv/service1.js:639:45:639:46 | id | provenance | | +| srv/service1.js:637:13:637:18 | { id } | srv/service1.js:637:15:637:16 | id | provenance | | +| srv/service1.js:637:15:637:16 | id | srv/service1.js:639:45:639:46 | id | provenance | | | srv/service1.js:637:22:637:29 | req.data | srv/service1.js:637:13:637:18 | { id } | provenance | | | srv/service1.js:639:45:639:46 | id | srv/service1.js:639:36:639:46 | "ID =" + id | provenance | | -| srv/service1.js:645:13:645:18 | { id } | srv/service1.js:645:13:645:29 | id | provenance | | -| srv/service1.js:645:13:645:29 | id | srv/service1.js:646:56:646:57 | id | provenance | | +| srv/service1.js:645:13:645:18 | { id } | srv/service1.js:645:15:645:16 | id | provenance | | +| srv/service1.js:645:15:645:16 | id | srv/service1.js:646:56:646:57 | id | provenance | | | srv/service1.js:645:22:645:29 | req.data | srv/service1.js:645:13:645:18 | { id } | provenance | | -| srv/service1.js:646:13:646:58 | query | srv/service1.js:647:18:647:22 | query | provenance | | -| srv/service1.js:646:21:646:58 | SELECT. ... " + id) | srv/service1.js:646:13:646:58 | query | provenance | | +| srv/service1.js:646:13:646:17 | query | srv/service1.js:647:18:647:22 | query | provenance | | +| srv/service1.js:646:21:646:58 | SELECT. ... " + id) | srv/service1.js:646:13:646:17 | query | provenance | | | srv/service1.js:646:48:646:57 | "ID=" + id | srv/service1.js:646:21:646:58 | SELECT. ... " + id) | provenance | Config | | srv/service1.js:646:56:646:57 | id | srv/service1.js:646:48:646:57 | "ID=" + id | provenance | | -| srv/service1.js:651:13:651:18 | { id } | srv/service1.js:651:13:651:29 | id | provenance | | -| srv/service1.js:651:13:651:29 | id | srv/service1.js:652:56:652:57 | id | provenance | | +| srv/service1.js:651:13:651:18 | { id } | srv/service1.js:651:15:651:16 | id | provenance | | +| srv/service1.js:651:15:651:16 | id | srv/service1.js:652:56:652:57 | id | provenance | | | srv/service1.js:651:22:651:29 | req.data | srv/service1.js:651:13:651:18 | { id } | provenance | | -| srv/service1.js:652:13:652:58 | query | srv/service1.js:653:18:653:22 | query | provenance | | -| srv/service1.js:652:21:652:58 | SELECT. ... ` + id) | srv/service1.js:652:13:652:58 | query | provenance | | +| srv/service1.js:652:13:652:17 | query | srv/service1.js:653:18:653:22 | query | provenance | | +| srv/service1.js:652:21:652:58 | SELECT. ... ` + id) | srv/service1.js:652:13:652:17 | query | provenance | | | srv/service1.js:652:48:652:57 | `ID=` + id | srv/service1.js:652:21:652:58 | SELECT. ... ` + id) | provenance | Config | | srv/service1.js:652:56:652:57 | id | srv/service1.js:652:48:652:57 | `ID=` + id | provenance | | -| srv/service1.js:657:13:657:18 | { id } | srv/service1.js:657:13:657:29 | id | provenance | | -| srv/service1.js:657:13:657:29 | id | srv/service1.js:658:54:658:55 | id | provenance | | +| srv/service1.js:657:13:657:18 | { id } | srv/service1.js:657:15:657:16 | id | provenance | | +| srv/service1.js:657:15:657:16 | id | srv/service1.js:658:54:658:55 | id | provenance | | | srv/service1.js:657:22:657:29 | req.data | srv/service1.js:657:13:657:18 | { id } | provenance | | -| srv/service1.js:658:13:658:58 | query | srv/service1.js:659:18:659:22 | query | provenance | | -| srv/service1.js:658:21:658:58 | SELECT. ... ${id}`) | srv/service1.js:658:13:658:58 | query | provenance | | +| srv/service1.js:658:13:658:17 | query | srv/service1.js:659:18:659:22 | query | provenance | | +| srv/service1.js:658:21:658:58 | SELECT. ... ${id}`) | srv/service1.js:658:13:658:17 | query | provenance | | | srv/service1.js:658:48:658:57 | `ID=${id}` | srv/service1.js:658:21:658:58 | SELECT. ... ${id}`) | provenance | Config | | srv/service1.js:658:54:658:55 | id | srv/service1.js:658:48:658:57 | `ID=${id}` | provenance | | -| srv/service1.js:669:13:669:18 | { id } | srv/service1.js:669:13:669:29 | id | provenance | | -| srv/service1.js:669:13:669:29 | id | srv/service1.js:670:45:670:46 | id | provenance | | +| srv/service1.js:669:13:669:18 | { id } | srv/service1.js:669:15:669:16 | id | provenance | | +| srv/service1.js:669:15:669:16 | id | srv/service1.js:670:45:670:46 | id | provenance | | | srv/service1.js:669:22:669:29 | req.data | srv/service1.js:669:13:669:18 | { id } | provenance | | | srv/service1.js:670:45:670:46 | id | srv/service1.js:670:36:670:46 | "ID =" + id | provenance | | -| srv/service1.js:674:13:674:18 | { id } | srv/service1.js:674:13:674:29 | id | provenance | | -| srv/service1.js:674:13:674:29 | id | srv/service1.js:675:45:675:46 | id | provenance | | +| srv/service1.js:674:13:674:18 | { id } | srv/service1.js:674:15:674:16 | id | provenance | | +| srv/service1.js:674:15:674:16 | id | srv/service1.js:675:45:675:46 | id | provenance | | | srv/service1.js:674:22:674:29 | req.data | srv/service1.js:674:13:674:18 | { id } | provenance | | | srv/service1.js:675:45:675:46 | id | srv/service1.js:675:36:675:46 | `ID =` + id | provenance | | -| srv/service1.js:679:13:679:18 | { id } | srv/service1.js:679:13:679:29 | id | provenance | | -| srv/service1.js:679:13:679:29 | id | srv/service1.js:680:42:680:43 | id | provenance | | +| srv/service1.js:679:13:679:18 | { id } | srv/service1.js:679:15:679:16 | id | provenance | | +| srv/service1.js:679:15:679:16 | id | srv/service1.js:680:42:680:43 | id | provenance | | | srv/service1.js:679:22:679:29 | req.data | srv/service1.js:679:13:679:18 | { id } | provenance | | | srv/service1.js:680:42:680:43 | id | srv/service1.js:680:36:680:45 | `ID=${id}` | provenance | | -| srv/service1.js:704:13:704:26 | { id, amount } | srv/service1.js:704:13:704:37 | amount | provenance | | -| srv/service1.js:704:13:704:26 | { id, amount } | srv/service1.js:704:13:704:37 | id | provenance | | -| srv/service1.js:704:13:704:37 | amount | srv/service1.js:705:52:705:57 | amount | provenance | | -| srv/service1.js:704:13:704:37 | id | srv/service1.js:705:78:705:79 | id | provenance | | +| srv/service1.js:704:13:704:26 | { id, amount } | srv/service1.js:704:15:704:16 | id | provenance | | +| srv/service1.js:704:13:704:26 | { id, amount } | srv/service1.js:704:19:704:24 | amount | provenance | | +| srv/service1.js:704:15:704:16 | id | srv/service1.js:705:78:705:79 | id | provenance | | +| srv/service1.js:704:19:704:24 | amount | srv/service1.js:705:52:705:57 | amount | provenance | | | srv/service1.js:704:30:704:37 | req.data | srv/service1.js:704:13:704:26 | { id, amount } | provenance | | | srv/service1.js:705:52:705:57 | amount | srv/service1.js:705:36:705:57 | "col1 = ... amount | provenance | | | srv/service1.js:705:78:705:79 | id | srv/service1.js:705:66:705:79 | "col1 = " + id | provenance | | -| srv/service1.js:709:13:709:26 | { id, amount } | srv/service1.js:709:13:709:37 | amount | provenance | | -| srv/service1.js:709:13:709:26 | { id, amount } | srv/service1.js:709:13:709:37 | id | provenance | | -| srv/service1.js:709:13:709:37 | amount | srv/service1.js:710:52:710:57 | amount | provenance | | -| srv/service1.js:709:13:709:37 | id | srv/service1.js:710:77:710:78 | id | provenance | | +| srv/service1.js:709:13:709:26 | { id, amount } | srv/service1.js:709:15:709:16 | id | provenance | | +| srv/service1.js:709:13:709:26 | { id, amount } | srv/service1.js:709:19:709:24 | amount | provenance | | +| srv/service1.js:709:15:709:16 | id | srv/service1.js:710:77:710:78 | id | provenance | | +| srv/service1.js:709:19:709:24 | amount | srv/service1.js:710:52:710:57 | amount | provenance | | | srv/service1.js:709:30:709:37 | req.data | srv/service1.js:709:13:709:26 | { id, amount } | provenance | | | srv/service1.js:710:52:710:57 | amount | srv/service1.js:710:36:710:57 | "col1 = ... amount | provenance | | | srv/service1.js:710:77:710:78 | id | srv/service1.js:710:66:710:78 | `col1 =` + id | provenance | | -| srv/service1.js:714:13:714:26 | { id, amount } | srv/service1.js:714:13:714:37 | amount | provenance | | -| srv/service1.js:714:13:714:26 | { id, amount } | srv/service1.js:714:13:714:37 | id | provenance | | -| srv/service1.js:714:13:714:37 | amount | srv/service1.js:715:52:715:57 | amount | provenance | | -| srv/service1.js:714:13:714:37 | id | srv/service1.js:715:76:715:77 | id | provenance | | +| srv/service1.js:714:13:714:26 | { id, amount } | srv/service1.js:714:15:714:16 | id | provenance | | +| srv/service1.js:714:13:714:26 | { id, amount } | srv/service1.js:714:19:714:24 | amount | provenance | | +| srv/service1.js:714:15:714:16 | id | srv/service1.js:715:76:715:77 | id | provenance | | +| srv/service1.js:714:19:714:24 | amount | srv/service1.js:715:52:715:57 | amount | provenance | | | srv/service1.js:714:30:714:37 | req.data | srv/service1.js:714:13:714:26 | { id, amount } | provenance | | | srv/service1.js:715:52:715:57 | amount | srv/service1.js:715:36:715:57 | "col1 = ... amount | provenance | | | srv/service1.js:715:76:715:77 | id | srv/service1.js:715:66:715:79 | `col1 = ${id}` | provenance | | -| srv/service1.js:719:13:719:26 | { id, amount } | srv/service1.js:719:13:719:37 | amount | provenance | | -| srv/service1.js:719:13:719:37 | amount | srv/service1.js:720:52:720:57 | amount | provenance | | +| srv/service1.js:719:13:719:26 | { id, amount } | srv/service1.js:719:19:719:24 | amount | provenance | | +| srv/service1.js:719:19:719:24 | amount | srv/service1.js:720:52:720:57 | amount | provenance | | | srv/service1.js:719:30:719:37 | req.data | srv/service1.js:719:13:719:26 | { id, amount } | provenance | | | srv/service1.js:720:52:720:57 | amount | srv/service1.js:720:36:720:57 | "col1 = ... amount | provenance | | -| srv/service1.js:754:13:754:18 | { id } | srv/service1.js:754:13:754:29 | id | provenance | | -| srv/service1.js:754:13:754:29 | id | srv/service1.js:755:47:755:48 | id | provenance | | +| srv/service1.js:754:13:754:18 | { id } | srv/service1.js:754:15:754:16 | id | provenance | | +| srv/service1.js:754:15:754:16 | id | srv/service1.js:755:47:755:48 | id | provenance | | | srv/service1.js:754:22:754:29 | req.data | srv/service1.js:754:13:754:18 | { id } | provenance | | | srv/service1.js:755:47:755:48 | id | srv/service1.js:755:38:755:48 | "ID =" + id | provenance | | -| srv/service1.js:759:13:759:18 | { id } | srv/service1.js:759:13:759:29 | id | provenance | | -| srv/service1.js:759:13:759:29 | id | srv/service1.js:760:47:760:48 | id | provenance | | +| srv/service1.js:759:13:759:18 | { id } | srv/service1.js:759:15:759:16 | id | provenance | | +| srv/service1.js:759:15:759:16 | id | srv/service1.js:760:47:760:48 | id | provenance | | | srv/service1.js:759:22:759:29 | req.data | srv/service1.js:759:13:759:18 | { id } | provenance | | | srv/service1.js:760:47:760:48 | id | srv/service1.js:760:38:760:48 | `ID =` + id | provenance | | -| srv/service1.js:764:13:764:18 | { id } | srv/service1.js:764:13:764:29 | id | provenance | | -| srv/service1.js:764:13:764:29 | id | srv/service1.js:765:46:765:47 | id | provenance | | +| srv/service1.js:764:13:764:18 | { id } | srv/service1.js:764:15:764:16 | id | provenance | | +| srv/service1.js:764:15:764:16 | id | srv/service1.js:765:46:765:47 | id | provenance | | | srv/service1.js:764:22:764:29 | req.data | srv/service1.js:764:13:764:18 | { id } | provenance | | | srv/service1.js:765:46:765:47 | id | srv/service1.js:765:38:765:49 | `ID = ${id}` | provenance | | nodes | srv/service1.js:13:13:13:18 | { id } | semmle.label | { id } | -| srv/service1.js:13:13:13:29 | id | semmle.label | id | +| srv/service1.js:13:15:13:16 | id | semmle.label | id | | srv/service1.js:13:22:13:29 | req.data | semmle.label | req.data | -| srv/service1.js:14:13:14:58 | query | semmle.label | query | +| srv/service1.js:14:13:14:17 | query | semmle.label | query | | srv/service1.js:14:21:14:58 | SELECT. ... " + id) | semmle.label | SELECT. ... " + id) | | srv/service1.js:14:48:14:57 | "ID=" + id | semmle.label | "ID=" + id | | srv/service1.js:14:56:14:57 | id | semmle.label | id | | srv/service1.js:15:15:15:19 | query | semmle.label | query | | srv/service1.js:19:13:19:18 | { id } | semmle.label | { id } | -| srv/service1.js:19:13:19:29 | id | semmle.label | id | +| srv/service1.js:19:15:19:16 | id | semmle.label | id | | srv/service1.js:19:22:19:29 | req.data | semmle.label | req.data | -| srv/service1.js:20:13:20:58 | query | semmle.label | query | +| srv/service1.js:20:13:20:17 | query | semmle.label | query | | srv/service1.js:20:21:20:58 | SELECT. ... ` + id) | semmle.label | SELECT. ... ` + id) | | srv/service1.js:20:48:20:57 | `ID=` + id | semmle.label | `ID=` + id | | srv/service1.js:20:56:20:57 | id | semmle.label | id | | srv/service1.js:21:15:21:19 | query | semmle.label | query | | srv/service1.js:25:13:25:18 | { id } | semmle.label | { id } | -| srv/service1.js:25:13:25:29 | id | semmle.label | id | +| srv/service1.js:25:15:25:16 | id | semmle.label | id | | srv/service1.js:25:22:25:29 | req.data | semmle.label | req.data | -| srv/service1.js:26:13:26:58 | query | semmle.label | query | +| srv/service1.js:26:13:26:17 | query | semmle.label | query | | srv/service1.js:26:21:26:58 | SELECT. ... ${id}`) | semmle.label | SELECT. ... ${id}`) | | srv/service1.js:26:48:26:57 | `ID=${id}` | semmle.label | `ID=${id}` | | srv/service1.js:26:54:26:55 | id | semmle.label | id | | srv/service1.js:27:15:27:19 | query | semmle.label | query | | srv/service1.js:37:13:37:18 | { id } | semmle.label | { id } | -| srv/service1.js:37:13:37:29 | id | semmle.label | id | +| srv/service1.js:37:15:37:16 | id | semmle.label | id | | srv/service1.js:37:22:37:29 | req.data | semmle.label | req.data | | srv/service1.js:38:33:38:43 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:38:42:38:43 | id | semmle.label | id | | srv/service1.js:42:13:42:18 | { id } | semmle.label | { id } | -| srv/service1.js:42:13:42:29 | id | semmle.label | id | +| srv/service1.js:42:15:42:16 | id | semmle.label | id | | srv/service1.js:42:22:42:29 | req.data | semmle.label | req.data | | srv/service1.js:43:33:43:43 | `ID =` + id | semmle.label | `ID =` + id | | srv/service1.js:43:42:43:43 | id | semmle.label | id | | srv/service1.js:47:13:47:18 | { id } | semmle.label | { id } | -| srv/service1.js:47:13:47:29 | id | semmle.label | id | +| srv/service1.js:47:15:47:16 | id | semmle.label | id | | srv/service1.js:47:22:47:29 | req.data | semmle.label | req.data | | srv/service1.js:48:33:48:42 | `ID=${id}` | semmle.label | `ID=${id}` | | srv/service1.js:48:39:48:40 | id | semmle.label | id | | srv/service1.js:72:13:72:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:72:13:72:37 | amount | semmle.label | amount | -| srv/service1.js:72:13:72:37 | id | semmle.label | id | +| srv/service1.js:72:15:72:16 | id | semmle.label | id | +| srv/service1.js:72:19:72:24 | amount | semmle.label | amount | | srv/service1.js:72:30:72:37 | req.data | semmle.label | req.data | | srv/service1.js:73:33:73:54 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:73:49:73:54 | amount | semmle.label | amount | | srv/service1.js:73:63:73:76 | "col1 = " + id | semmle.label | "col1 = " + id | | srv/service1.js:73:75:73:76 | id | semmle.label | id | | srv/service1.js:77:13:77:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:77:13:77:37 | amount | semmle.label | amount | -| srv/service1.js:77:13:77:37 | id | semmle.label | id | +| srv/service1.js:77:15:77:16 | id | semmle.label | id | +| srv/service1.js:77:19:77:24 | amount | semmle.label | amount | | srv/service1.js:77:30:77:37 | req.data | semmle.label | req.data | | srv/service1.js:78:33:78:54 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:78:49:78:54 | amount | semmle.label | amount | | srv/service1.js:78:63:78:76 | `col1 = ` + id | semmle.label | `col1 = ` + id | | srv/service1.js:78:75:78:76 | id | semmle.label | id | | srv/service1.js:82:13:82:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:82:13:82:37 | amount | semmle.label | amount | -| srv/service1.js:82:13:82:37 | id | semmle.label | id | +| srv/service1.js:82:15:82:16 | id | semmle.label | id | +| srv/service1.js:82:19:82:24 | amount | semmle.label | amount | | srv/service1.js:82:30:82:37 | req.data | semmle.label | req.data | | srv/service1.js:83:33:83:54 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:83:49:83:54 | amount | semmle.label | amount | | srv/service1.js:83:63:83:76 | `col1 = ${id}` | semmle.label | `col1 = ${id}` | | srv/service1.js:83:73:83:74 | id | semmle.label | id | | srv/service1.js:87:13:87:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:87:13:87:37 | amount | semmle.label | amount | +| srv/service1.js:87:19:87:24 | amount | semmle.label | amount | | srv/service1.js:87:30:87:37 | req.data | semmle.label | req.data | | srv/service1.js:88:33:88:54 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:88:49:88:54 | amount | semmle.label | amount | | srv/service1.js:122:13:122:18 | { id } | semmle.label | { id } | -| srv/service1.js:122:13:122:29 | id | semmle.label | id | +| srv/service1.js:122:15:122:16 | id | semmle.label | id | | srv/service1.js:122:22:122:29 | req.data | semmle.label | req.data | | srv/service1.js:123:35:123:45 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:123:44:123:45 | id | semmle.label | id | | srv/service1.js:127:13:127:18 | { id } | semmle.label | { id } | -| srv/service1.js:127:13:127:29 | id | semmle.label | id | +| srv/service1.js:127:15:127:16 | id | semmle.label | id | | srv/service1.js:127:22:127:29 | req.data | semmle.label | req.data | | srv/service1.js:128:35:128:45 | `ID =` + id | semmle.label | `ID =` + id | | srv/service1.js:128:44:128:45 | id | semmle.label | id | | srv/service1.js:132:13:132:18 | { id } | semmle.label | { id } | -| srv/service1.js:132:13:132:29 | id | semmle.label | id | +| srv/service1.js:132:15:132:16 | id | semmle.label | id | | srv/service1.js:132:22:132:29 | req.data | semmle.label | req.data | | srv/service1.js:133:35:133:46 | `ID = ${id}` | semmle.label | `ID = ${id}` | | srv/service1.js:133:43:133:44 | id | semmle.label | id | | srv/service1.js:143:13:143:18 | { id } | semmle.label | { id } | -| srv/service1.js:143:13:143:29 | id | semmle.label | id | +| srv/service1.js:143:15:143:16 | id | semmle.label | id | | srv/service1.js:143:22:143:29 | req.data | semmle.label | req.data | | srv/service1.js:145:7:145:57 | await S ... " + id) | semmle.label | await S ... " + id) | | srv/service1.js:145:13:145:57 | SELECT. ... " + id) | semmle.label | SELECT. ... " + id) | | srv/service1.js:145:47:145:56 | "ID=" + id | semmle.label | "ID=" + id | | srv/service1.js:145:55:145:56 | id | semmle.label | id | | srv/service1.js:149:13:149:18 | { id } | semmle.label | { id } | -| srv/service1.js:149:13:149:29 | id | semmle.label | id | +| srv/service1.js:149:15:149:16 | id | semmle.label | id | | srv/service1.js:149:22:149:29 | req.data | semmle.label | req.data | | srv/service1.js:151:7:151:57 | await S ... ` + id) | semmle.label | await S ... ` + id) | | srv/service1.js:151:13:151:57 | SELECT. ... ` + id) | semmle.label | SELECT. ... ` + id) | | srv/service1.js:151:47:151:56 | `ID=` + id | semmle.label | `ID=` + id | | srv/service1.js:151:55:151:56 | id | semmle.label | id | | srv/service1.js:155:13:155:18 | { id } | semmle.label | { id } | -| srv/service1.js:155:13:155:29 | id | semmle.label | id | +| srv/service1.js:155:15:155:16 | id | semmle.label | id | | srv/service1.js:155:22:155:29 | req.data | semmle.label | req.data | | srv/service1.js:157:7:157:57 | await S ... ${id}`) | semmle.label | await S ... ${id}`) | | srv/service1.js:157:13:157:57 | SELECT. ... ${id}`) | semmle.label | SELECT. ... ${id}`) | | srv/service1.js:157:47:157:56 | `ID=${id}` | semmle.label | `ID=${id}` | | srv/service1.js:157:53:157:54 | id | semmle.label | id | | srv/service1.js:185:13:185:18 | { id } | semmle.label | { id } | -| srv/service1.js:185:13:185:29 | id | semmle.label | id | +| srv/service1.js:185:15:185:16 | id | semmle.label | id | | srv/service1.js:185:22:185:29 | req.data | semmle.label | req.data | | srv/service1.js:187:7:187:87 | await U ... " + id) | semmle.label | await U ... " + id) | | srv/service1.js:187:13:187:87 | UPDATE. ... " + id) | semmle.label | UPDATE. ... " + id) | @@ -533,7 +533,7 @@ nodes | srv/service1.js:187:76:187:86 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:187:85:187:86 | id | semmle.label | id | | srv/service1.js:191:13:191:18 | { id } | semmle.label | { id } | -| srv/service1.js:191:13:191:29 | id | semmle.label | id | +| srv/service1.js:191:15:191:16 | id | semmle.label | id | | srv/service1.js:191:22:191:29 | req.data | semmle.label | req.data | | srv/service1.js:193:7:193:87 | await U ... ` + id) | semmle.label | await U ... ` + id) | | srv/service1.js:193:13:193:87 | UPDATE. ... ` + id) | semmle.label | UPDATE. ... ` + id) | @@ -542,7 +542,7 @@ nodes | srv/service1.js:193:76:193:86 | `ID =` + id | semmle.label | `ID =` + id | | srv/service1.js:193:85:193:86 | id | semmle.label | id | | srv/service1.js:197:13:197:18 | { id } | semmle.label | { id } | -| srv/service1.js:197:13:197:29 | id | semmle.label | id | +| srv/service1.js:197:15:197:16 | id | semmle.label | id | | srv/service1.js:197:22:197:29 | req.data | semmle.label | req.data | | srv/service1.js:199:7:199:88 | await U ... ${id}`) | semmle.label | await U ... ${id}`) | | srv/service1.js:199:13:199:88 | UPDATE. ... ${id}`) | semmle.label | UPDATE. ... ${id}`) | @@ -551,359 +551,359 @@ nodes | srv/service1.js:199:76:199:87 | `ID = ${id}` | semmle.label | `ID = ${id}` | | srv/service1.js:199:84:199:85 | id | semmle.label | id | | srv/service1.js:203:13:203:18 | { id } | semmle.label | { id } | -| srv/service1.js:203:13:203:29 | id | semmle.label | id | +| srv/service1.js:203:15:203:16 | id | semmle.label | id | | srv/service1.js:203:22:203:29 | req.data | semmle.label | req.data | | srv/service1.js:205:7:205:86 | await U ... ${id}` | semmle.label | await U ... ${id}` | | srv/service1.js:205:13:205:86 | UPDATE. ... ${id}` | semmle.label | UPDATE. ... ${id}` | | srv/service1.js:205:47:205:67 | "col1 = ... " + id | semmle.label | "col1 = ... " + id | | srv/service1.js:205:66:205:67 | id | semmle.label | id | | srv/service1.js:227:13:227:18 | { id } | semmle.label | { id } | -| srv/service1.js:227:13:227:29 | id | semmle.label | id | +| srv/service1.js:227:15:227:16 | id | semmle.label | id | | srv/service1.js:227:22:227:29 | req.data | semmle.label | req.data | | srv/service1.js:229:7:229:58 | await D ... " + id) | semmle.label | await D ... " + id) | | srv/service1.js:229:13:229:58 | DELETE. ... " + id) | semmle.label | DELETE. ... " + id) | | srv/service1.js:229:47:229:57 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:229:56:229:57 | id | semmle.label | id | | srv/service1.js:233:13:233:18 | { id } | semmle.label | { id } | -| srv/service1.js:233:13:233:29 | id | semmle.label | id | +| srv/service1.js:233:15:233:16 | id | semmle.label | id | | srv/service1.js:233:22:233:29 | req.data | semmle.label | req.data | | srv/service1.js:235:7:235:58 | await D ... ` + id) | semmle.label | await D ... ` + id) | | srv/service1.js:235:13:235:58 | DELETE. ... ` + id) | semmle.label | DELETE. ... ` + id) | | srv/service1.js:235:47:235:57 | `ID =` + id | semmle.label | `ID =` + id | | srv/service1.js:235:56:235:57 | id | semmle.label | id | | srv/service1.js:239:13:239:18 | { id } | semmle.label | { id } | -| srv/service1.js:239:13:239:29 | id | semmle.label | id | +| srv/service1.js:239:15:239:16 | id | semmle.label | id | | srv/service1.js:239:22:239:29 | req.data | semmle.label | req.data | | srv/service1.js:241:7:241:59 | await D ... ${id}`) | semmle.label | await D ... ${id}`) | | srv/service1.js:241:13:241:59 | DELETE. ... ${id}`) | semmle.label | DELETE. ... ${id}`) | | srv/service1.js:241:47:241:58 | `ID = ${id}` | semmle.label | `ID = ${id}` | | srv/service1.js:241:55:241:56 | id | semmle.label | id | | srv/service1.js:252:13:252:18 | { id } | semmle.label | { id } | -| srv/service1.js:252:13:252:29 | id | semmle.label | id | +| srv/service1.js:252:15:252:16 | id | semmle.label | id | | srv/service1.js:252:22:252:29 | req.data | semmle.label | req.data | -| srv/service1.js:253:13:253:65 | query | semmle.label | query | +| srv/service1.js:253:13:253:17 | query | semmle.label | query | | srv/service1.js:253:21:253:65 | SELECT. ... " + id) | semmle.label | SELECT. ... " + id) | | srv/service1.js:253:55:253:64 | "ID=" + id | semmle.label | "ID=" + id | | srv/service1.js:253:63:253:64 | id | semmle.label | id | | srv/service1.js:254:16:254:20 | query | semmle.label | query | | srv/service1.js:258:13:258:18 | { id } | semmle.label | { id } | -| srv/service1.js:258:13:258:29 | id | semmle.label | id | +| srv/service1.js:258:15:258:16 | id | semmle.label | id | | srv/service1.js:258:22:258:29 | req.data | semmle.label | req.data | | srv/service1.js:259:41:259:51 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:259:50:259:51 | id | semmle.label | id | | srv/service1.js:268:13:268:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:268:13:268:37 | amount | semmle.label | amount | -| srv/service1.js:268:13:268:37 | id | semmle.label | id | +| srv/service1.js:268:15:268:16 | id | semmle.label | id | +| srv/service1.js:268:19:268:24 | amount | semmle.label | amount | | srv/service1.js:268:30:268:37 | req.data | semmle.label | req.data | | srv/service1.js:269:41:269:62 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:269:57:269:62 | amount | semmle.label | amount | | srv/service1.js:269:71:269:84 | "col1 = " + id | semmle.label | "col1 = " + id | | srv/service1.js:269:83:269:84 | id | semmle.label | id | | srv/service1.js:283:13:283:18 | { id } | semmle.label | { id } | -| srv/service1.js:283:13:283:29 | id | semmle.label | id | +| srv/service1.js:283:15:283:16 | id | semmle.label | id | | srv/service1.js:283:22:283:29 | req.data | semmle.label | req.data | | srv/service1.js:284:43:284:53 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:284:52:284:53 | id | semmle.label | id | | srv/service1.js:289:13:289:18 | { id } | semmle.label | { id } | -| srv/service1.js:289:13:289:29 | id | semmle.label | id | +| srv/service1.js:289:15:289:16 | id | semmle.label | id | | srv/service1.js:289:22:289:29 | req.data | semmle.label | req.data | -| srv/service1.js:291:13:291:65 | query | semmle.label | query | +| srv/service1.js:291:13:291:17 | query | semmle.label | query | | srv/service1.js:291:21:291:65 | SELECT. ... " + id) | semmle.label | SELECT. ... " + id) | | srv/service1.js:291:55:291:64 | "ID=" + id | semmle.label | "ID=" + id | | srv/service1.js:291:63:291:64 | id | semmle.label | id | | srv/service1.js:292:20:292:24 | query | semmle.label | query | | srv/service1.js:296:13:296:18 | { id } | semmle.label | { id } | -| srv/service1.js:296:13:296:29 | id | semmle.label | id | +| srv/service1.js:296:15:296:16 | id | semmle.label | id | | srv/service1.js:296:22:296:29 | req.data | semmle.label | req.data | | srv/service1.js:298:45:298:55 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:298:54:298:55 | id | semmle.label | id | | srv/service1.js:308:13:308:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:308:13:308:37 | amount | semmle.label | amount | -| srv/service1.js:308:13:308:37 | id | semmle.label | id | +| srv/service1.js:308:15:308:16 | id | semmle.label | id | +| srv/service1.js:308:19:308:24 | amount | semmle.label | amount | | srv/service1.js:308:30:308:37 | req.data | semmle.label | req.data | | srv/service1.js:310:45:310:66 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:310:61:310:66 | amount | semmle.label | amount | | srv/service1.js:310:75:310:88 | "col1 = " + id | semmle.label | "col1 = " + id | | srv/service1.js:310:87:310:88 | id | semmle.label | id | | srv/service1.js:326:13:326:18 | { id } | semmle.label | { id } | -| srv/service1.js:326:13:326:29 | id | semmle.label | id | +| srv/service1.js:326:15:326:16 | id | semmle.label | id | | srv/service1.js:326:22:326:29 | req.data | semmle.label | req.data | | srv/service1.js:328:47:328:57 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:328:56:328:57 | id | semmle.label | id | | srv/service1.js:333:13:333:18 | { id } | semmle.label | { id } | -| srv/service1.js:333:13:333:29 | id | semmle.label | id | +| srv/service1.js:333:15:333:16 | id | semmle.label | id | | srv/service1.js:333:22:333:29 | req.data | semmle.label | req.data | -| srv/service1.js:335:13:335:74 | query | semmle.label | query | +| srv/service1.js:335:13:335:17 | query | semmle.label | query | | srv/service1.js:335:21:335:74 | cds.ql( ... " + id) | semmle.label | cds.ql( ... " + id) | | srv/service1.js:335:28:335:73 | "SELECT ... =" + id | semmle.label | "SELECT ... =" + id | | srv/service1.js:335:72:335:73 | id | semmle.label | id | | srv/service1.js:336:20:336:24 | query | semmle.label | query | | srv/service1.js:340:13:340:18 | { id } | semmle.label | { id } | -| srv/service1.js:340:13:340:29 | id | semmle.label | id | +| srv/service1.js:340:15:340:16 | id | semmle.label | id | | srv/service1.js:340:22:340:29 | req.data | semmle.label | req.data | -| srv/service1.js:342:13:342:74 | query | semmle.label | query | +| srv/service1.js:342:13:342:17 | query | semmle.label | query | | srv/service1.js:342:21:342:74 | cds.ql( ... ` + id) | semmle.label | cds.ql( ... ` + id) | | srv/service1.js:342:28:342:73 | `SELECT ... =` + id | semmle.label | `SELECT ... =` + id | | srv/service1.js:342:72:342:73 | id | semmle.label | id | | srv/service1.js:343:20:343:24 | query | semmle.label | query | | srv/service1.js:347:13:347:18 | { id } | semmle.label | { id } | -| srv/service1.js:347:13:347:29 | id | semmle.label | id | +| srv/service1.js:347:15:347:16 | id | semmle.label | id | | srv/service1.js:347:22:347:29 | req.data | semmle.label | req.data | -| srv/service1.js:349:13:349:75 | query | semmle.label | query | +| srv/service1.js:349:13:349:17 | query | semmle.label | query | | srv/service1.js:349:21:349:75 | cds.ql( ... ${id}`) | semmle.label | cds.ql( ... ${id}`) | | srv/service1.js:349:28:349:74 | `SELECT ... ${id}` | semmle.label | `SELECT ... ${id}` | | srv/service1.js:349:71:349:72 | id | semmle.label | id | | srv/service1.js:350:20:350:24 | query | semmle.label | query | | srv/service1.js:362:13:362:18 | { id } | semmle.label | { id } | -| srv/service1.js:362:13:362:29 | id | semmle.label | id | +| srv/service1.js:362:15:362:16 | id | semmle.label | id | | srv/service1.js:362:22:362:29 | req.data | semmle.label | req.data | -| srv/service1.js:363:13:363:74 | query | semmle.label | query | +| srv/service1.js:363:13:363:17 | query | semmle.label | query | | srv/service1.js:363:21:363:74 | cds.par ... " + id) | semmle.label | cds.par ... " + id) | | srv/service1.js:363:35:363:73 | "SELECT ... =" + id | semmle.label | "SELECT ... =" + id | | srv/service1.js:363:72:363:73 | id | semmle.label | id | | srv/service1.js:364:15:364:19 | query | semmle.label | query | | srv/service1.js:368:13:368:18 | { id } | semmle.label | { id } | -| srv/service1.js:368:13:368:29 | id | semmle.label | id | +| srv/service1.js:368:15:368:16 | id | semmle.label | id | | srv/service1.js:368:22:368:29 | req.data | semmle.label | req.data | -| srv/service1.js:369:13:369:74 | query | semmle.label | query | +| srv/service1.js:369:13:369:17 | query | semmle.label | query | | srv/service1.js:369:21:369:74 | cds.par ... ` + id) | semmle.label | cds.par ... ` + id) | | srv/service1.js:369:35:369:73 | `SELECT ... =` + id | semmle.label | `SELECT ... =` + id | | srv/service1.js:369:72:369:73 | id | semmle.label | id | | srv/service1.js:370:15:370:19 | query | semmle.label | query | | srv/service1.js:374:13:374:18 | { id } | semmle.label | { id } | -| srv/service1.js:374:13:374:29 | id | semmle.label | id | +| srv/service1.js:374:15:374:16 | id | semmle.label | id | | srv/service1.js:374:22:374:29 | req.data | semmle.label | req.data | -| srv/service1.js:375:13:375:75 | query | semmle.label | query | +| srv/service1.js:375:13:375:17 | query | semmle.label | query | | srv/service1.js:375:21:375:75 | cds.par ... ${id}`) | semmle.label | cds.par ... ${id}`) | | srv/service1.js:375:35:375:74 | `SELECT ... ${id}` | semmle.label | `SELECT ... ${id}` | | srv/service1.js:375:71:375:72 | id | semmle.label | id | | srv/service1.js:376:15:376:19 | query | semmle.label | query | | srv/service1.js:387:13:387:18 | { id } | semmle.label | { id } | -| srv/service1.js:387:13:387:29 | id | semmle.label | id | +| srv/service1.js:387:15:387:16 | id | semmle.label | id | | srv/service1.js:387:22:387:29 | req.data | semmle.label | req.data | -| srv/service1.js:388:13:388:64 | query | semmle.label | query | +| srv/service1.js:388:13:388:17 | query | semmle.label | query | | srv/service1.js:388:21:388:64 | CQL("SE ... " + id) | semmle.label | CQL("SE ... " + id) | | srv/service1.js:388:25:388:63 | "SELECT ... =" + id | semmle.label | "SELECT ... =" + id | | srv/service1.js:388:62:388:63 | id | semmle.label | id | | srv/service1.js:389:15:389:19 | query | semmle.label | query | | srv/service1.js:393:13:393:18 | { id } | semmle.label | { id } | -| srv/service1.js:393:13:393:29 | id | semmle.label | id | +| srv/service1.js:393:15:393:16 | id | semmle.label | id | | srv/service1.js:393:22:393:29 | req.data | semmle.label | req.data | -| srv/service1.js:394:13:394:64 | query | semmle.label | query | +| srv/service1.js:394:13:394:17 | query | semmle.label | query | | srv/service1.js:394:21:394:64 | CQL(`SE ... ` + id) | semmle.label | CQL(`SE ... ` + id) | | srv/service1.js:394:25:394:63 | `SELECT ... =` + id | semmle.label | `SELECT ... =` + id | | srv/service1.js:394:62:394:63 | id | semmle.label | id | | srv/service1.js:395:15:395:19 | query | semmle.label | query | | srv/service1.js:399:13:399:18 | { id } | semmle.label | { id } | -| srv/service1.js:399:13:399:29 | id | semmle.label | id | +| srv/service1.js:399:15:399:16 | id | semmle.label | id | | srv/service1.js:399:22:399:29 | req.data | semmle.label | req.data | -| srv/service1.js:400:13:400:65 | query | semmle.label | query | +| srv/service1.js:400:13:400:17 | query | semmle.label | query | | srv/service1.js:400:21:400:65 | CQL(`SE ... ${id}`) | semmle.label | CQL(`SE ... ${id}`) | | srv/service1.js:400:25:400:64 | `SELECT ... ${id}` | semmle.label | `SELECT ... ${id}` | | srv/service1.js:400:61:400:62 | id | semmle.label | id | | srv/service1.js:401:15:401:19 | query | semmle.label | query | | srv/service1.js:412:13:412:18 | { id } | semmle.label | { id } | -| srv/service1.js:412:13:412:29 | id | semmle.label | id | +| srv/service1.js:412:15:412:16 | id | semmle.label | id | | srv/service1.js:412:22:412:29 | req.data | semmle.label | req.data | -| srv/service1.js:414:13:414:59 | query | semmle.label | query | +| srv/service1.js:414:13:414:17 | query | semmle.label | query | | srv/service1.js:414:58:414:59 | id | semmle.label | id | | srv/service1.js:415:20:415:24 | query | semmle.label | query | | srv/service1.js:419:13:419:18 | { id } | semmle.label | { id } | -| srv/service1.js:419:13:419:29 | id | semmle.label | id | +| srv/service1.js:419:15:419:16 | id | semmle.label | id | | srv/service1.js:419:22:419:29 | req.data | semmle.label | req.data | -| srv/service1.js:421:13:421:59 | query | semmle.label | query | +| srv/service1.js:421:13:421:17 | query | semmle.label | query | | srv/service1.js:421:58:421:59 | id | semmle.label | id | | srv/service1.js:422:20:422:24 | query | semmle.label | query | | srv/service1.js:426:13:426:18 | { id } | semmle.label | { id } | -| srv/service1.js:426:13:426:29 | id | semmle.label | id | +| srv/service1.js:426:15:426:16 | id | semmle.label | id | | srv/service1.js:426:22:426:29 | req.data | semmle.label | req.data | -| srv/service1.js:428:13:428:60 | query | semmle.label | query | +| srv/service1.js:428:13:428:17 | query | semmle.label | query | | srv/service1.js:428:57:428:58 | id | semmle.label | id | | srv/service1.js:429:20:429:24 | query | semmle.label | query | | srv/service1.js:434:13:434:18 | { id } | semmle.label | { id } | -| srv/service1.js:434:13:434:29 | id | semmle.label | id | +| srv/service1.js:434:15:434:16 | id | semmle.label | id | | srv/service1.js:434:22:434:29 | req.data | semmle.label | req.data | -| srv/service1.js:436:13:436:65 | query | semmle.label | query | +| srv/service1.js:436:13:436:17 | query | semmle.label | query | | srv/service1.js:436:21:436:65 | SELECT. ... " + id) | semmle.label | SELECT. ... " + id) | | srv/service1.js:436:55:436:64 | "ID=" + id | semmle.label | "ID=" + id | | srv/service1.js:436:63:436:64 | id | semmle.label | id | | srv/service1.js:438:16:438:20 | query | semmle.label | query | | srv/service1.js:443:13:443:18 | { id } | semmle.label | { id } | -| srv/service1.js:443:13:443:29 | id | semmle.label | id | +| srv/service1.js:443:15:443:16 | id | semmle.label | id | | srv/service1.js:443:22:443:29 | req.data | semmle.label | req.data | | srv/service1.js:446:41:446:51 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:446:50:446:51 | id | semmle.label | id | | srv/service1.js:459:13:459:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:459:13:459:37 | amount | semmle.label | amount | -| srv/service1.js:459:13:459:37 | id | semmle.label | id | +| srv/service1.js:459:15:459:16 | id | semmle.label | id | +| srv/service1.js:459:19:459:24 | amount | semmle.label | amount | | srv/service1.js:459:30:459:37 | req.data | semmle.label | req.data | | srv/service1.js:462:41:462:62 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:462:57:462:62 | amount | semmle.label | amount | | srv/service1.js:462:71:462:84 | "col1 = " + id | semmle.label | "col1 = " + id | | srv/service1.js:462:83:462:84 | id | semmle.label | id | | srv/service1.js:483:13:483:18 | { id } | semmle.label | { id } | -| srv/service1.js:483:13:483:29 | id | semmle.label | id | +| srv/service1.js:483:15:483:16 | id | semmle.label | id | | srv/service1.js:483:22:483:29 | req.data | semmle.label | req.data | | srv/service1.js:486:43:486:53 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:486:52:486:53 | id | semmle.label | id | | srv/service1.js:492:13:492:18 | { id } | semmle.label | { id } | -| srv/service1.js:492:13:492:29 | id | semmle.label | id | +| srv/service1.js:492:15:492:16 | id | semmle.label | id | | srv/service1.js:492:22:492:29 | req.data | semmle.label | req.data | -| srv/service1.js:493:13:493:65 | query | semmle.label | query | +| srv/service1.js:493:13:493:17 | query | semmle.label | query | | srv/service1.js:493:21:493:65 | SELECT. ... " + id) | semmle.label | SELECT. ... " + id) | | srv/service1.js:493:55:493:64 | "ID=" + id | semmle.label | "ID=" + id | | srv/service1.js:493:63:493:64 | id | semmle.label | id | | srv/service1.js:495:16:495:20 | query | semmle.label | query | | srv/service1.js:500:13:500:18 | { id } | semmle.label | { id } | -| srv/service1.js:500:13:500:29 | id | semmle.label | id | +| srv/service1.js:500:15:500:16 | id | semmle.label | id | | srv/service1.js:500:22:500:29 | req.data | semmle.label | req.data | | srv/service1.js:502:41:502:51 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:502:50:502:51 | id | semmle.label | id | | srv/service1.js:514:13:514:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:514:13:514:37 | amount | semmle.label | amount | -| srv/service1.js:514:13:514:37 | id | semmle.label | id | +| srv/service1.js:514:15:514:16 | id | semmle.label | id | +| srv/service1.js:514:19:514:24 | amount | semmle.label | amount | | srv/service1.js:514:30:514:37 | req.data | semmle.label | req.data | | srv/service1.js:516:41:516:62 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:516:57:516:62 | amount | semmle.label | amount | | srv/service1.js:516:71:516:84 | "col1 = " + id | semmle.label | "col1 = " + id | | srv/service1.js:516:83:516:84 | id | semmle.label | id | | srv/service1.js:535:13:535:18 | { id } | semmle.label | { id } | -| srv/service1.js:535:13:535:29 | id | semmle.label | id | +| srv/service1.js:535:15:535:16 | id | semmle.label | id | | srv/service1.js:535:22:535:29 | req.data | semmle.label | req.data | | srv/service1.js:537:43:537:53 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:537:52:537:53 | id | semmle.label | id | | srv/service1.js:543:13:543:18 | { id } | semmle.label | { id } | -| srv/service1.js:543:13:543:29 | id | semmle.label | id | +| srv/service1.js:543:15:543:16 | id | semmle.label | id | | srv/service1.js:543:22:543:29 | req.data | semmle.label | req.data | -| srv/service1.js:544:13:544:58 | query | semmle.label | query | +| srv/service1.js:544:13:544:17 | query | semmle.label | query | | srv/service1.js:544:21:544:58 | SELECT. ... " + id) | semmle.label | SELECT. ... " + id) | | srv/service1.js:544:48:544:57 | "ID=" + id | semmle.label | "ID=" + id | | srv/service1.js:544:56:544:57 | id | semmle.label | id | | srv/service1.js:546:16:546:20 | query | semmle.label | query | | srv/service1.js:551:13:551:18 | { id } | semmle.label | { id } | -| srv/service1.js:551:13:551:29 | id | semmle.label | id | +| srv/service1.js:551:15:551:16 | id | semmle.label | id | | srv/service1.js:551:22:551:29 | req.data | semmle.label | req.data | | srv/service1.js:553:34:553:44 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:553:43:553:44 | id | semmle.label | id | | srv/service1.js:565:13:565:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:565:13:565:37 | amount | semmle.label | amount | -| srv/service1.js:565:13:565:37 | id | semmle.label | id | +| srv/service1.js:565:15:565:16 | id | semmle.label | id | +| srv/service1.js:565:19:565:24 | amount | semmle.label | amount | | srv/service1.js:565:30:565:37 | req.data | semmle.label | req.data | | srv/service1.js:567:34:567:55 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:567:50:567:55 | amount | semmle.label | amount | | srv/service1.js:567:64:567:77 | "col1 = " + id | semmle.label | "col1 = " + id | | srv/service1.js:567:76:567:77 | id | semmle.label | id | | srv/service1.js:586:13:586:18 | { id } | semmle.label | { id } | -| srv/service1.js:586:13:586:29 | id | semmle.label | id | +| srv/service1.js:586:15:586:16 | id | semmle.label | id | | srv/service1.js:586:22:586:29 | req.data | semmle.label | req.data | | srv/service1.js:588:36:588:46 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:588:45:588:46 | id | semmle.label | id | | srv/service1.js:594:13:594:18 | { id } | semmle.label | { id } | -| srv/service1.js:594:13:594:29 | id | semmle.label | id | +| srv/service1.js:594:15:594:16 | id | semmle.label | id | | srv/service1.js:594:22:594:29 | req.data | semmle.label | req.data | -| srv/service1.js:595:13:595:58 | query | semmle.label | query | +| srv/service1.js:595:13:595:17 | query | semmle.label | query | | srv/service1.js:595:21:595:58 | SELECT. ... " + id) | semmle.label | SELECT. ... " + id) | | srv/service1.js:595:48:595:57 | "ID=" + id | semmle.label | "ID=" + id | | srv/service1.js:595:56:595:57 | id | semmle.label | id | | srv/service1.js:597:16:597:20 | query | semmle.label | query | | srv/service1.js:602:13:602:18 | { id } | semmle.label | { id } | -| srv/service1.js:602:13:602:29 | id | semmle.label | id | +| srv/service1.js:602:15:602:16 | id | semmle.label | id | | srv/service1.js:602:22:602:29 | req.data | semmle.label | req.data | | srv/service1.js:604:34:604:44 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:604:43:604:44 | id | semmle.label | id | | srv/service1.js:616:13:616:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:616:13:616:37 | amount | semmle.label | amount | -| srv/service1.js:616:13:616:37 | id | semmle.label | id | +| srv/service1.js:616:15:616:16 | id | semmle.label | id | +| srv/service1.js:616:19:616:24 | amount | semmle.label | amount | | srv/service1.js:616:30:616:37 | req.data | semmle.label | req.data | | srv/service1.js:618:34:618:55 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:618:50:618:55 | amount | semmle.label | amount | | srv/service1.js:618:64:618:77 | "col1 = " + id | semmle.label | "col1 = " + id | | srv/service1.js:618:76:618:77 | id | semmle.label | id | | srv/service1.js:637:13:637:18 | { id } | semmle.label | { id } | -| srv/service1.js:637:13:637:29 | id | semmle.label | id | +| srv/service1.js:637:15:637:16 | id | semmle.label | id | | srv/service1.js:637:22:637:29 | req.data | semmle.label | req.data | | srv/service1.js:639:36:639:46 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:639:45:639:46 | id | semmle.label | id | | srv/service1.js:645:13:645:18 | { id } | semmle.label | { id } | -| srv/service1.js:645:13:645:29 | id | semmle.label | id | +| srv/service1.js:645:15:645:16 | id | semmle.label | id | | srv/service1.js:645:22:645:29 | req.data | semmle.label | req.data | -| srv/service1.js:646:13:646:58 | query | semmle.label | query | +| srv/service1.js:646:13:646:17 | query | semmle.label | query | | srv/service1.js:646:21:646:58 | SELECT. ... " + id) | semmle.label | SELECT. ... " + id) | | srv/service1.js:646:48:646:57 | "ID=" + id | semmle.label | "ID=" + id | | srv/service1.js:646:56:646:57 | id | semmle.label | id | | srv/service1.js:647:18:647:22 | query | semmle.label | query | | srv/service1.js:651:13:651:18 | { id } | semmle.label | { id } | -| srv/service1.js:651:13:651:29 | id | semmle.label | id | +| srv/service1.js:651:15:651:16 | id | semmle.label | id | | srv/service1.js:651:22:651:29 | req.data | semmle.label | req.data | -| srv/service1.js:652:13:652:58 | query | semmle.label | query | +| srv/service1.js:652:13:652:17 | query | semmle.label | query | | srv/service1.js:652:21:652:58 | SELECT. ... ` + id) | semmle.label | SELECT. ... ` + id) | | srv/service1.js:652:48:652:57 | `ID=` + id | semmle.label | `ID=` + id | | srv/service1.js:652:56:652:57 | id | semmle.label | id | | srv/service1.js:653:18:653:22 | query | semmle.label | query | | srv/service1.js:657:13:657:18 | { id } | semmle.label | { id } | -| srv/service1.js:657:13:657:29 | id | semmle.label | id | +| srv/service1.js:657:15:657:16 | id | semmle.label | id | | srv/service1.js:657:22:657:29 | req.data | semmle.label | req.data | -| srv/service1.js:658:13:658:58 | query | semmle.label | query | +| srv/service1.js:658:13:658:17 | query | semmle.label | query | | srv/service1.js:658:21:658:58 | SELECT. ... ${id}`) | semmle.label | SELECT. ... ${id}`) | | srv/service1.js:658:48:658:57 | `ID=${id}` | semmle.label | `ID=${id}` | | srv/service1.js:658:54:658:55 | id | semmle.label | id | | srv/service1.js:659:18:659:22 | query | semmle.label | query | | srv/service1.js:669:13:669:18 | { id } | semmle.label | { id } | -| srv/service1.js:669:13:669:29 | id | semmle.label | id | +| srv/service1.js:669:15:669:16 | id | semmle.label | id | | srv/service1.js:669:22:669:29 | req.data | semmle.label | req.data | | srv/service1.js:670:36:670:46 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:670:45:670:46 | id | semmle.label | id | | srv/service1.js:674:13:674:18 | { id } | semmle.label | { id } | -| srv/service1.js:674:13:674:29 | id | semmle.label | id | +| srv/service1.js:674:15:674:16 | id | semmle.label | id | | srv/service1.js:674:22:674:29 | req.data | semmle.label | req.data | | srv/service1.js:675:36:675:46 | `ID =` + id | semmle.label | `ID =` + id | | srv/service1.js:675:45:675:46 | id | semmle.label | id | | srv/service1.js:679:13:679:18 | { id } | semmle.label | { id } | -| srv/service1.js:679:13:679:29 | id | semmle.label | id | +| srv/service1.js:679:15:679:16 | id | semmle.label | id | | srv/service1.js:679:22:679:29 | req.data | semmle.label | req.data | | srv/service1.js:680:36:680:45 | `ID=${id}` | semmle.label | `ID=${id}` | | srv/service1.js:680:42:680:43 | id | semmle.label | id | | srv/service1.js:704:13:704:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:704:13:704:37 | amount | semmle.label | amount | -| srv/service1.js:704:13:704:37 | id | semmle.label | id | +| srv/service1.js:704:15:704:16 | id | semmle.label | id | +| srv/service1.js:704:19:704:24 | amount | semmle.label | amount | | srv/service1.js:704:30:704:37 | req.data | semmle.label | req.data | | srv/service1.js:705:36:705:57 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:705:52:705:57 | amount | semmle.label | amount | | srv/service1.js:705:66:705:79 | "col1 = " + id | semmle.label | "col1 = " + id | | srv/service1.js:705:78:705:79 | id | semmle.label | id | | srv/service1.js:709:13:709:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:709:13:709:37 | amount | semmle.label | amount | -| srv/service1.js:709:13:709:37 | id | semmle.label | id | +| srv/service1.js:709:15:709:16 | id | semmle.label | id | +| srv/service1.js:709:19:709:24 | amount | semmle.label | amount | | srv/service1.js:709:30:709:37 | req.data | semmle.label | req.data | | srv/service1.js:710:36:710:57 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:710:52:710:57 | amount | semmle.label | amount | | srv/service1.js:710:66:710:78 | `col1 =` + id | semmle.label | `col1 =` + id | | srv/service1.js:710:77:710:78 | id | semmle.label | id | | srv/service1.js:714:13:714:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:714:13:714:37 | amount | semmle.label | amount | -| srv/service1.js:714:13:714:37 | id | semmle.label | id | +| srv/service1.js:714:15:714:16 | id | semmle.label | id | +| srv/service1.js:714:19:714:24 | amount | semmle.label | amount | | srv/service1.js:714:30:714:37 | req.data | semmle.label | req.data | | srv/service1.js:715:36:715:57 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:715:52:715:57 | amount | semmle.label | amount | | srv/service1.js:715:66:715:79 | `col1 = ${id}` | semmle.label | `col1 = ${id}` | | srv/service1.js:715:76:715:77 | id | semmle.label | id | | srv/service1.js:719:13:719:26 | { id, amount } | semmle.label | { id, amount } | -| srv/service1.js:719:13:719:37 | amount | semmle.label | amount | +| srv/service1.js:719:19:719:24 | amount | semmle.label | amount | | srv/service1.js:719:30:719:37 | req.data | semmle.label | req.data | | srv/service1.js:720:36:720:57 | "col1 = ... amount | semmle.label | "col1 = ... amount | | srv/service1.js:720:52:720:57 | amount | semmle.label | amount | | srv/service1.js:754:13:754:18 | { id } | semmle.label | { id } | -| srv/service1.js:754:13:754:29 | id | semmle.label | id | +| srv/service1.js:754:15:754:16 | id | semmle.label | id | | srv/service1.js:754:22:754:29 | req.data | semmle.label | req.data | | srv/service1.js:755:38:755:48 | "ID =" + id | semmle.label | "ID =" + id | | srv/service1.js:755:47:755:48 | id | semmle.label | id | | srv/service1.js:759:13:759:18 | { id } | semmle.label | { id } | -| srv/service1.js:759:13:759:29 | id | semmle.label | id | +| srv/service1.js:759:15:759:16 | id | semmle.label | id | | srv/service1.js:759:22:759:29 | req.data | semmle.label | req.data | | srv/service1.js:760:38:760:48 | `ID =` + id | semmle.label | `ID =` + id | | srv/service1.js:760:47:760:48 | id | semmle.label | id | | srv/service1.js:764:13:764:18 | { id } | semmle.label | { id } | -| srv/service1.js:764:13:764:29 | id | semmle.label | id | +| srv/service1.js:764:15:764:16 | id | semmle.label | id | | srv/service1.js:764:22:764:29 | req.data | semmle.label | req.data | | srv/service1.js:765:38:765:49 | `ID = ${id}` | semmle.label | `ID = ${id}` | | srv/service1.js:765:46:765:47 | id | semmle.label | id | diff --git a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service1-protocol-none/log-injection-with-service1-protocol-none.expected b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service1-protocol-none/log-injection-with-service1-protocol-none.expected index 7301469b..aa49f11e 100644 --- a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service1-protocol-none/log-injection-with-service1-protocol-none.expected +++ b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service1-protocol-none/log-injection-with-service1-protocol-none.expected @@ -1,10 +1,10 @@ edges -| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:15:7:42 | messageToPass | provenance | | -| srv/service2.js:7:15:7:42 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | | +| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:17:7:29 | messageToPass | provenance | | +| srv/service2.js:7:17:7:29 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | | | srv/service2.js:7:35:7:42 | msg.data | srv/service2.js:7:15:7:31 | { messageToPass } | provenance | | nodes | srv/service2.js:7:15:7:31 | { messageToPass } | semmle.label | { messageToPass } | -| srv/service2.js:7:15:7:42 | messageToPass | semmle.label | messageToPass | +| srv/service2.js:7:17:7:29 | messageToPass | semmle.label | messageToPass | | srv/service2.js:7:35:7:42 | msg.data | semmle.label | msg.data | | srv/service2.js:9:32:9:44 | messageToPass | semmle.label | messageToPass | subpaths diff --git a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service2-protocol-none/log-injection-with-service2-protocol-none.expected b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service2-protocol-none/log-injection-with-service2-protocol-none.expected index 2073dba6..510e21a0 100644 --- a/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service2-protocol-none/log-injection-with-service2-protocol-none.expected +++ b/javascript/frameworks/cap/test/queries/loginjection/log-injection-with-service2-protocol-none/log-injection-with-service2-protocol-none.expected @@ -1,22 +1,22 @@ edges -| srv/service1.js:7:19:7:35 | { messageToPass } | srv/service1.js:7:19:7:46 | messageToPass | provenance | | -| srv/service1.js:7:19:7:46 | messageToPass | srv/service1.js:9:38:9:50 | messageToPass | provenance | | +| srv/service1.js:7:19:7:35 | { messageToPass } | srv/service1.js:7:21:7:33 | messageToPass | provenance | | +| srv/service1.js:7:21:7:33 | messageToPass | srv/service1.js:9:38:9:50 | messageToPass | provenance | | | srv/service1.js:7:39:7:46 | req.data | srv/service1.js:7:19:7:35 | { messageToPass } | provenance | | | srv/service1.js:9:36:9:52 | { messageToPass } | srv/service2.js:6:29:6:31 | msg | provenance | | | srv/service1.js:9:38:9:50 | messageToPass | srv/service1.js:9:36:9:52 | { messageToPass } | provenance | | | srv/service2.js:6:29:6:31 | msg | srv/service2.js:7:35:7:37 | msg | provenance | | -| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:15:7:42 | messageToPass | provenance | | -| srv/service2.js:7:15:7:42 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | | +| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:17:7:29 | messageToPass | provenance | | +| srv/service2.js:7:17:7:29 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | | | srv/service2.js:7:35:7:37 | msg | srv/service2.js:7:15:7:31 | { messageToPass } | provenance | | nodes | srv/service1.js:7:19:7:35 | { messageToPass } | semmle.label | { messageToPass } | -| srv/service1.js:7:19:7:46 | messageToPass | semmle.label | messageToPass | +| srv/service1.js:7:21:7:33 | messageToPass | semmle.label | messageToPass | | srv/service1.js:7:39:7:46 | req.data | semmle.label | req.data | | srv/service1.js:9:36:9:52 | { messageToPass } | semmle.label | { messageToPass } | | srv/service1.js:9:38:9:50 | messageToPass | semmle.label | messageToPass | | srv/service2.js:6:29:6:31 | msg | semmle.label | msg | | srv/service2.js:7:15:7:31 | { messageToPass } | semmle.label | { messageToPass } | -| srv/service2.js:7:15:7:42 | messageToPass | semmle.label | messageToPass | +| srv/service2.js:7:17:7:29 | messageToPass | semmle.label | messageToPass | | srv/service2.js:7:35:7:37 | msg | semmle.label | msg | | srv/service2.js:9:32:9:44 | messageToPass | semmle.label | messageToPass | subpaths diff --git a/javascript/frameworks/cap/test/queries/loginjection/log-injection-without-protocol-none/log-injection-without-protocol-none.expected b/javascript/frameworks/cap/test/queries/loginjection/log-injection-without-protocol-none/log-injection-without-protocol-none.expected index b243fb64..8b23f0ff 100644 --- a/javascript/frameworks/cap/test/queries/loginjection/log-injection-without-protocol-none/log-injection-without-protocol-none.expected +++ b/javascript/frameworks/cap/test/queries/loginjection/log-injection-without-protocol-none/log-injection-without-protocol-none.expected @@ -1,23 +1,23 @@ edges -| srv/service1.js:7:19:7:35 | { messageToPass } | srv/service1.js:7:19:7:46 | messageToPass | provenance | | -| srv/service1.js:7:19:7:46 | messageToPass | srv/service1.js:9:38:9:50 | messageToPass | provenance | | +| srv/service1.js:7:19:7:35 | { messageToPass } | srv/service1.js:7:21:7:33 | messageToPass | provenance | | +| srv/service1.js:7:21:7:33 | messageToPass | srv/service1.js:9:38:9:50 | messageToPass | provenance | | | srv/service1.js:7:39:7:46 | req.data | srv/service1.js:7:19:7:35 | { messageToPass } | provenance | | | srv/service1.js:9:36:9:52 | { messageToPass } | srv/service2.js:6:29:6:31 | msg | provenance | | | srv/service1.js:9:38:9:50 | messageToPass | srv/service1.js:9:36:9:52 | { messageToPass } | provenance | | | srv/service2.js:6:29:6:31 | msg | srv/service2.js:7:35:7:37 | msg | provenance | | -| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:15:7:42 | messageToPass | provenance | | -| srv/service2.js:7:15:7:42 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | | +| srv/service2.js:7:15:7:31 | { messageToPass } | srv/service2.js:7:17:7:29 | messageToPass | provenance | | +| srv/service2.js:7:17:7:29 | messageToPass | srv/service2.js:9:32:9:44 | messageToPass | provenance | | | srv/service2.js:7:35:7:37 | msg | srv/service2.js:7:15:7:31 | { messageToPass } | provenance | | | srv/service2.js:7:35:7:42 | msg.data | srv/service2.js:7:15:7:31 | { messageToPass } | provenance | | nodes | srv/service1.js:7:19:7:35 | { messageToPass } | semmle.label | { messageToPass } | -| srv/service1.js:7:19:7:46 | messageToPass | semmle.label | messageToPass | +| srv/service1.js:7:21:7:33 | messageToPass | semmle.label | messageToPass | | srv/service1.js:7:39:7:46 | req.data | semmle.label | req.data | | srv/service1.js:9:36:9:52 | { messageToPass } | semmle.label | { messageToPass } | | srv/service1.js:9:38:9:50 | messageToPass | semmle.label | messageToPass | | srv/service2.js:6:29:6:31 | msg | semmle.label | msg | | srv/service2.js:7:15:7:31 | { messageToPass } | semmle.label | { messageToPass } | -| srv/service2.js:7:15:7:42 | messageToPass | semmle.label | messageToPass | +| srv/service2.js:7:17:7:29 | messageToPass | semmle.label | messageToPass | | srv/service2.js:7:35:7:37 | msg | semmle.label | msg | | srv/service2.js:7:35:7:42 | msg.data | semmle.label | msg.data | | srv/service2.js:9:32:9:44 | messageToPass | semmle.label | messageToPass | diff --git a/javascript/frameworks/cap/test/queries/path-traversal/pathinjection.expected b/javascript/frameworks/cap/test/queries/path-traversal/pathinjection.expected index 6a7e2e04..d05744c1 100644 --- a/javascript/frameworks/cap/test/queries/path-traversal/pathinjection.expected +++ b/javascript/frameworks/cap/test/queries/path-traversal/pathinjection.expected @@ -1,61 +1,61 @@ edges -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:31:26:31:34 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:33:38:33:46 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:34:24:34:32 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:36:44:36:52 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:38:25:38:33 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:40:26:40:34 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:41:26:41:34 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:43:25:43:33 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:44:25:44:33 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:46:26:46:34 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:47:26:47:34 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:49:22:49:30 | userinput | provenance | | -| pathinjection.js:8:19:8:38 | userinput | pathinjection.js:50:22:50:30 | userinput | provenance | | -| pathinjection.js:8:31:8:38 | req.data | pathinjection.js:8:19:8:38 | userinput | provenance | | -| pathinjection.js:9:19:9:44 | userinputtwo | pathinjection.js:37:25:37:36 | userinputtwo | provenance | | -| pathinjection.js:9:34:9:44 | req.headers | pathinjection.js:9:19:9:44 | userinputtwo | provenance | | -| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:12:38:12:51 | userinputthree | provenance | | -| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:14:47:14:60 | userinputthree | provenance | | -| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:16:34:16:47 | userinputthree | provenance | | -| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:18:34:18:47 | userinputthree | provenance | | -| pathinjection.js:10:19:10:45 | userinputthree | pathinjection.js:20:35:20:48 | userinputthree | provenance | | -| pathinjection.js:10:36:10:45 | req.params | pathinjection.js:10:19:10:45 | userinputthree | provenance | | -| pathinjection.js:12:19:12:52 | taint1 | pathinjection.js:22:36:22:41 | taint1 | provenance | | -| pathinjection.js:12:28:12:52 | decodeU ... tthree) | pathinjection.js:12:19:12:52 | taint1 | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:31:26:31:34 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:33:38:33:46 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:34:24:34:32 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:36:44:36:52 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:38:25:38:33 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:40:26:40:34 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:41:26:41:34 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:43:25:43:33 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:44:25:44:33 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:46:26:46:34 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:47:26:47:34 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:49:22:49:30 | userinput | provenance | | +| pathinjection.js:8:19:8:27 | userinput | pathinjection.js:50:22:50:30 | userinput | provenance | | +| pathinjection.js:8:31:8:38 | req.data | pathinjection.js:8:19:8:27 | userinput | provenance | | +| pathinjection.js:9:19:9:30 | userinputtwo | pathinjection.js:37:25:37:36 | userinputtwo | provenance | | +| pathinjection.js:9:34:9:44 | req.headers | pathinjection.js:9:19:9:30 | userinputtwo | provenance | | +| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:12:38:12:51 | userinputthree | provenance | | +| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:14:47:14:60 | userinputthree | provenance | | +| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:16:34:16:47 | userinputthree | provenance | | +| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:18:34:18:47 | userinputthree | provenance | | +| pathinjection.js:10:19:10:32 | userinputthree | pathinjection.js:20:35:20:48 | userinputthree | provenance | | +| pathinjection.js:10:36:10:45 | req.params | pathinjection.js:10:19:10:32 | userinputthree | provenance | | +| pathinjection.js:12:19:12:24 | taint1 | pathinjection.js:22:36:22:41 | taint1 | provenance | | +| pathinjection.js:12:28:12:52 | decodeU ... tthree) | pathinjection.js:12:19:12:24 | taint1 | provenance | | | pathinjection.js:12:38:12:51 | userinputthree | pathinjection.js:12:28:12:52 | decodeU ... tthree) | provenance | Config | -| pathinjection.js:14:19:14:61 | taint2 | pathinjection.js:24:40:24:45 | taint2 | provenance | | -| pathinjection.js:14:28:14:61 | decodeU ... tthree) | pathinjection.js:14:19:14:61 | taint2 | provenance | | +| pathinjection.js:14:19:14:24 | taint2 | pathinjection.js:24:40:24:45 | taint2 | provenance | | +| pathinjection.js:14:28:14:61 | decodeU ... tthree) | pathinjection.js:14:19:14:24 | taint2 | provenance | | | pathinjection.js:14:47:14:60 | userinputthree | pathinjection.js:14:28:14:61 | decodeU ... tthree) | provenance | Config | -| pathinjection.js:16:19:16:48 | taint3 | pathinjection.js:26:34:26:39 | taint3 | provenance | | -| pathinjection.js:16:28:16:48 | local(u ... tthree) | pathinjection.js:16:19:16:48 | taint3 | provenance | | +| pathinjection.js:16:19:16:24 | taint3 | pathinjection.js:26:34:26:39 | taint3 | provenance | | +| pathinjection.js:16:28:16:48 | local(u ... tthree) | pathinjection.js:16:19:16:24 | taint3 | provenance | | | pathinjection.js:16:34:16:47 | userinputthree | pathinjection.js:16:28:16:48 | local(u ... tthree) | provenance | Config | -| pathinjection.js:18:19:18:48 | taint4 | pathinjection.js:28:34:28:39 | taint4 | provenance | | -| pathinjection.js:18:28:18:48 | isdir(u ... tthree) | pathinjection.js:18:19:18:48 | taint4 | provenance | | +| pathinjection.js:18:19:18:24 | taint4 | pathinjection.js:28:34:28:39 | taint4 | provenance | | +| pathinjection.js:18:28:18:48 | isdir(u ... tthree) | pathinjection.js:18:19:18:24 | taint4 | provenance | | | pathinjection.js:18:34:18:47 | userinputthree | pathinjection.js:18:28:18:48 | isdir(u ... tthree) | provenance | Config | -| pathinjection.js:20:19:20:49 | taint5 | pathinjection.js:30:40:30:45 | taint5 | provenance | | -| pathinjection.js:20:28:20:49 | isfile( ... tthree) | pathinjection.js:20:19:20:49 | taint5 | provenance | | +| pathinjection.js:20:19:20:24 | taint5 | pathinjection.js:30:40:30:45 | taint5 | provenance | | +| pathinjection.js:20:28:20:49 | isfile( ... tthree) | pathinjection.js:20:19:20:24 | taint5 | provenance | | | pathinjection.js:20:35:20:48 | userinputthree | pathinjection.js:20:28:20:49 | isfile( ... tthree) | provenance | Config | nodes -| pathinjection.js:8:19:8:38 | userinput | semmle.label | userinput | +| pathinjection.js:8:19:8:27 | userinput | semmle.label | userinput | | pathinjection.js:8:31:8:38 | req.data | semmle.label | req.data | -| pathinjection.js:9:19:9:44 | userinputtwo | semmle.label | userinputtwo | +| pathinjection.js:9:19:9:30 | userinputtwo | semmle.label | userinputtwo | | pathinjection.js:9:34:9:44 | req.headers | semmle.label | req.headers | -| pathinjection.js:10:19:10:45 | userinputthree | semmle.label | userinputthree | +| pathinjection.js:10:19:10:32 | userinputthree | semmle.label | userinputthree | | pathinjection.js:10:36:10:45 | req.params | semmle.label | req.params | -| pathinjection.js:12:19:12:52 | taint1 | semmle.label | taint1 | +| pathinjection.js:12:19:12:24 | taint1 | semmle.label | taint1 | | pathinjection.js:12:28:12:52 | decodeU ... tthree) | semmle.label | decodeU ... tthree) | | pathinjection.js:12:38:12:51 | userinputthree | semmle.label | userinputthree | -| pathinjection.js:14:19:14:61 | taint2 | semmle.label | taint2 | +| pathinjection.js:14:19:14:24 | taint2 | semmle.label | taint2 | | pathinjection.js:14:28:14:61 | decodeU ... tthree) | semmle.label | decodeU ... tthree) | | pathinjection.js:14:47:14:60 | userinputthree | semmle.label | userinputthree | -| pathinjection.js:16:19:16:48 | taint3 | semmle.label | taint3 | +| pathinjection.js:16:19:16:24 | taint3 | semmle.label | taint3 | | pathinjection.js:16:28:16:48 | local(u ... tthree) | semmle.label | local(u ... tthree) | | pathinjection.js:16:34:16:47 | userinputthree | semmle.label | userinputthree | -| pathinjection.js:18:19:18:48 | taint4 | semmle.label | taint4 | +| pathinjection.js:18:19:18:24 | taint4 | semmle.label | taint4 | | pathinjection.js:18:28:18:48 | isdir(u ... tthree) | semmle.label | isdir(u ... tthree) | | pathinjection.js:18:34:18:47 | userinputthree | semmle.label | userinputthree | -| pathinjection.js:20:19:20:49 | taint5 | semmle.label | taint5 | +| pathinjection.js:20:19:20:24 | taint5 | semmle.label | taint5 | | pathinjection.js:20:28:20:49 | isfile( ... tthree) | semmle.label | isfile( ... tthree) | | pathinjection.js:20:35:20:48 | userinputthree | semmle.label | userinputthree | | pathinjection.js:22:36:22:41 | taint1 | semmle.label | taint1 | diff --git a/javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.expected b/javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.expected index 2493e4b7..61562946 100644 --- a/javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.expected +++ b/javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.expected @@ -1,14 +1,14 @@ edges | sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) | sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` | provenance | | | sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env | sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) | provenance | | -| sensitive-exposure-heuristic-source.js:8:13:10:9 | obj [x] | sensitive-exposure-heuristic-source.js:11:18:11:20 | obj | provenance | | -| sensitive-exposure-heuristic-source.js:8:19:10:9 | {\\n ... } [x] | sensitive-exposure-heuristic-source.js:8:13:10:9 | obj [x] | provenance | | +| sensitive-exposure-heuristic-source.js:8:13:8:15 | obj [x] | sensitive-exposure-heuristic-source.js:11:18:11:20 | obj | provenance | | +| sensitive-exposure-heuristic-source.js:8:19:10:9 | {\\n ... } [x] | sensitive-exposure-heuristic-source.js:8:13:8:15 | obj [x] | provenance | | | sensitive-exposure-heuristic-source.js:9:16:9:23 | password | sensitive-exposure-heuristic-source.js:8:19:10:9 | {\\n ... } [x] | provenance | | nodes | sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` | semmle.label | `[INFO] ... .env)}` | | sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) | semmle.label | JSON.st ... ss.env) | | sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env | semmle.label | process.env | -| sensitive-exposure-heuristic-source.js:8:13:10:9 | obj [x] | semmle.label | obj [x] | +| sensitive-exposure-heuristic-source.js:8:13:8:15 | obj [x] | semmle.label | obj [x] | | sensitive-exposure-heuristic-source.js:8:19:10:9 | {\\n ... } [x] | semmle.label | {\\n ... } [x] | | sensitive-exposure-heuristic-source.js:9:16:9:23 | password | semmle.label | password | | sensitive-exposure-heuristic-source.js:11:18:11:20 | obj | semmle.label | obj | diff --git a/javascript/frameworks/ui5/test/models/summary/summaryTest.expected b/javascript/frameworks/ui5/test/models/summary/summaryTest.expected index 26c6b764..88095174 100644 --- a/javascript/frameworks/ui5/test/models/summary/summaryTest.expected +++ b/javascript/frameworks/ui5/test/models/summary/summaryTest.expected @@ -1,70 +1,70 @@ nodes -| summary.js:5:9:5:50 | value | +| summary.js:5:9:5:13 | value | | summary.js:5:17:5:50 | jQuery. ... param") | -| summary.js:6:9:6:32 | value1 | +| summary.js:6:9:6:14 | value1 | | summary.js:6:18:6:32 | camelize(value) | | summary.js:6:27:6:31 | value | | summary.js:7:27:7:32 | value1 | -| summary.js:11:9:11:50 | value | +| summary.js:11:9:11:13 | value | | summary.js:11:17:11:50 | jQuery. ... param") | -| summary.js:12:9:12:29 | value1 | +| summary.js:12:9:12:14 | value1 | | summary.js:12:18:12:29 | myfun(value) | | summary.js:12:24:12:28 | value | | summary.js:13:27:13:32 | value1 | -| summary.js:17:9:17:50 | value | +| summary.js:17:9:17:13 | value | | summary.js:17:17:17:50 | jQuery. ... param") | -| summary.js:18:9:18:34 | value1 | +| summary.js:18:9:18:14 | value1 | | summary.js:18:18:18:34 | capitalize(value) | | summary.js:18:29:18:33 | value | | summary.js:19:27:19:32 | value1 | -| summary.js:23:9:23:50 | value | +| summary.js:23:9:23:13 | value | | summary.js:23:17:23:50 | jQuery. ... param") | -| summary.js:24:9:24:36 | value1 | +| summary.js:24:9:24:14 | value1 | | summary.js:24:18:24:36 | escapeRegExp(value) | | summary.js:24:31:24:35 | value | | summary.js:25:27:25:32 | value1 | -| summary.js:29:9:29:50 | value | +| summary.js:29:9:29:13 | value | | summary.js:29:17:29:50 | jQuery. ... param") | -| summary.js:30:9:30:37 | value1 | +| summary.js:30:9:30:14 | value1 | | summary.js:30:18:30:37 | formatMessage(value) | | summary.js:30:32:30:36 | value | | summary.js:31:27:31:32 | value1 | -| summary.js:35:9:35:50 | value | +| summary.js:35:9:35:13 | value | | summary.js:35:17:35:50 | jQuery. ... param") | -| summary.js:36:9:36:33 | value1 | +| summary.js:36:9:36:14 | value1 | | summary.js:36:18:36:33 | hyphenate(value) | | summary.js:36:28:36:32 | value | | summary.js:37:27:37:32 | value1 | edges -| summary.js:5:9:5:50 | value | summary.js:6:27:6:31 | value | -| summary.js:5:17:5:50 | jQuery. ... param") | summary.js:5:9:5:50 | value | -| summary.js:6:9:6:32 | value1 | summary.js:7:27:7:32 | value1 | -| summary.js:6:18:6:32 | camelize(value) | summary.js:6:9:6:32 | value1 | +| summary.js:5:9:5:13 | value | summary.js:6:27:6:31 | value | +| summary.js:5:17:5:50 | jQuery. ... param") | summary.js:5:9:5:13 | value | +| summary.js:6:9:6:14 | value1 | summary.js:7:27:7:32 | value1 | +| summary.js:6:18:6:32 | camelize(value) | summary.js:6:9:6:14 | value1 | | summary.js:6:27:6:31 | value | summary.js:6:18:6:32 | camelize(value) | -| summary.js:11:9:11:50 | value | summary.js:12:24:12:28 | value | -| summary.js:11:17:11:50 | jQuery. ... param") | summary.js:11:9:11:50 | value | -| summary.js:12:9:12:29 | value1 | summary.js:13:27:13:32 | value1 | -| summary.js:12:18:12:29 | myfun(value) | summary.js:12:9:12:29 | value1 | +| summary.js:11:9:11:13 | value | summary.js:12:24:12:28 | value | +| summary.js:11:17:11:50 | jQuery. ... param") | summary.js:11:9:11:13 | value | +| summary.js:12:9:12:14 | value1 | summary.js:13:27:13:32 | value1 | +| summary.js:12:18:12:29 | myfun(value) | summary.js:12:9:12:14 | value1 | | summary.js:12:24:12:28 | value | summary.js:12:18:12:29 | myfun(value) | -| summary.js:17:9:17:50 | value | summary.js:18:29:18:33 | value | -| summary.js:17:17:17:50 | jQuery. ... param") | summary.js:17:9:17:50 | value | -| summary.js:18:9:18:34 | value1 | summary.js:19:27:19:32 | value1 | -| summary.js:18:18:18:34 | capitalize(value) | summary.js:18:9:18:34 | value1 | +| summary.js:17:9:17:13 | value | summary.js:18:29:18:33 | value | +| summary.js:17:17:17:50 | jQuery. ... param") | summary.js:17:9:17:13 | value | +| summary.js:18:9:18:14 | value1 | summary.js:19:27:19:32 | value1 | +| summary.js:18:18:18:34 | capitalize(value) | summary.js:18:9:18:14 | value1 | | summary.js:18:29:18:33 | value | summary.js:18:18:18:34 | capitalize(value) | -| summary.js:23:9:23:50 | value | summary.js:24:31:24:35 | value | -| summary.js:23:17:23:50 | jQuery. ... param") | summary.js:23:9:23:50 | value | -| summary.js:24:9:24:36 | value1 | summary.js:25:27:25:32 | value1 | -| summary.js:24:18:24:36 | escapeRegExp(value) | summary.js:24:9:24:36 | value1 | +| summary.js:23:9:23:13 | value | summary.js:24:31:24:35 | value | +| summary.js:23:17:23:50 | jQuery. ... param") | summary.js:23:9:23:13 | value | +| summary.js:24:9:24:14 | value1 | summary.js:25:27:25:32 | value1 | +| summary.js:24:18:24:36 | escapeRegExp(value) | summary.js:24:9:24:14 | value1 | | summary.js:24:31:24:35 | value | summary.js:24:18:24:36 | escapeRegExp(value) | -| summary.js:29:9:29:50 | value | summary.js:30:32:30:36 | value | -| summary.js:29:17:29:50 | jQuery. ... param") | summary.js:29:9:29:50 | value | -| summary.js:30:9:30:37 | value1 | summary.js:31:27:31:32 | value1 | -| summary.js:30:18:30:37 | formatMessage(value) | summary.js:30:9:30:37 | value1 | +| summary.js:29:9:29:13 | value | summary.js:30:32:30:36 | value | +| summary.js:29:17:29:50 | jQuery. ... param") | summary.js:29:9:29:13 | value | +| summary.js:30:9:30:14 | value1 | summary.js:31:27:31:32 | value1 | +| summary.js:30:18:30:37 | formatMessage(value) | summary.js:30:9:30:14 | value1 | | summary.js:30:32:30:36 | value | summary.js:30:18:30:37 | formatMessage(value) | -| summary.js:35:9:35:50 | value | summary.js:36:28:36:32 | value | -| summary.js:35:17:35:50 | jQuery. ... param") | summary.js:35:9:35:50 | value | -| summary.js:36:9:36:33 | value1 | summary.js:37:27:37:32 | value1 | -| summary.js:36:18:36:33 | hyphenate(value) | summary.js:36:9:36:33 | value1 | +| summary.js:35:9:35:13 | value | summary.js:36:28:36:32 | value | +| summary.js:35:17:35:50 | jQuery. ... param") | summary.js:35:9:35:13 | value | +| summary.js:36:9:36:14 | value1 | summary.js:37:27:37:32 | value1 | +| summary.js:36:18:36:33 | hyphenate(value) | summary.js:36:9:36:14 | value1 | | summary.js:36:28:36:32 | value | summary.js:36:18:36:33 | hyphenate(value) | #select | summary.js:7:27:7:32 | value1 | summary.js:5:17:5:50 | jQuery. ... param") | summary.js:7:27:7:32 | value1 | XSS vulnerability due to $@. | summary.js:5:17:5:50 | jQuery. ... param") | user-provided value | diff --git a/javascript/frameworks/ui5/test/queries/UI5FormulaInjection/formula-custom-control-sanitized/UI5FormulaInjection.expected b/javascript/frameworks/ui5/test/queries/UI5FormulaInjection/formula-custom-control-sanitized/UI5FormulaInjection.expected index 9e34dd89..30f6ea5e 100644 --- a/javascript/frameworks/ui5/test/queries/UI5FormulaInjection/formula-custom-control-sanitized/UI5FormulaInjection.expected +++ b/javascript/frameworks/ui5/test/queries/UI5FormulaInjection/formula-custom-control-sanitized/UI5FormulaInjection.expected @@ -1,8 +1,8 @@ nodes | webapp/control/xss.js:9:23:9:40 | { type: "string" } | -| webapp/control/xss.js:15:21:15:46 | value | +| webapp/control/xss.js:15:21:15:25 | value | | webapp/control/xss.js:15:29:15:46 | oControl.getText() | -| webapp/control/xss.js:17:21:17:59 | xssSanitized | +| webapp/control/xss.js:17:21:17:32 | xssSanitized | | webapp/control/xss.js:17:36:17:59 | encodeX ... value)) | | webapp/control/xss.js:17:46:17:58 | String(value) | | webapp/control/xss.js:17:53:17:57 | value | @@ -13,10 +13,10 @@ nodes edges | webapp/control/xss.js:9:23:9:40 | { type: "string" } | webapp/control/xss.js:15:29:15:46 | oControl.getText() | | webapp/control/xss.js:9:23:9:40 | { type: "string" } | webapp/controller/app.controller.js:9:17:9:27 | input: null | -| webapp/control/xss.js:15:21:15:46 | value | webapp/control/xss.js:17:53:17:57 | value | -| webapp/control/xss.js:15:29:15:46 | oControl.getText() | webapp/control/xss.js:15:21:15:46 | value | -| webapp/control/xss.js:17:21:17:59 | xssSanitized | webapp/control/xss.js:23:27:23:38 | xssSanitized | -| webapp/control/xss.js:17:36:17:59 | encodeX ... value)) | webapp/control/xss.js:17:21:17:59 | xssSanitized | +| webapp/control/xss.js:15:21:15:25 | value | webapp/control/xss.js:17:53:17:57 | value | +| webapp/control/xss.js:15:29:15:46 | oControl.getText() | webapp/control/xss.js:15:21:15:25 | value | +| webapp/control/xss.js:17:21:17:32 | xssSanitized | webapp/control/xss.js:23:27:23:38 | xssSanitized | +| webapp/control/xss.js:17:36:17:59 | encodeX ... value)) | webapp/control/xss.js:17:21:17:32 | xssSanitized | | webapp/control/xss.js:17:46:17:58 | String(value) | webapp/control/xss.js:17:36:17:59 | encodeX ... value)) | | webapp/control/xss.js:17:53:17:57 | value | webapp/control/xss.js:17:46:17:58 | String(value) | | webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/control/xss.js:9:23:9:40 | { type: "string" } | diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/avoid-duplicate-alerts/LogInjection.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/avoid-duplicate-alerts/LogInjection.expected index 18d35140..a7c76d0c 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/avoid-duplicate-alerts/LogInjection.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/avoid-duplicate-alerts/LogInjection.expected @@ -1,40 +1,40 @@ edges -| LogInjectionTest.js:6:9:6:50 | value | LogInjectionTest.js:7:34:7:38 | value | provenance | | -| LogInjectionTest.js:6:17:6:50 | jQuery. ... param") | LogInjectionTest.js:6:9:6:50 | value | provenance | | +| LogInjectionTest.js:6:9:6:13 | value | LogInjectionTest.js:7:34:7:38 | value | provenance | | +| LogInjectionTest.js:6:17:6:50 | jQuery. ... param") | LogInjectionTest.js:6:9:6:13 | value | provenance | | | LogInjectionTest.js:7:34:7:38 | value | LogInjectionTest.js:7:18:7:40 | `[INFO] ... value}` | provenance | | -| LogInjectionTest.js:13:9:13:36 | q | LogInjectionTest.js:14:17:14:17 | q | provenance | | -| LogInjectionTest.js:13:13:13:36 | url.par ... , true) | LogInjectionTest.js:13:9:13:36 | q | provenance | | +| LogInjectionTest.js:13:9:13:9 | q | LogInjectionTest.js:14:17:14:17 | q | provenance | | +| LogInjectionTest.js:13:13:13:36 | url.par ... , true) | LogInjectionTest.js:13:9:13:9 | q | provenance | | | LogInjectionTest.js:13:23:13:29 | req.url | LogInjectionTest.js:13:13:13:36 | url.par ... , true) | provenance | | -| LogInjectionTest.js:14:9:14:32 | value | LogInjectionTest.js:15:34:15:38 | value | provenance | | -| LogInjectionTest.js:14:17:14:17 | q | LogInjectionTest.js:14:9:14:32 | value | provenance | | +| LogInjectionTest.js:14:9:14:13 | value | LogInjectionTest.js:15:34:15:38 | value | provenance | | +| LogInjectionTest.js:14:17:14:17 | q | LogInjectionTest.js:14:9:14:13 | value | provenance | | | LogInjectionTest.js:15:34:15:38 | value | LogInjectionTest.js:15:18:15:40 | `[INFO] ... value}` | provenance | | -| LogInjectionTest.js:21:9:21:36 | q | LogInjectionTest.js:22:17:22:17 | q | provenance | | -| LogInjectionTest.js:21:13:21:36 | url.par ... , true) | LogInjectionTest.js:21:9:21:36 | q | provenance | | +| LogInjectionTest.js:21:9:21:9 | q | LogInjectionTest.js:22:17:22:17 | q | provenance | | +| LogInjectionTest.js:21:13:21:36 | url.par ... , true) | LogInjectionTest.js:21:9:21:9 | q | provenance | | | LogInjectionTest.js:21:23:21:29 | req.url | LogInjectionTest.js:21:13:21:36 | url.par ... , true) | provenance | | -| LogInjectionTest.js:22:9:22:32 | value | LogInjectionTest.js:23:39:23:43 | value | provenance | | -| LogInjectionTest.js:22:17:22:17 | q | LogInjectionTest.js:22:9:22:32 | value | provenance | | -| LogInjectionTest.js:23:9:23:44 | value1 | LogInjectionTest.js:24:34:24:39 | value1 | provenance | | -| LogInjectionTest.js:23:18:23:44 | jQuery. ... (value) | LogInjectionTest.js:23:9:23:44 | value1 | provenance | | +| LogInjectionTest.js:22:9:22:13 | value | LogInjectionTest.js:23:39:23:43 | value | provenance | | +| LogInjectionTest.js:22:17:22:17 | q | LogInjectionTest.js:22:9:22:13 | value | provenance | | +| LogInjectionTest.js:23:9:23:14 | value1 | LogInjectionTest.js:24:34:24:39 | value1 | provenance | | +| LogInjectionTest.js:23:18:23:44 | jQuery. ... (value) | LogInjectionTest.js:23:9:23:14 | value1 | provenance | | | LogInjectionTest.js:23:39:23:43 | value | LogInjectionTest.js:23:18:23:44 | jQuery. ... (value) | provenance | | | LogInjectionTest.js:24:34:24:39 | value1 | LogInjectionTest.js:24:18:24:41 | `[INFO] ... alue1}` | provenance | | nodes -| LogInjectionTest.js:6:9:6:50 | value | semmle.label | value | +| LogInjectionTest.js:6:9:6:13 | value | semmle.label | value | | LogInjectionTest.js:6:17:6:50 | jQuery. ... param") | semmle.label | jQuery. ... param") | | LogInjectionTest.js:7:18:7:40 | `[INFO] ... value}` | semmle.label | `[INFO] ... value}` | | LogInjectionTest.js:7:34:7:38 | value | semmle.label | value | -| LogInjectionTest.js:13:9:13:36 | q | semmle.label | q | +| LogInjectionTest.js:13:9:13:9 | q | semmle.label | q | | LogInjectionTest.js:13:13:13:36 | url.par ... , true) | semmle.label | url.par ... , true) | | LogInjectionTest.js:13:23:13:29 | req.url | semmle.label | req.url | -| LogInjectionTest.js:14:9:14:32 | value | semmle.label | value | +| LogInjectionTest.js:14:9:14:13 | value | semmle.label | value | | LogInjectionTest.js:14:17:14:17 | q | semmle.label | q | | LogInjectionTest.js:15:18:15:40 | `[INFO] ... value}` | semmle.label | `[INFO] ... value}` | | LogInjectionTest.js:15:34:15:38 | value | semmle.label | value | -| LogInjectionTest.js:21:9:21:36 | q | semmle.label | q | +| LogInjectionTest.js:21:9:21:9 | q | semmle.label | q | | LogInjectionTest.js:21:13:21:36 | url.par ... , true) | semmle.label | url.par ... , true) | | LogInjectionTest.js:21:23:21:29 | req.url | semmle.label | req.url | -| LogInjectionTest.js:22:9:22:32 | value | semmle.label | value | +| LogInjectionTest.js:22:9:22:13 | value | semmle.label | value | | LogInjectionTest.js:22:17:22:17 | q | semmle.label | q | -| LogInjectionTest.js:23:9:23:44 | value1 | semmle.label | value1 | +| LogInjectionTest.js:23:9:23:14 | value1 | semmle.label | value1 | | LogInjectionTest.js:23:18:23:44 | jQuery. ... (value) | semmle.label | jQuery. ... (value) | | LogInjectionTest.js:23:39:23:43 | value | semmle.label | value | | LogInjectionTest.js:24:18:24:41 | `[INFO] ... alue1}` | semmle.label | `[INFO] ... alue1}` | diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/avoid-duplicate-alerts/UI5LogInjection.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/avoid-duplicate-alerts/UI5LogInjection.expected index 4ead0a63..0ecf5ef9 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/avoid-duplicate-alerts/UI5LogInjection.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/avoid-duplicate-alerts/UI5LogInjection.expected @@ -1,37 +1,37 @@ nodes -| LogInjectionTest.js:6:9:6:50 | value | +| LogInjectionTest.js:6:9:6:13 | value | | LogInjectionTest.js:6:17:6:50 | jQuery. ... param") | | LogInjectionTest.js:8:26:8:30 | value | -| LogInjectionTest.js:13:9:13:36 | q | +| LogInjectionTest.js:13:9:13:9 | q | | LogInjectionTest.js:13:13:13:36 | url.par ... , true) | | LogInjectionTest.js:13:23:13:29 | req.url | -| LogInjectionTest.js:14:9:14:32 | value | +| LogInjectionTest.js:14:9:14:13 | value | | LogInjectionTest.js:14:17:14:17 | q | | LogInjectionTest.js:16:26:16:30 | value | -| LogInjectionTest.js:21:9:21:36 | q | +| LogInjectionTest.js:21:9:21:9 | q | | LogInjectionTest.js:21:13:21:36 | url.par ... , true) | | LogInjectionTest.js:21:23:21:29 | req.url | -| LogInjectionTest.js:22:9:22:32 | value | +| LogInjectionTest.js:22:9:22:13 | value | | LogInjectionTest.js:22:17:22:17 | q | -| LogInjectionTest.js:23:9:23:44 | value1 | +| LogInjectionTest.js:23:9:23:14 | value1 | | LogInjectionTest.js:23:18:23:44 | jQuery. ... (value) | | LogInjectionTest.js:23:39:23:43 | value | | LogInjectionTest.js:25:26:25:31 | value1 | edges -| LogInjectionTest.js:6:9:6:50 | value | LogInjectionTest.js:8:26:8:30 | value | -| LogInjectionTest.js:6:17:6:50 | jQuery. ... param") | LogInjectionTest.js:6:9:6:50 | value | -| LogInjectionTest.js:13:9:13:36 | q | LogInjectionTest.js:14:17:14:17 | q | -| LogInjectionTest.js:13:13:13:36 | url.par ... , true) | LogInjectionTest.js:13:9:13:36 | q | +| LogInjectionTest.js:6:9:6:13 | value | LogInjectionTest.js:8:26:8:30 | value | +| LogInjectionTest.js:6:17:6:50 | jQuery. ... param") | LogInjectionTest.js:6:9:6:13 | value | +| LogInjectionTest.js:13:9:13:9 | q | LogInjectionTest.js:14:17:14:17 | q | +| LogInjectionTest.js:13:13:13:36 | url.par ... , true) | LogInjectionTest.js:13:9:13:9 | q | | LogInjectionTest.js:13:23:13:29 | req.url | LogInjectionTest.js:13:13:13:36 | url.par ... , true) | -| LogInjectionTest.js:14:9:14:32 | value | LogInjectionTest.js:16:26:16:30 | value | -| LogInjectionTest.js:14:17:14:17 | q | LogInjectionTest.js:14:9:14:32 | value | -| LogInjectionTest.js:21:9:21:36 | q | LogInjectionTest.js:22:17:22:17 | q | -| LogInjectionTest.js:21:13:21:36 | url.par ... , true) | LogInjectionTest.js:21:9:21:36 | q | +| LogInjectionTest.js:14:9:14:13 | value | LogInjectionTest.js:16:26:16:30 | value | +| LogInjectionTest.js:14:17:14:17 | q | LogInjectionTest.js:14:9:14:13 | value | +| LogInjectionTest.js:21:9:21:9 | q | LogInjectionTest.js:22:17:22:17 | q | +| LogInjectionTest.js:21:13:21:36 | url.par ... , true) | LogInjectionTest.js:21:9:21:9 | q | | LogInjectionTest.js:21:23:21:29 | req.url | LogInjectionTest.js:21:13:21:36 | url.par ... , true) | -| LogInjectionTest.js:22:9:22:32 | value | LogInjectionTest.js:23:39:23:43 | value | -| LogInjectionTest.js:22:17:22:17 | q | LogInjectionTest.js:22:9:22:32 | value | -| LogInjectionTest.js:23:9:23:44 | value1 | LogInjectionTest.js:25:26:25:31 | value1 | -| LogInjectionTest.js:23:18:23:44 | jQuery. ... (value) | LogInjectionTest.js:23:9:23:44 | value1 | +| LogInjectionTest.js:22:9:22:13 | value | LogInjectionTest.js:23:39:23:43 | value | +| LogInjectionTest.js:22:17:22:17 | q | LogInjectionTest.js:22:9:22:13 | value | +| LogInjectionTest.js:23:9:23:14 | value1 | LogInjectionTest.js:25:26:25:31 | value1 | +| LogInjectionTest.js:23:18:23:44 | jQuery. ... (value) | LogInjectionTest.js:23:9:23:14 | value1 | | LogInjectionTest.js:23:39:23:43 | value | LogInjectionTest.js:23:18:23:44 | jQuery. ... (value) | #select | LogInjectionTest.js:8:26:8:30 | value | LogInjectionTest.js:6:17:6:50 | jQuery. ... param") | LogInjectionTest.js:8:26:8:30 | value | Log entry depends on a $@. | LogInjectionTest.js:6:17:6:50 | jQuery. ... param") | user-provided value | diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-custom-control-sanitized/UI5LogInjection.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-custom-control-sanitized/UI5LogInjection.expected index 9d5f6219..f11a631d 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-custom-control-sanitized/UI5LogInjection.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-custom-control-sanitized/UI5LogInjection.expected @@ -1,8 +1,8 @@ nodes | webapp/control/xss.js:8:23:8:40 | { type: "string" } | -| webapp/control/xss.js:15:21:15:46 | value | +| webapp/control/xss.js:15:21:15:25 | value | | webapp/control/xss.js:15:29:15:46 | oControl.getText() | -| webapp/control/xss.js:16:21:16:56 | sanitized | +| webapp/control/xss.js:16:21:16:29 | sanitized | | webapp/control/xss.js:16:33:16:56 | encodeX ... value)) | | webapp/control/xss.js:16:43:16:55 | String(value) | | webapp/control/xss.js:16:50:16:54 | value | @@ -13,10 +13,10 @@ nodes edges | webapp/control/xss.js:8:23:8:40 | { type: "string" } | webapp/control/xss.js:15:29:15:46 | oControl.getText() | | webapp/control/xss.js:8:23:8:40 | { type: "string" } | webapp/controller/app.controller.js:9:17:9:27 | input: null | -| webapp/control/xss.js:15:21:15:46 | value | webapp/control/xss.js:16:50:16:54 | value | -| webapp/control/xss.js:15:29:15:46 | oControl.getText() | webapp/control/xss.js:15:21:15:46 | value | -| webapp/control/xss.js:16:21:16:56 | sanitized | webapp/control/xss.js:17:38:17:46 | sanitized | -| webapp/control/xss.js:16:33:16:56 | encodeX ... value)) | webapp/control/xss.js:16:21:16:56 | sanitized | +| webapp/control/xss.js:15:21:15:25 | value | webapp/control/xss.js:16:50:16:54 | value | +| webapp/control/xss.js:15:29:15:46 | oControl.getText() | webapp/control/xss.js:15:21:15:25 | value | +| webapp/control/xss.js:16:21:16:29 | sanitized | webapp/control/xss.js:17:38:17:46 | sanitized | +| webapp/control/xss.js:16:33:16:56 | encodeX ... value)) | webapp/control/xss.js:16:21:16:29 | sanitized | | webapp/control/xss.js:16:43:16:55 | String(value) | webapp/control/xss.js:16:33:16:56 | encodeX ... value)) | | webapp/control/xss.js:16:50:16:54 | value | webapp/control/xss.js:16:43:16:55 | String(value) | | webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/control/xss.js:8:23:8:40 | { type: "string" } | diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/UI5LogInjection.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/UI5LogInjection.expected index 850eebdc..7d3b51d3 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/UI5LogInjection.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/UI5LogInjection.expected @@ -1,14 +1,14 @@ nodes | webapp/controller/app.controller.js:9:17:9:27 | input: null | -| webapp/controller/app.controller.js:15:17:15:52 | input | +| webapp/controller/app.controller.js:15:17:15:21 | input | | webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | | webapp/controller/app.controller.js:17:34:17:38 | input | | webapp/view/app.view.xml:6:5:8:28 | value={/input} | edges | webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | | webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/view/app.view.xml:6:5:8:28 | value={/input} | -| webapp/controller/app.controller.js:15:17:15:52 | input | webapp/controller/app.controller.js:17:34:17:38 | input | -| webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | webapp/controller/app.controller.js:15:17:15:52 | input | +| webapp/controller/app.controller.js:15:17:15:21 | input | webapp/controller/app.controller.js:17:34:17:38 | input | +| webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | webapp/controller/app.controller.js:15:17:15:21 | input | | webapp/view/app.view.xml:6:5:8:28 | value={/input} | webapp/controller/app.controller.js:9:17:9:27 | input: null | | webapp/view/app.view.xml:6:5:8:28 | value={/input} | webapp/controller/app.controller.js:12:26:12:45 | new JSONModel(oData) | #select diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/UI5UnsafeLogAccess.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/UI5UnsafeLogAccess.expected index f05e5f1f..942e6939 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/UI5UnsafeLogAccess.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-notifications/UI5UnsafeLogAccess.expected @@ -1,14 +1,14 @@ nodes | webapp/controller/app.controller.js:9:17:9:27 | input: null | -| webapp/controller/app.controller.js:15:17:15:52 | input | +| webapp/controller/app.controller.js:15:17:15:21 | input | | webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | | webapp/controller/app.controller.js:17:34:17:38 | input | | webapp/view/app.view.xml:6:5:8:28 | value={/input} | edges | webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | | webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/view/app.view.xml:6:5:8:28 | value={/input} | -| webapp/controller/app.controller.js:15:17:15:52 | input | webapp/controller/app.controller.js:17:34:17:38 | input | -| webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | webapp/controller/app.controller.js:15:17:15:52 | input | +| webapp/controller/app.controller.js:15:17:15:21 | input | webapp/controller/app.controller.js:17:34:17:38 | input | +| webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | webapp/controller/app.controller.js:15:17:15:21 | input | | webapp/view/app.view.xml:6:5:8:28 | value={/input} | webapp/controller/app.controller.js:9:17:9:27 | input: null | | webapp/view/app.view.xml:6:5:8:28 | value={/input} | webapp/controller/app.controller.js:12:26:12:45 | new JSONModel(oData) | #select diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5LogInjection.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5LogInjection.expected index db6c032c..982a288f 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5LogInjection.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5LogInjection.expected @@ -1,6 +1,6 @@ nodes | webapp/controller/app.controller.js:11:11:11:21 | input: null | -| webapp/controller/app.controller.js:17:13:17:48 | input | +| webapp/controller/app.controller.js:17:13:17:17 | input | | webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | | webapp/controller/app.controller.js:18:30:18:34 | input | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | @@ -10,8 +10,8 @@ edges | webapp/controller/app.controller.js:11:11:11:21 | input: null | webapp/view/app.view.xml:5:5:7:28 | value={/input} | | webapp/controller/app.controller.js:12:11:12:22 | output: null | webapp/view/app.view.xml:8:5:8:37 | content={/output} | | webapp/controller/app.controller.js:14:22:14:41 | new JSONModel(oData) | webapp/view/app.view.xml:8:5:8:37 | content={/output} | -| webapp/controller/app.controller.js:17:13:17:48 | input | webapp/controller/app.controller.js:18:30:18:34 | input | -| webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | webapp/controller/app.controller.js:17:13:17:48 | input | +| webapp/controller/app.controller.js:17:13:17:17 | input | webapp/controller/app.controller.js:18:30:18:34 | input | +| webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | webapp/controller/app.controller.js:17:13:17:17 | input | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:11:11:11:21 | input: null | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:14:22:14:41 | new JSONModel(oData) | | webapp/view/app.view.xml:8:5:8:37 | content={/output} | webapp/controller/app.controller.js:12:11:12:22 | output: null | diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5LogsToHttp.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5LogsToHttp.expected index f6ab248c..7af3a2f4 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5LogsToHttp.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5LogsToHttp.expected @@ -1,12 +1,12 @@ nodes | webapp/controller/app.controller.js:11:11:11:21 | input: null | -| webapp/controller/app.controller.js:17:13:17:48 | input | +| webapp/controller/app.controller.js:17:13:17:17 | input | | webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | | webapp/controller/app.controller.js:18:30:18:34 | input | | webapp/utils/CustomLogListener.js:9:29:9:34 | oEvent | | webapp/utils/CustomLogListener.js:13:19:13:24 | oEvent | | webapp/utils/CustomLogListener.js:13:19:13:32 | oEvent.message | -| webapp/utils/LogEntriesToHttp.js:7:13:7:52 | message | +| webapp/utils/LogEntriesToHttp.js:7:13:7:19 | message | | webapp/utils/LogEntriesToHttp.js:7:23:7:41 | Log.getLogEntries() | | webapp/utils/LogEntriesToHttp.js:11:19:11:25 | message | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | @@ -16,14 +16,14 @@ edges | webapp/controller/app.controller.js:11:11:11:21 | input: null | webapp/view/app.view.xml:5:5:7:28 | value={/input} | | webapp/controller/app.controller.js:12:11:12:22 | output: null | webapp/view/app.view.xml:8:5:8:37 | content={/output} | | webapp/controller/app.controller.js:14:22:14:41 | new JSONModel(oData) | webapp/view/app.view.xml:8:5:8:37 | content={/output} | -| webapp/controller/app.controller.js:17:13:17:48 | input | webapp/controller/app.controller.js:18:30:18:34 | input | -| webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | webapp/controller/app.controller.js:17:13:17:48 | input | +| webapp/controller/app.controller.js:17:13:17:17 | input | webapp/controller/app.controller.js:18:30:18:34 | input | +| webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | webapp/controller/app.controller.js:17:13:17:17 | input | | webapp/controller/app.controller.js:18:30:18:34 | input | webapp/utils/CustomLogListener.js:9:29:9:34 | oEvent | | webapp/controller/app.controller.js:18:30:18:34 | input | webapp/utils/LogEntriesToHttp.js:7:23:7:41 | Log.getLogEntries() | | webapp/utils/CustomLogListener.js:9:29:9:34 | oEvent | webapp/utils/CustomLogListener.js:13:19:13:24 | oEvent | | webapp/utils/CustomLogListener.js:13:19:13:24 | oEvent | webapp/utils/CustomLogListener.js:13:19:13:32 | oEvent.message | -| webapp/utils/LogEntriesToHttp.js:7:13:7:52 | message | webapp/utils/LogEntriesToHttp.js:11:19:11:25 | message | -| webapp/utils/LogEntriesToHttp.js:7:23:7:41 | Log.getLogEntries() | webapp/utils/LogEntriesToHttp.js:7:13:7:52 | message | +| webapp/utils/LogEntriesToHttp.js:7:13:7:19 | message | webapp/utils/LogEntriesToHttp.js:11:19:11:25 | message | +| webapp/utils/LogEntriesToHttp.js:7:23:7:41 | Log.getLogEntries() | webapp/utils/LogEntriesToHttp.js:7:13:7:19 | message | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:11:11:11:21 | input: null | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:14:22:14:41 | new JSONModel(oData) | | webapp/view/app.view.xml:8:5:8:37 | content={/output} | webapp/controller/app.controller.js:12:11:12:22 | output: null | diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5UnsafeLogAccess.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5UnsafeLogAccess.expected index d032912b..2df825a4 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5UnsafeLogAccess.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5UnsafeLogAccess.expected @@ -1,6 +1,6 @@ nodes | webapp/controller/app.controller.js:11:11:11:21 | input: null | -| webapp/controller/app.controller.js:17:13:17:48 | input | +| webapp/controller/app.controller.js:17:13:17:17 | input | | webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | | webapp/controller/app.controller.js:18:30:18:34 | input | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | @@ -10,8 +10,8 @@ edges | webapp/controller/app.controller.js:11:11:11:21 | input: null | webapp/view/app.view.xml:5:5:7:28 | value={/input} | | webapp/controller/app.controller.js:12:11:12:22 | output: null | webapp/view/app.view.xml:8:5:8:37 | content={/output} | | webapp/controller/app.controller.js:14:22:14:41 | new JSONModel(oData) | webapp/view/app.view.xml:8:5:8:37 | content={/output} | -| webapp/controller/app.controller.js:17:13:17:48 | input | webapp/controller/app.controller.js:18:30:18:34 | input | -| webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | webapp/controller/app.controller.js:17:13:17:48 | input | +| webapp/controller/app.controller.js:17:13:17:17 | input | webapp/controller/app.controller.js:18:30:18:34 | input | +| webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | webapp/controller/app.controller.js:17:13:17:17 | input | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:11:11:11:21 | input: null | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:14:22:14:41 | new JSONModel(oData) | | webapp/view/app.view.xml:8:5:8:37 | content={/output} | webapp/controller/app.controller.js:12:11:12:22 | output: null | diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5Xss.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5Xss.expected index c7d2a3ec..09d4dee3 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5Xss.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-entry-flows-to-sinks/UI5Xss.expected @@ -1,6 +1,6 @@ nodes | webapp/controller/app.controller.js:11:11:11:21 | input: null | -| webapp/controller/app.controller.js:17:13:17:48 | input | +| webapp/controller/app.controller.js:17:13:17:17 | input | | webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | | webapp/controller/app.controller.js:18:30:18:34 | input | | webapp/utils/CustomLogListener.js:9:29:9:34 | oEvent | @@ -13,8 +13,8 @@ edges | webapp/controller/app.controller.js:11:11:11:21 | input: null | webapp/view/app.view.xml:5:5:7:28 | value={/input} | | webapp/controller/app.controller.js:12:11:12:22 | output: null | webapp/view/app.view.xml:8:5:8:37 | content={/output} | | webapp/controller/app.controller.js:14:22:14:41 | new JSONModel(oData) | webapp/view/app.view.xml:8:5:8:37 | content={/output} | -| webapp/controller/app.controller.js:17:13:17:48 | input | webapp/controller/app.controller.js:18:30:18:34 | input | -| webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | webapp/controller/app.controller.js:17:13:17:48 | input | +| webapp/controller/app.controller.js:17:13:17:17 | input | webapp/controller/app.controller.js:18:30:18:34 | input | +| webapp/controller/app.controller.js:17:21:17:48 | oModel. ... input") | webapp/controller/app.controller.js:17:13:17:17 | input | | webapp/controller/app.controller.js:18:30:18:34 | input | webapp/utils/CustomLogListener.js:9:29:9:34 | oEvent | | webapp/utils/CustomLogListener.js:9:29:9:34 | oEvent | webapp/utils/CustomLogListener.js:16:31:16:36 | oEvent | | webapp/utils/CustomLogListener.js:16:31:16:36 | oEvent | webapp/utils/CustomLogListener.js:16:31:16:44 | oEvent.message | diff --git a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-html-control-df/UI5LogInjection.expected b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-html-control-df/UI5LogInjection.expected index 23487ae8..e50e20d8 100644 --- a/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-html-control-df/UI5LogInjection.expected +++ b/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-html-control-df/UI5LogInjection.expected @@ -1,6 +1,6 @@ nodes | webapp/controller/app.controller.js:9:17:9:27 | input: null | -| webapp/controller/app.controller.js:15:17:15:52 | input | +| webapp/controller/app.controller.js:15:17:15:21 | input | | webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | | webapp/controller/app.controller.js:17:34:17:38 | input | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | @@ -10,8 +10,8 @@ edges | webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/view/app.view.xml:5:5:7:28 | value={/input} | | webapp/controller/app.controller.js:10:17:10:28 | output: null | webapp/view/app.view.xml:8:5:8:37 | content={/output} | | webapp/controller/app.controller.js:12:26:12:45 | new JSONModel(oData) | webapp/view/app.view.xml:8:5:8:37 | content={/output} | -| webapp/controller/app.controller.js:15:17:15:52 | input | webapp/controller/app.controller.js:17:34:17:38 | input | -| webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | webapp/controller/app.controller.js:15:17:15:52 | input | +| webapp/controller/app.controller.js:15:17:15:21 | input | webapp/controller/app.controller.js:17:34:17:38 | input | +| webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | webapp/controller/app.controller.js:15:17:15:21 | input | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:9:17:9:27 | input: null | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:12:26:12:45 | new JSONModel(oData) | | webapp/view/app.view.xml:8:5:8:37 | content={/output} | webapp/controller/app.controller.js:10:17:10:28 | output: null | diff --git a/javascript/frameworks/ui5/test/queries/UI5PathInjection/path-custom-control-sanitized/UI5PathInjection.expected b/javascript/frameworks/ui5/test/queries/UI5PathInjection/path-custom-control-sanitized/UI5PathInjection.expected index 14fd36fd..6167683d 100644 --- a/javascript/frameworks/ui5/test/queries/UI5PathInjection/path-custom-control-sanitized/UI5PathInjection.expected +++ b/javascript/frameworks/ui5/test/queries/UI5PathInjection/path-custom-control-sanitized/UI5PathInjection.expected @@ -1,8 +1,8 @@ nodes | webapp/control/xss.js:9:23:9:40 | { type: "string" } | -| webapp/control/xss.js:15:21:15:46 | value | +| webapp/control/xss.js:15:21:15:25 | value | | webapp/control/xss.js:15:29:15:46 | oControl.getText() | -| webapp/control/xss.js:17:21:17:59 | xssSanitized | +| webapp/control/xss.js:17:21:17:32 | xssSanitized | | webapp/control/xss.js:17:36:17:59 | encodeX ... value)) | | webapp/control/xss.js:17:46:17:58 | String(value) | | webapp/control/xss.js:17:53:17:57 | value | @@ -13,10 +13,10 @@ nodes edges | webapp/control/xss.js:9:23:9:40 | { type: "string" } | webapp/control/xss.js:15:29:15:46 | oControl.getText() | | webapp/control/xss.js:9:23:9:40 | { type: "string" } | webapp/controller/app.controller.js:9:17:9:27 | input: null | -| webapp/control/xss.js:15:21:15:46 | value | webapp/control/xss.js:17:53:17:57 | value | -| webapp/control/xss.js:15:29:15:46 | oControl.getText() | webapp/control/xss.js:15:21:15:46 | value | -| webapp/control/xss.js:17:21:17:59 | xssSanitized | webapp/control/xss.js:23:43:23:54 | xssSanitized | -| webapp/control/xss.js:17:36:17:59 | encodeX ... value)) | webapp/control/xss.js:17:21:17:59 | xssSanitized | +| webapp/control/xss.js:15:21:15:25 | value | webapp/control/xss.js:17:53:17:57 | value | +| webapp/control/xss.js:15:29:15:46 | oControl.getText() | webapp/control/xss.js:15:21:15:25 | value | +| webapp/control/xss.js:17:21:17:32 | xssSanitized | webapp/control/xss.js:23:43:23:54 | xssSanitized | +| webapp/control/xss.js:17:36:17:59 | encodeX ... value)) | webapp/control/xss.js:17:21:17:32 | xssSanitized | | webapp/control/xss.js:17:46:17:58 | String(value) | webapp/control/xss.js:17:36:17:59 | encodeX ... value)) | | webapp/control/xss.js:17:53:17:57 | value | webapp/control/xss.js:17:46:17:58 | String(value) | | webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/control/xss.js:9:23:9:40 | { type: "string" } | diff --git a/javascript/frameworks/ui5/test/queries/UI5Xss/avoid-duplicate-alerts/UI5Xss.expected b/javascript/frameworks/ui5/test/queries/UI5Xss/avoid-duplicate-alerts/UI5Xss.expected index 428d109b..1413321c 100644 --- a/javascript/frameworks/ui5/test/queries/UI5Xss/avoid-duplicate-alerts/UI5Xss.expected +++ b/javascript/frameworks/ui5/test/queries/UI5Xss/avoid-duplicate-alerts/UI5Xss.expected @@ -1,25 +1,25 @@ nodes -| XssTest.js:3:9:3:50 | value | +| XssTest.js:3:9:3:13 | value | | XssTest.js:3:17:3:50 | jQuery. ... param") | | XssTest.js:5:27:5:31 | value | -| XssTest.js:10:9:10:40 | value | +| XssTest.js:10:9:10:13 | value | | XssTest.js:10:17:10:40 | documen ... .search | | XssTest.js:12:27:12:31 | value | -| XssTest.js:17:9:17:40 | value | +| XssTest.js:17:9:17:13 | value | | XssTest.js:17:17:17:40 | documen ... .search | -| XssTest.js:18:9:18:44 | value1 | +| XssTest.js:18:9:18:14 | value1 | | XssTest.js:18:18:18:44 | jQuery. ... (value) | | XssTest.js:18:39:18:43 | value | | XssTest.js:20:27:20:32 | value1 | edges -| XssTest.js:3:9:3:50 | value | XssTest.js:5:27:5:31 | value | -| XssTest.js:3:17:3:50 | jQuery. ... param") | XssTest.js:3:9:3:50 | value | -| XssTest.js:10:9:10:40 | value | XssTest.js:12:27:12:31 | value | -| XssTest.js:10:17:10:40 | documen ... .search | XssTest.js:10:9:10:40 | value | -| XssTest.js:17:9:17:40 | value | XssTest.js:18:39:18:43 | value | -| XssTest.js:17:17:17:40 | documen ... .search | XssTest.js:17:9:17:40 | value | -| XssTest.js:18:9:18:44 | value1 | XssTest.js:20:27:20:32 | value1 | -| XssTest.js:18:18:18:44 | jQuery. ... (value) | XssTest.js:18:9:18:44 | value1 | +| XssTest.js:3:9:3:13 | value | XssTest.js:5:27:5:31 | value | +| XssTest.js:3:17:3:50 | jQuery. ... param") | XssTest.js:3:9:3:13 | value | +| XssTest.js:10:9:10:13 | value | XssTest.js:12:27:12:31 | value | +| XssTest.js:10:17:10:40 | documen ... .search | XssTest.js:10:9:10:13 | value | +| XssTest.js:17:9:17:13 | value | XssTest.js:18:39:18:43 | value | +| XssTest.js:17:17:17:40 | documen ... .search | XssTest.js:17:9:17:13 | value | +| XssTest.js:18:9:18:14 | value1 | XssTest.js:20:27:20:32 | value1 | +| XssTest.js:18:18:18:44 | jQuery. ... (value) | XssTest.js:18:9:18:14 | value1 | | XssTest.js:18:39:18:43 | value | XssTest.js:18:18:18:44 | jQuery. ... (value) | #select | XssTest.js:5:27:5:31 | value | XssTest.js:3:17:3:50 | jQuery. ... param") | XssTest.js:5:27:5:31 | value | XSS vulnerability due to $@. | XssTest.js:3:17:3:50 | jQuery. ... param") | user-provided value | diff --git a/javascript/frameworks/ui5/test/queries/UI5Xss/avoid-duplicate-alerts/Xss.expected b/javascript/frameworks/ui5/test/queries/UI5Xss/avoid-duplicate-alerts/Xss.expected index 04f9ed98..8a9e7eb5 100644 --- a/javascript/frameworks/ui5/test/queries/UI5Xss/avoid-duplicate-alerts/Xss.expected +++ b/javascript/frameworks/ui5/test/queries/UI5Xss/avoid-duplicate-alerts/Xss.expected @@ -1,36 +1,36 @@ nodes -| XssTest.js:3:9:3:50 | value | semmle.label | value | +| XssTest.js:3:9:3:13 | value | semmle.label | value | | XssTest.js:3:17:3:50 | jQuery. ... param") | semmle.label | jQuery. ... param") | | XssTest.js:4:20:4:24 | value | semmle.label | value | -| XssTest.js:10:9:10:40 | value | semmle.label | value | +| XssTest.js:10:9:10:13 | value | semmle.label | value | | XssTest.js:10:17:10:40 | documen ... .search | semmle.label | documen ... .search | | XssTest.js:11:20:11:24 | value | semmle.label | value | -| XssTest.js:17:9:17:40 | value | semmle.label | value | +| XssTest.js:17:9:17:13 | value | semmle.label | value | | XssTest.js:17:17:17:40 | documen ... .search | semmle.label | documen ... .search | -| XssTest.js:18:9:18:44 | value1 | semmle.label | value1 | +| XssTest.js:18:9:18:14 | value1 | semmle.label | value1 | | XssTest.js:18:18:18:44 | jQuery. ... (value) | semmle.label | jQuery. ... (value) | | XssTest.js:18:39:18:43 | value | semmle.label | value | | XssTest.js:19:20:19:25 | value1 | semmle.label | value1 | -| XssTest.js:25:9:25:40 | value | semmle.label | value | +| XssTest.js:25:9:25:13 | value | semmle.label | value | | XssTest.js:25:17:25:40 | documen ... .search | semmle.label | documen ... .search | -| XssTest.js:26:9:26:44 | value1 | semmle.label | value1 | +| XssTest.js:26:9:26:14 | value1 | semmle.label | value1 | | XssTest.js:26:18:26:44 | jQuery. ... (value) | semmle.label | jQuery. ... (value) | | XssTest.js:26:39:26:43 | value | semmle.label | value | | XssTest.js:27:20:27:25 | value1 | semmle.label | value1 | edges -| XssTest.js:3:9:3:50 | value | XssTest.js:4:20:4:24 | value | provenance | | -| XssTest.js:3:17:3:50 | jQuery. ... param") | XssTest.js:3:9:3:50 | value | provenance | | -| XssTest.js:10:9:10:40 | value | XssTest.js:11:20:11:24 | value | provenance | | -| XssTest.js:10:17:10:40 | documen ... .search | XssTest.js:10:9:10:40 | value | provenance | | -| XssTest.js:17:9:17:40 | value | XssTest.js:18:39:18:43 | value | provenance | | -| XssTest.js:17:17:17:40 | documen ... .search | XssTest.js:17:9:17:40 | value | provenance | | -| XssTest.js:18:9:18:44 | value1 | XssTest.js:19:20:19:25 | value1 | provenance | | -| XssTest.js:18:18:18:44 | jQuery. ... (value) | XssTest.js:18:9:18:44 | value1 | provenance | | +| XssTest.js:3:9:3:13 | value | XssTest.js:4:20:4:24 | value | provenance | | +| XssTest.js:3:17:3:50 | jQuery. ... param") | XssTest.js:3:9:3:13 | value | provenance | | +| XssTest.js:10:9:10:13 | value | XssTest.js:11:20:11:24 | value | provenance | | +| XssTest.js:10:17:10:40 | documen ... .search | XssTest.js:10:9:10:13 | value | provenance | | +| XssTest.js:17:9:17:13 | value | XssTest.js:18:39:18:43 | value | provenance | | +| XssTest.js:17:17:17:40 | documen ... .search | XssTest.js:17:9:17:13 | value | provenance | | +| XssTest.js:18:9:18:14 | value1 | XssTest.js:19:20:19:25 | value1 | provenance | | +| XssTest.js:18:18:18:44 | jQuery. ... (value) | XssTest.js:18:9:18:14 | value1 | provenance | | | XssTest.js:18:39:18:43 | value | XssTest.js:18:18:18:44 | jQuery. ... (value) | provenance | | -| XssTest.js:25:9:25:40 | value | XssTest.js:26:39:26:43 | value | provenance | | -| XssTest.js:25:17:25:40 | documen ... .search | XssTest.js:25:9:25:40 | value | provenance | | -| XssTest.js:26:9:26:44 | value1 | XssTest.js:27:20:27:25 | value1 | provenance | | -| XssTest.js:26:18:26:44 | jQuery. ... (value) | XssTest.js:26:9:26:44 | value1 | provenance | | +| XssTest.js:25:9:25:13 | value | XssTest.js:26:39:26:43 | value | provenance | | +| XssTest.js:25:17:25:40 | documen ... .search | XssTest.js:25:9:25:13 | value | provenance | | +| XssTest.js:26:9:26:14 | value1 | XssTest.js:27:20:27:25 | value1 | provenance | | +| XssTest.js:26:18:26:44 | jQuery. ... (value) | XssTest.js:26:9:26:14 | value1 | provenance | | | XssTest.js:26:39:26:43 | value | XssTest.js:26:18:26:44 | jQuery. ... (value) | provenance | | subpaths #select diff --git a/javascript/frameworks/ui5/test/queries/UI5Xss/xss-book-example/UI5Xss.expected b/javascript/frameworks/ui5/test/queries/UI5Xss/xss-book-example/UI5Xss.expected index 54354b14..2446f03a 100644 --- a/javascript/frameworks/ui5/test/queries/UI5Xss/xss-book-example/UI5Xss.expected +++ b/javascript/frameworks/ui5/test/queries/UI5Xss/xss-book-example/UI5Xss.expected @@ -1,13 +1,13 @@ nodes -| webapp/controller/App.Controller.js:23:11:23:47 | searchValue | +| webapp/controller/App.Controller.js:23:11:23:21 | searchValue | | webapp/controller/App.Controller.js:23:25:23:47 | oSearch ... Value() | | webapp/controller/App.Controller.js:27:34:27:44 | searchValue | | webapp/controls/Book.js:17:13:17:30 | { type: "string" } | | webapp/controls/Book.js:132:7:134:15 | "
T ...
" | | webapp/controls/Book.js:133:8:133:26 | oControl.getTitle() | edges -| webapp/controller/App.Controller.js:23:11:23:47 | searchValue | webapp/controller/App.Controller.js:27:34:27:44 | searchValue | -| webapp/controller/App.Controller.js:23:25:23:47 | oSearch ... Value() | webapp/controller/App.Controller.js:23:11:23:47 | searchValue | +| webapp/controller/App.Controller.js:23:11:23:21 | searchValue | webapp/controller/App.Controller.js:27:34:27:44 | searchValue | +| webapp/controller/App.Controller.js:23:25:23:47 | oSearch ... Value() | webapp/controller/App.Controller.js:23:11:23:21 | searchValue | | webapp/controller/App.Controller.js:27:34:27:44 | searchValue | webapp/controls/Book.js:17:13:17:30 | { type: "string" } | | webapp/controls/Book.js:17:13:17:30 | { type: "string" } | webapp/controls/Book.js:133:8:133:26 | oControl.getTitle() | | webapp/controls/Book.js:133:8:133:26 | oControl.getTitle() | webapp/controls/Book.js:132:7:134:15 | "
T ...
" | diff --git a/javascript/frameworks/ui5/test/queries/UI5Xss/xss-event-handlers/UI5Xss.expected b/javascript/frameworks/ui5/test/queries/UI5Xss/xss-event-handlers/UI5Xss.expected index 29bcdc2b..0277df30 100644 --- a/javascript/frameworks/ui5/test/queries/UI5Xss/xss-event-handlers/UI5Xss.expected +++ b/javascript/frameworks/ui5/test/queries/UI5Xss/xss-event-handlers/UI5Xss.expected @@ -1,12 +1,12 @@ nodes | webapp/controller/app.controller.js:8:26:8:50 | this.ge ... Model() | -| webapp/controller/app.controller.js:9:17:9:52 | input | +| webapp/controller/app.controller.js:9:17:9:21 | input | | webapp/controller/app.controller.js:9:25:9:52 | oModel. ... input') | | webapp/controller/app.controller.js:10:44:10:48 | input | -| webapp/controller/app.controller.js:18:17:18:59 | sInputValue | +| webapp/controller/app.controller.js:18:17:18:27 | sInputValue | | webapp/controller/app.controller.js:18:31:18:59 | oEvent. ... Value() | | webapp/controller/app.controller.js:19:44:19:54 | sInputValue | -| webapp/controller/app.controller.js:26:17:26:41 | value | +| webapp/controller/app.controller.js:26:17:26:21 | value | | webapp/controller/app.controller.js:26:25:26:41 | oInput.getValue() | | webapp/controller/app.controller.js:27:36:27:40 | value | | webapp/controller/app.controller.js:31:17:31:27 | input: null | @@ -18,15 +18,15 @@ nodes | webapp/view/app.view.xml:17:5:17:39 | content={/output3} | edges | webapp/controller/app.controller.js:8:26:8:50 | this.ge ... Model() | webapp/controller/app.controller.js:9:25:9:52 | oModel. ... input') | -| webapp/controller/app.controller.js:9:17:9:52 | input | webapp/controller/app.controller.js:10:44:10:48 | input | -| webapp/controller/app.controller.js:9:25:9:52 | oModel. ... input') | webapp/controller/app.controller.js:9:17:9:52 | input | +| webapp/controller/app.controller.js:9:17:9:21 | input | webapp/controller/app.controller.js:10:44:10:48 | input | +| webapp/controller/app.controller.js:9:25:9:52 | oModel. ... input') | webapp/controller/app.controller.js:9:17:9:21 | input | | webapp/controller/app.controller.js:10:44:10:48 | input | webapp/controller/app.controller.js:8:26:8:50 | this.ge ... Model() | | webapp/controller/app.controller.js:10:44:10:48 | input | webapp/controller/app.controller.js:32:17:32:29 | output1: null | -| webapp/controller/app.controller.js:18:17:18:59 | sInputValue | webapp/controller/app.controller.js:19:44:19:54 | sInputValue | -| webapp/controller/app.controller.js:18:31:18:59 | oEvent. ... Value() | webapp/controller/app.controller.js:18:17:18:59 | sInputValue | +| webapp/controller/app.controller.js:18:17:18:27 | sInputValue | webapp/controller/app.controller.js:19:44:19:54 | sInputValue | +| webapp/controller/app.controller.js:18:31:18:59 | oEvent. ... Value() | webapp/controller/app.controller.js:18:17:18:27 | sInputValue | | webapp/controller/app.controller.js:19:44:19:54 | sInputValue | webapp/controller/app.controller.js:34:17:34:29 | output3: null | -| webapp/controller/app.controller.js:26:17:26:41 | value | webapp/controller/app.controller.js:27:36:27:40 | value | -| webapp/controller/app.controller.js:26:25:26:41 | oInput.getValue() | webapp/controller/app.controller.js:26:17:26:41 | value | +| webapp/controller/app.controller.js:26:17:26:21 | value | webapp/controller/app.controller.js:27:36:27:40 | value | +| webapp/controller/app.controller.js:26:25:26:41 | oInput.getValue() | webapp/controller/app.controller.js:26:17:26:21 | value | | webapp/controller/app.controller.js:31:17:31:27 | input: null | webapp/controller/app.controller.js:9:25:9:52 | oModel. ... input') | | webapp/controller/app.controller.js:31:17:31:27 | input: null | webapp/view/app.view.xml:5:5:7:28 | value={/input} | | webapp/controller/app.controller.js:32:17:32:29 | output1: null | webapp/view/app.view.xml:9:5:9:39 | content={/output1} | diff --git a/javascript/frameworks/ui5/test/queries/UI5Xss/xss-html-control-df/UI5Xss.expected b/javascript/frameworks/ui5/test/queries/UI5Xss/xss-html-control-df/UI5Xss.expected index 08b4c04b..0f5359ce 100644 --- a/javascript/frameworks/ui5/test/queries/UI5Xss/xss-html-control-df/UI5Xss.expected +++ b/javascript/frameworks/ui5/test/queries/UI5Xss/xss-html-control-df/UI5Xss.expected @@ -2,7 +2,7 @@ nodes | webapp/controller/app.controller.js:9:17:9:27 | input: null | | webapp/controller/app.controller.js:10:17:10:28 | output: null | | webapp/controller/app.controller.js:12:26:12:45 | new JSONModel(oData) | -| webapp/controller/app.controller.js:15:17:15:52 | input | +| webapp/controller/app.controller.js:15:17:15:21 | input | | webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | | webapp/controller/app.controller.js:16:43:16:47 | input | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | @@ -13,8 +13,8 @@ edges | webapp/controller/app.controller.js:10:17:10:28 | output: null | webapp/view/app.view.xml:8:5:8:37 | content={/output} | | webapp/controller/app.controller.js:12:26:12:45 | new JSONModel(oData) | webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | | webapp/controller/app.controller.js:12:26:12:45 | new JSONModel(oData) | webapp/view/app.view.xml:8:5:8:37 | content={/output} | -| webapp/controller/app.controller.js:15:17:15:52 | input | webapp/controller/app.controller.js:16:43:16:47 | input | -| webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | webapp/controller/app.controller.js:15:17:15:52 | input | +| webapp/controller/app.controller.js:15:17:15:21 | input | webapp/controller/app.controller.js:16:43:16:47 | input | +| webapp/controller/app.controller.js:15:25:15:52 | oModel. ... input') | webapp/controller/app.controller.js:15:17:15:21 | input | | webapp/controller/app.controller.js:16:43:16:47 | input | webapp/controller/app.controller.js:10:17:10:28 | output: null | | webapp/controller/app.controller.js:16:43:16:47 | input | webapp/controller/app.controller.js:12:26:12:45 | new JSONModel(oData) | | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:9:17:9:27 | input: null | diff --git a/javascript/frameworks/xsjs/test/queries/XSJSReflectedXss/XSJSReflectedXss.expected b/javascript/frameworks/xsjs/test/queries/XSJSReflectedXss/XSJSReflectedXss.expected index cfb1ba86..fd64c4ee 100644 --- a/javascript/frameworks/xsjs/test/queries/XSJSReflectedXss/XSJSReflectedXss.expected +++ b/javascript/frameworks/xsjs/test/queries/XSJSReflectedXss/XSJSReflectedXss.expected @@ -1,15 +1,15 @@ edges | XSJSReflectedXss.xsjs:3:34:3:50 | requestParameters | XSJSReflectedXss.xsjs:4:20:4:36 | requestParameters | provenance | | | XSJSReflectedXss.xsjs:4:20:4:36 | requestParameters | XSJSReflectedXss.xsjs:4:10:4:47 | "
" ...
" | provenance | | -| XSJSReflectedXss.xsjs:11:7:11:67 | someParameterValue1 | XSJSReflectedXss.xsjs:13:46:13:64 | someParameterValue1 | provenance | | -| XSJSReflectedXss.xsjs:11:29:11:67 | request ... eter1") | XSJSReflectedXss.xsjs:11:7:11:67 | someParameterValue1 | provenance | | +| XSJSReflectedXss.xsjs:11:7:11:25 | someParameterValue1 | XSJSReflectedXss.xsjs:13:46:13:64 | someParameterValue1 | provenance | | +| XSJSReflectedXss.xsjs:11:29:11:67 | request ... eter1") | XSJSReflectedXss.xsjs:11:7:11:25 | someParameterValue1 | provenance | | | XSJSReflectedXss.xsjs:13:46:13:64 | someParameterValue1 | XSJSReflectedXss.xsjs:3:34:3:50 | requestParameters | provenance | | | XSJSReflectedXss.xsjs:13:46:13:64 | someParameterValue1 | XSJSReflectedXss.xsjs:13:22:13:65 | request ... Value1) | provenance | | nodes | XSJSReflectedXss.xsjs:3:34:3:50 | requestParameters | semmle.label | requestParameters | | XSJSReflectedXss.xsjs:4:10:4:47 | "
" ...
" | semmle.label | "
" ...
" | | XSJSReflectedXss.xsjs:4:20:4:36 | requestParameters | semmle.label | requestParameters | -| XSJSReflectedXss.xsjs:11:7:11:67 | someParameterValue1 | semmle.label | someParameterValue1 | +| XSJSReflectedXss.xsjs:11:7:11:25 | someParameterValue1 | semmle.label | someParameterValue1 | | XSJSReflectedXss.xsjs:11:29:11:67 | request ... eter1") | semmle.label | request ... eter1") | | XSJSReflectedXss.xsjs:13:22:13:65 | request ... Value1) | semmle.label | request ... Value1) | | XSJSReflectedXss.xsjs:13:46:13:64 | someParameterValue1 | semmle.label | someParameterValue1 | diff --git a/javascript/frameworks/xsjs/test/queries/XSJSSqlInjection/XSJSSqlInjection.expected b/javascript/frameworks/xsjs/test/queries/XSJSSqlInjection/XSJSSqlInjection.expected index 3d3f49f4..78a8559c 100644 --- a/javascript/frameworks/xsjs/test/queries/XSJSSqlInjection/XSJSSqlInjection.expected +++ b/javascript/frameworks/xsjs/test/queries/XSJSSqlInjection/XSJSSqlInjection.expected @@ -1,21 +1,21 @@ edges -| XSJSSqlInjection.xsjs:8:7:8:79 | someParameterValue1 | XSJSSqlInjection.xsjs:10:32:10:50 | someParameterValue1 | provenance | | -| XSJSSqlInjection.xsjs:8:29:8:79 | JSON.pa ... ter1")) | XSJSSqlInjection.xsjs:8:7:8:79 | someParameterValue1 | provenance | | +| XSJSSqlInjection.xsjs:8:7:8:25 | someParameterValue1 | XSJSSqlInjection.xsjs:10:32:10:50 | someParameterValue1 | provenance | | +| XSJSSqlInjection.xsjs:8:29:8:79 | JSON.pa ... ter1")) | XSJSSqlInjection.xsjs:8:7:8:25 | someParameterValue1 | provenance | | | XSJSSqlInjection.xsjs:8:40:8:78 | request ... eter1") | XSJSSqlInjection.xsjs:8:29:8:79 | JSON.pa ... ter1")) | provenance | | -| XSJSSqlInjection.xsjs:9:7:9:79 | someParameterValue2 | XSJSSqlInjection.xsjs:10:82:10:100 | someParameterValue2 | provenance | | -| XSJSSqlInjection.xsjs:9:29:9:79 | JSON.pa ... ter2")) | XSJSSqlInjection.xsjs:9:7:9:79 | someParameterValue2 | provenance | | +| XSJSSqlInjection.xsjs:9:7:9:25 | someParameterValue2 | XSJSSqlInjection.xsjs:10:82:10:100 | someParameterValue2 | provenance | | +| XSJSSqlInjection.xsjs:9:29:9:79 | JSON.pa ... ter2")) | XSJSSqlInjection.xsjs:9:7:9:25 | someParameterValue2 | provenance | | | XSJSSqlInjection.xsjs:9:40:9:78 | request ... eter2") | XSJSSqlInjection.xsjs:9:29:9:79 | JSON.pa ... ter2")) | provenance | | -| XSJSSqlInjection.xsjs:10:7:10:106 | query | XSJSSqlInjection.xsjs:13:57:13:61 | query | provenance | | -| XSJSSqlInjection.xsjs:10:32:10:50 | someParameterValue1 | XSJSSqlInjection.xsjs:10:7:10:106 | query | provenance | | -| XSJSSqlInjection.xsjs:10:82:10:100 | someParameterValue2 | XSJSSqlInjection.xsjs:10:7:10:106 | query | provenance | | +| XSJSSqlInjection.xsjs:10:7:10:11 | query | XSJSSqlInjection.xsjs:13:57:13:61 | query | provenance | | +| XSJSSqlInjection.xsjs:10:32:10:50 | someParameterValue1 | XSJSSqlInjection.xsjs:10:7:10:11 | query | provenance | | +| XSJSSqlInjection.xsjs:10:82:10:100 | someParameterValue2 | XSJSSqlInjection.xsjs:10:7:10:11 | query | provenance | | nodes -| XSJSSqlInjection.xsjs:8:7:8:79 | someParameterValue1 | semmle.label | someParameterValue1 | +| XSJSSqlInjection.xsjs:8:7:8:25 | someParameterValue1 | semmle.label | someParameterValue1 | | XSJSSqlInjection.xsjs:8:29:8:79 | JSON.pa ... ter1")) | semmle.label | JSON.pa ... ter1")) | | XSJSSqlInjection.xsjs:8:40:8:78 | request ... eter1") | semmle.label | request ... eter1") | -| XSJSSqlInjection.xsjs:9:7:9:79 | someParameterValue2 | semmle.label | someParameterValue2 | +| XSJSSqlInjection.xsjs:9:7:9:25 | someParameterValue2 | semmle.label | someParameterValue2 | | XSJSSqlInjection.xsjs:9:29:9:79 | JSON.pa ... ter2")) | semmle.label | JSON.pa ... ter2")) | | XSJSSqlInjection.xsjs:9:40:9:78 | request ... eter2") | semmle.label | request ... eter2") | -| XSJSSqlInjection.xsjs:10:7:10:106 | query | semmle.label | query | +| XSJSSqlInjection.xsjs:10:7:10:11 | query | semmle.label | query | | XSJSSqlInjection.xsjs:10:32:10:50 | someParameterValue1 | semmle.label | someParameterValue1 | | XSJSSqlInjection.xsjs:10:82:10:100 | someParameterValue2 | semmle.label | someParameterValue2 | | XSJSSqlInjection.xsjs:13:57:13:61 | query | semmle.label | query | diff --git a/javascript/frameworks/xsjs/test/queries/XSJSUrlRedirect/XSJSUrlRedirect.expected b/javascript/frameworks/xsjs/test/queries/XSJSUrlRedirect/XSJSUrlRedirect.expected index dd42601e..7ac35b12 100644 --- a/javascript/frameworks/xsjs/test/queries/XSJSUrlRedirect/XSJSUrlRedirect.expected +++ b/javascript/frameworks/xsjs/test/queries/XSJSUrlRedirect/XSJSUrlRedirect.expected @@ -1,8 +1,8 @@ edges -| XSJSUrlRedirect.xsjs:7:7:7:65 | someParameterValue | XSJSUrlRedirect.xsjs:9:38:9:55 | someParameterValue | provenance | | -| XSJSUrlRedirect.xsjs:7:28:7:65 | request ... meter") | XSJSUrlRedirect.xsjs:7:7:7:65 | someParameterValue | provenance | | +| XSJSUrlRedirect.xsjs:7:7:7:24 | someParameterValue | XSJSUrlRedirect.xsjs:9:38:9:55 | someParameterValue | provenance | | +| XSJSUrlRedirect.xsjs:7:28:7:65 | request ... meter") | XSJSUrlRedirect.xsjs:7:7:7:24 | someParameterValue | provenance | | nodes -| XSJSUrlRedirect.xsjs:7:7:7:65 | someParameterValue | semmle.label | someParameterValue | +| XSJSUrlRedirect.xsjs:7:7:7:24 | someParameterValue | semmle.label | someParameterValue | | XSJSUrlRedirect.xsjs:7:28:7:65 | request ... meter") | semmle.label | request ... meter") | | XSJSUrlRedirect.xsjs:9:38:9:55 | someParameterValue | semmle.label | someParameterValue | subpaths diff --git a/javascript/frameworks/xsjs/test/queries/XSJSZipSlip/XSJSZipSlip.expected b/javascript/frameworks/xsjs/test/queries/XSJSZipSlip/XSJSZipSlip.expected index dea6e705..6f73acfb 100644 --- a/javascript/frameworks/xsjs/test/queries/XSJSZipSlip/XSJSZipSlip.expected +++ b/javascript/frameworks/xsjs/test/queries/XSJSZipSlip/XSJSZipSlip.expected @@ -2,25 +2,25 @@ WARNING: module 'PathGraph' has been deprecated and may be removed in future (XS WARNING: type 'PathNode' has been deprecated and may be removed in future (XSJSZipSlip.ql:17,28-46) WARNING: type 'PathNode' has been deprecated and may be removed in future (XSJSZipSlip.ql:17,55-73) nodes -| XSJSZipSlip.xsjs:7:7:7:62 | zipArchive | +| XSJSZipSlip.xsjs:7:7:7:16 | zipArchive | | XSJSZipSlip.xsjs:7:20:7:62 | new $.u ... ffer()) | | XSJSZipSlip.xsjs:7:35:7:61 | request ... uffer() | | XSJSZipSlip.xsjs:7:35:7:61 | request ... uffer() | | XSJSZipSlip.xsjs:10:25:10:34 | zipArchive | -| XSJSZipSlip.xsjs:11:9:11:74 | targetFilePath | +| XSJSZipSlip.xsjs:11:9:11:22 | targetFilePath | | XSJSZipSlip.xsjs:11:26:11:74 | require ... ryPath) | | XSJSZipSlip.xsjs:11:65:11:73 | entryPath | | XSJSZipSlip.xsjs:12:37:12:50 | targetFilePath | | XSJSZipSlip.xsjs:12:37:12:50 | targetFilePath | edges -| XSJSZipSlip.xsjs:7:7:7:62 | zipArchive | XSJSZipSlip.xsjs:10:25:10:34 | zipArchive | -| XSJSZipSlip.xsjs:7:20:7:62 | new $.u ... ffer()) | XSJSZipSlip.xsjs:7:7:7:62 | zipArchive | +| XSJSZipSlip.xsjs:7:7:7:16 | zipArchive | XSJSZipSlip.xsjs:10:25:10:34 | zipArchive | +| XSJSZipSlip.xsjs:7:20:7:62 | new $.u ... ffer()) | XSJSZipSlip.xsjs:7:7:7:16 | zipArchive | | XSJSZipSlip.xsjs:7:35:7:61 | request ... uffer() | XSJSZipSlip.xsjs:7:20:7:62 | new $.u ... ffer()) | | XSJSZipSlip.xsjs:7:35:7:61 | request ... uffer() | XSJSZipSlip.xsjs:7:20:7:62 | new $.u ... ffer()) | | XSJSZipSlip.xsjs:10:25:10:34 | zipArchive | XSJSZipSlip.xsjs:11:65:11:73 | entryPath | -| XSJSZipSlip.xsjs:11:9:11:74 | targetFilePath | XSJSZipSlip.xsjs:12:37:12:50 | targetFilePath | -| XSJSZipSlip.xsjs:11:9:11:74 | targetFilePath | XSJSZipSlip.xsjs:12:37:12:50 | targetFilePath | -| XSJSZipSlip.xsjs:11:26:11:74 | require ... ryPath) | XSJSZipSlip.xsjs:11:9:11:74 | targetFilePath | +| XSJSZipSlip.xsjs:11:9:11:22 | targetFilePath | XSJSZipSlip.xsjs:12:37:12:50 | targetFilePath | +| XSJSZipSlip.xsjs:11:9:11:22 | targetFilePath | XSJSZipSlip.xsjs:12:37:12:50 | targetFilePath | +| XSJSZipSlip.xsjs:11:26:11:74 | require ... ryPath) | XSJSZipSlip.xsjs:11:9:11:22 | targetFilePath | | XSJSZipSlip.xsjs:11:65:11:73 | entryPath | XSJSZipSlip.xsjs:11:26:11:74 | require ... ryPath) | #select | XSJSZipSlip.xsjs:12:37:12:50 | targetFilePath | XSJSZipSlip.xsjs:7:35:7:61 | request ... uffer() | XSJSZipSlip.xsjs:12:37:12:50 | targetFilePath | The path of $@ being saved depends on a $@. | XSJSZipSlip.xsjs:12:37:12:50 | targetFilePath | this zip file | XSJSZipSlip.xsjs:7:35:7:61 | request ... uffer() | user-provided value | From 5c25e781392d3baed3bec9059c2c312b428cc55e Mon Sep 17 00:00:00 2001 From: lcartey <5377966+lcartey@users.noreply.github.com> Date: Wed, 17 Sep 2025 00:49:29 +0000 Subject: [PATCH 3/3] Upgrade CodeQL CLI dependency to v2.23.0 --- .../frameworks/cap/lib/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/cap/src/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/cap/test/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/ui5/lib/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/ui5/src/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/ui5/test/codeql-pack.lock.yml | 32 ++++++++++--------- .../frameworks/xsjs/lib/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/xsjs/src/codeql-pack.lock.yml | 26 ++++++++------- .../frameworks/xsjs/test/codeql-pack.lock.yml | 26 ++++++++------- .../tests/codeql-pack.lock.yml | 26 ++++++++------- qlt.conf.json | 6 ++-- 11 files changed, 146 insertions(+), 126 deletions(-) diff --git a/javascript/frameworks/cap/lib/codeql-pack.lock.yml b/javascript/frameworks/cap/lib/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/cap/lib/codeql-pack.lock.yml +++ b/javascript/frameworks/cap/lib/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/cap/src/codeql-pack.lock.yml b/javascript/frameworks/cap/src/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/cap/src/codeql-pack.lock.yml +++ b/javascript/frameworks/cap/src/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/cap/test/codeql-pack.lock.yml b/javascript/frameworks/cap/test/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/cap/test/codeql-pack.lock.yml +++ b/javascript/frameworks/cap/test/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/ui5/lib/codeql-pack.lock.yml b/javascript/frameworks/ui5/lib/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/ui5/lib/codeql-pack.lock.yml +++ b/javascript/frameworks/ui5/lib/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/ui5/src/codeql-pack.lock.yml b/javascript/frameworks/ui5/src/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/ui5/src/codeql-pack.lock.yml +++ b/javascript/frameworks/ui5/src/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/ui5/test/codeql-pack.lock.yml b/javascript/frameworks/ui5/test/codeql-pack.lock.yml index 62f7b3fa..9b33eb30 100644 --- a/javascript/frameworks/ui5/test/codeql-pack.lock.yml +++ b/javascript/frameworks/ui5/test/codeql-pack.lock.yml @@ -2,33 +2,35 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/javascript-queries: - version: 2.0.2 + version: 2.0.3 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/suite-helpers: - version: 1.0.29 + version: 1.0.30 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/typos: - version: 1.0.29 + version: 1.0.30 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml b/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml +++ b/javascript/frameworks/xsjs/lib/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/xsjs/src/codeql-pack.lock.yml b/javascript/frameworks/xsjs/src/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/xsjs/src/codeql-pack.lock.yml +++ b/javascript/frameworks/xsjs/src/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/frameworks/xsjs/test/codeql-pack.lock.yml b/javascript/frameworks/xsjs/test/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/frameworks/xsjs/test/codeql-pack.lock.yml +++ b/javascript/frameworks/xsjs/test/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/javascript/heuristic-models/tests/codeql-pack.lock.yml b/javascript/heuristic-models/tests/codeql-pack.lock.yml index e2c921b1..21dc6044 100644 --- a/javascript/heuristic-models/tests/codeql-pack.lock.yml +++ b/javascript/heuristic-models/tests/codeql-pack.lock.yml @@ -2,27 +2,29 @@ lockVersion: 1.0.0 dependencies: codeql/concepts: - version: 0.0.3 + version: 0.0.4 + codeql/controlflow: + version: 2.0.14 codeql/dataflow: - version: 2.0.13 + version: 2.0.14 codeql/javascript-all: - version: 2.6.9 + version: 2.6.10 codeql/mad: - version: 1.0.29 + version: 1.0.30 codeql/regex: - version: 1.0.29 + version: 1.0.30 codeql/ssa: - version: 2.0.5 + version: 2.0.6 codeql/threat-models: - version: 1.0.29 + version: 1.0.30 codeql/tutorial: - version: 1.0.29 + version: 1.0.30 codeql/typetracking: - version: 2.0.13 + version: 2.0.14 codeql/util: - version: 2.0.16 + version: 2.0.17 codeql/xml: - version: 1.0.29 + version: 1.0.30 codeql/yaml: - version: 1.0.29 + version: 1.0.30 compiled: false diff --git a/qlt.conf.json b/qlt.conf.json index 4a90e840..dcb5d04a 100644 --- a/qlt.conf.json +++ b/qlt.conf.json @@ -1,5 +1,5 @@ { - "CodeQLCLI": "2.22.4", - "CodeQLStandardLibrary": "codeql-cli/v2.22.4", - "CodeQLCLIBundle": "codeql-bundle-v2.22.4" + "CodeQLCLI": "2.23.0", + "CodeQLStandardLibrary": "codeql-cli/v2.23.0", + "CodeQLCLIBundle": "codeql-bundle-v2.23.0" }