Skip to content

Commit 2473274

Browse files
asgerfasgerf
committed
JS: Benign test output changes
1 parent af7b4e3 commit 2473274

File tree

5 files changed

+45
-33
lines changed

5 files changed

+45
-33
lines changed

‎javascript/ql/test/library-tests/InterProceduralFlow/tests.expected‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -48,6 +48,7 @@ dataFlow
4848
| partial.js:6:15:6:24 | "tainted2" | partial.js:42:15:42:15 | y |
4949
| partial.js:6:15:6:24 | "tainted2" | partial.js:48:15:48:15 | y |
5050
| partial.js:6:15:6:24 | "tainted2" | partial.js:54:15:54:15 | y |
51+
| promises.js:32:24:32:37 | "also tainted" | promises.js:38:32:38:32 | v |
5152
| properties2.js:7:14:7:21 | "source" | properties2.js:8:12:8:24 | foo(source).p |
5253
| properties2.js:7:14:7:21 | "source" | properties2.js:17:13:17:15 | o.p |
5354
| properties2.js:7:14:7:21 | "source" | properties2.js:33:13:33:20 | getP(o3) |
@@ -61,6 +62,7 @@ dataFlow
6162
| tst2.js:6:24:6:37 | "also tainted" | tst2.js:11:15:11:24 | g(source2) |
6263
| tst6.mjs:12:14:12:21 | "source" | tst6.mjs:14:12:14:16 | a.m() |
6364
| tst6.mjs:16:15:16:23 | "source2" | tst6.mjs:18:13:18:24 | a.m.call(a2) |
65+
| tst.js:2:17:2:22 | "src1" | tst.js:28:20:28:22 | elt |
6466
| tst.js:2:17:2:22 | "src1" | tst.js:39:17:39:17 | x |
6567
| tst.js:2:17:2:22 | "src1" | tst.js:41:19:41:19 | x |
6668
| tst.js:2:17:2:22 | "src1" | tst.js:45:17:45:17 | x |
@@ -126,6 +128,7 @@ taintTracking
126128
| partial.js:6:15:6:24 | "tainted2" | partial.js:42:15:42:15 | y |
127129
| partial.js:6:15:6:24 | "tainted2" | partial.js:48:15:48:15 | y |
128130
| partial.js:6:15:6:24 | "tainted2" | partial.js:54:15:54:15 | y |
131+
| promises.js:32:24:32:37 | "also tainted" | promises.js:38:32:38:32 | v |
129132
| properties2.js:7:14:7:21 | "source" | properties2.js:8:12:8:24 | foo(source).p |
130133
| properties2.js:7:14:7:21 | "source" | properties2.js:17:13:17:15 | o.p |
131134
| properties2.js:7:14:7:21 | "source" | properties2.js:33:13:33:20 | getP(o3) |
@@ -154,6 +157,7 @@ taintTracking
154157
| tst.js:2:17:2:22 | "src1" | tst.js:19:16:19:34 | JSON.parse(source1) |
155158
| tst.js:2:17:2:22 | "src1" | tst.js:20:16:20:37 | JSON.st ... sink10) |
156159
| tst.js:2:17:2:22 | "src1" | tst.js:24:16:24:18 | foo |
160+
| tst.js:2:17:2:22 | "src1" | tst.js:28:20:28:22 | elt |
157161
| tst.js:2:17:2:22 | "src1" | tst.js:30:20:30:22 | ary |
158162
| tst.js:2:17:2:22 | "src1" | tst.js:36:16:36:24 | dict[key] |
159163
| tst.js:2:17:2:22 | "src1" | tst.js:39:17:39:17 | x |
@@ -223,6 +227,7 @@ germanFlow
223227
| partial.js:6:15:6:24 | "tainted2" | partial.js:42:15:42:15 | y |
224228
| partial.js:6:15:6:24 | "tainted2" | partial.js:48:15:48:15 | y |
225229
| partial.js:6:15:6:24 | "tainted2" | partial.js:54:15:54:15 | y |
230+
| promises.js:32:24:32:37 | "also tainted" | promises.js:38:32:38:32 | v |
226231
| properties2.js:7:14:7:21 | "source" | properties2.js:8:12:8:24 | foo(source).p |
227232
| properties2.js:7:14:7:21 | "source" | properties2.js:17:13:17:15 | o.p |
228233
| properties2.js:7:14:7:21 | "source" | properties2.js:33:13:33:20 | getP(o3) |
@@ -236,6 +241,7 @@ germanFlow
236241
| tst2.js:6:24:6:37 | "also tainted" | tst2.js:11:15:11:24 | g(source2) |
237242
| tst6.mjs:12:14:12:21 | "source" | tst6.mjs:14:12:14:16 | a.m() |
238243
| tst6.mjs:16:15:16:23 | "source2" | tst6.mjs:18:13:18:24 | a.m.call(a2) |
244+
| tst.js:2:17:2:22 | "src1" | tst.js:28:20:28:22 | elt |
239245
| tst.js:2:17:2:22 | "src1" | tst.js:39:17:39:17 | x |
240246
| tst.js:2:17:2:22 | "src1" | tst.js:41:19:41:19 | x |
241247
| tst.js:2:17:2:22 | "src1" | tst.js:45:17:45:17 | x |

‎javascript/ql/test/library-tests/frameworks/Templating/XssDiff.expected‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@ flow
2525
| app.js:59:38:59:74 | req.que ... ringRaw | views/njk_sinks.njk:23:42:23:68 | dataInE ... ringRaw |
2626
| app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_include.ejs:3:5:3:18 | <%- rawHtml %> |
2727
| app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_sinks.ejs:4:9:4:22 | <%- rawHtml %> |
28+
| app.js:73:18:73:30 | req.query.foo | views/dot_sinks.html.dot:3:9:3:22 | {{! tainted }} |
2829
| projectA/src/index.js:6:38:6:53 | req.query.taintA | projectA/views/main.ejs:5:1:5:26 | <%- taintedInMiddleware %> |
2930
| projectA/src/index.js:12:16:12:30 | req.query.sinkA | projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> |
3031
| projectA/src/index.js:17:16:17:30 | req.query.sinkA | projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> |

‎javascript/ql/test/query-tests/Security/CWE-078/IndirectCommandInjection/IndirectCommandInjection.expected‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -74,16 +74,16 @@ edges
7474
| command-line-parameter-command-injection.js:76:15:76:26 | process.argv | command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | provenance | |
7575
| command-line-parameter-command-injection.js:76:15:76:35 | process ... lice(2) | command-line-parameter-command-injection.js:76:8:76:35 | argv | provenance | |
7676
| command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | command-line-parameter-command-injection.js:79:10:79:39 | "cmd.sh ... gv).foo | provenance | |
77-
| command-line-parameter-command-injection.js:79:31:79:34 | argv | command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | provenance | |
77+
| command-line-parameter-command-injection.js:79:31:79:34 | argv | command-line-parameter-command-injection.js:79:22:79:35 | minimist(argv) | provenance | Config |
7878
| command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | command-line-parameter-command-injection.js:82:10:82:54 | "cmd.sh ... 2)).foo | provenance | |
7979
| command-line-parameter-command-injection.js:82:29:82:40 | process.argv | command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | provenance | |
80-
| command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | provenance | |
80+
| command-line-parameter-command-injection.js:82:29:82:49 | process ... lice(2) | command-line-parameter-command-injection.js:82:22:82:50 | subarg( ... ice(2)) | provenance | Config |
8181
| command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | command-line-parameter-command-injection.js:85:10:85:59 | "cmd.sh ... 2)).foo | provenance | |
8282
| command-line-parameter-command-injection.js:85:34:85:45 | process.argv | command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | provenance | |
83-
| command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | provenance | |
83+
| command-line-parameter-command-injection.js:85:34:85:54 | process ... lice(2) | command-line-parameter-command-injection.js:85:22:85:55 | yargsPa ... ice(2)) | provenance | Config |
8484
| command-line-parameter-command-injection.js:88:6:88:37 | flags | command-line-parameter-command-injection.js:89:22:89:26 | flags | provenance | |
8585
| command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | command-line-parameter-command-injection.js:88:6:88:37 | flags | provenance | |
86-
| command-line-parameter-command-injection.js:88:25:88:36 | process.argv | command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | provenance | |
86+
| command-line-parameter-command-injection.js:88:25:88:36 | process.argv | command-line-parameter-command-injection.js:88:14:88:37 | args.pa ... s.argv) | provenance | Config |
8787
| command-line-parameter-command-injection.js:89:22:89:26 | flags | command-line-parameter-command-injection.js:89:10:89:30 | "cmd.sh ... ags.foo | provenance | |
8888
| command-line-parameter-command-injection.js:91:6:91:38 | flags | command-line-parameter-command-injection.js:92:22:92:26 | flags | provenance | |
8989
| command-line-parameter-command-injection.js:91:14:91:38 | require ... .spec}) | command-line-parameter-command-injection.js:91:6:91:38 | flags | provenance | |

‎javascript/ql/test/query-tests/Security/CWE-094/CodeInjection/ImproperCodeSanitization.expected‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,13 @@
11
edges
2-
| bad-code-sanitization.js:2:12:2:90 | /^[_$a- ... key)}]` | bad-code-sanitization.js:7:31:7:43 | safeProp(key) |
3-
| bad-code-sanitization.js:2:69:2:87 | JSON.stringify(key) | bad-code-sanitization.js:2:12:2:90 | /^[_$a- ... key)}]` |
4-
| bad-code-sanitization.js:6:11:6:25 | statements | bad-code-sanitization.js:8:27:8:36 | statements |
5-
| bad-code-sanitization.js:7:5:7:14 | [post update] statements | bad-code-sanitization.js:6:11:6:25 | statements |
6-
| bad-code-sanitization.js:7:21:7:70 | `${name ... key])}` | bad-code-sanitization.js:7:5:7:14 | [post update] statements |
7-
| bad-code-sanitization.js:7:31:7:43 | safeProp(key) | bad-code-sanitization.js:7:21:7:70 | `${name ... key])}` |
8-
| bad-code-sanitization.js:8:27:8:36 | statements | bad-code-sanitization.js:8:27:8:46 | statements.join(';') |
9-
| bad-code-sanitization.js:63:11:63:55 | assignment | bad-code-sanitization.js:64:27:64:36 | assignment |
10-
| bad-code-sanitization.js:63:31:63:49 | JSON.stringify(key) | bad-code-sanitization.js:63:11:63:55 | assignment |
2+
| bad-code-sanitization.js:2:12:2:90 | /^[_$a- ... key)}]` | bad-code-sanitization.js:7:31:7:43 | safeProp(key) | provenance | |
3+
| bad-code-sanitization.js:2:69:2:87 | JSON.stringify(key) | bad-code-sanitization.js:2:12:2:90 | /^[_$a- ... key)}]` | provenance | |
4+
| bad-code-sanitization.js:6:11:6:25 | statements | bad-code-sanitization.js:8:27:8:36 | statements | provenance | |
5+
| bad-code-sanitization.js:7:5:7:14 | [post update] statements | bad-code-sanitization.js:6:11:6:25 | statements | provenance | |
6+
| bad-code-sanitization.js:7:21:7:70 | `${name ... key])}` | bad-code-sanitization.js:7:5:7:14 | [post update] statements | provenance | |
7+
| bad-code-sanitization.js:7:31:7:43 | safeProp(key) | bad-code-sanitization.js:7:21:7:70 | `${name ... key])}` | provenance | |
8+
| bad-code-sanitization.js:8:27:8:36 | statements | bad-code-sanitization.js:8:27:8:46 | statements.join(';') | provenance | |
9+
| bad-code-sanitization.js:63:11:63:55 | assignment | bad-code-sanitization.js:64:27:64:36 | assignment | provenance | |
10+
| bad-code-sanitization.js:63:31:63:49 | JSON.stringify(key) | bad-code-sanitization.js:63:11:63:55 | assignment | provenance | |
1111
nodes
1212
| bad-code-sanitization.js:2:12:2:90 | /^[_$a- ... key)}]` | semmle.label | /^[_$a- ... key)}]` |
1313
| bad-code-sanitization.js:2:69:2:87 | JSON.stringify(key) | semmle.label | JSON.stringify(key) |

0 commit comments

Comments
 (0)