Added basic taint tracking test for Array.prototype.toSpliced()

Napalys · Napalys · commit a65f80ef7648 · 2024-11-13T12:28:14.000+01:00
diff --git a/javascript/ql/test/library-tests/TaintTracking/tst.js b/javascript/ql/test/library-tests/TaintTracking/tst.js
@@ -59,4 +59,5 @@ function test() {
     tagged`foo ${"safe"} bar ${x} baz`;
 
     sink(x.reverse()); // NOT OK
+    sink(x.toSpliced()); // NOT OK -- Should be caught, but it is not
 }

Original file line number	Diff line number	Diff line change
`@@ -59,4 +59,5 @@ function test() {`
`59`	`59`	tagged`foo ${"safe"} bar ${x} baz`;
`60`	`60`
`61`	`61`	`sink(x.reverse()); // NOT OK`
	`62`	`+ sink(x.toSpliced()); // NOT OK -- Should be caught, but it is not`
`62`	`63`	`}`