@@ -80,80 +80,80 @@ nodes
8080| exception-xss.js:180:26:180:30 | error | semmle.label | error |
8181| exception-xss.js:182:19:182:23 | error | semmle.label | error |
8282edges
83- | exception-xss.js:2:6:2:28 | foo | exception-xss.js:9:11:9:13 | foo |
84- | exception-xss.js:2:6:2:28 | foo | exception-xss.js:15:9:15:11 | foo |
85- | exception-xss.js:2:6:2:28 | foo | exception-xss.js:21:11:21:13 | foo |
86- | exception-xss.js:2:6:2:28 | foo | exception-xss.js:33:19:33:21 | foo |
87- | exception-xss.js:2:6:2:28 | foo | exception-xss.js:46:16:46:18 | foo |
88- | exception-xss.js:2:6:2:28 | foo | exception-xss.js:81:16:81:18 | foo |
89- | exception-xss.js:2:6:2:28 | foo | exception-xss.js:89:11:89:13 | foo |
90- | exception-xss.js:2:6:2:28 | foo | exception-xss.js:95:12:95:14 | foo |
91- | exception-xss.js:2:6:2:28 | foo | exception-xss.js:102:12:102:14 | foo |
92- | exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo |
93- | exception-xss.js:4:17:4:17 | x | exception-xss.js:5:11:5:11 | x |
94- | exception-xss.js:9:11:9:13 | foo | exception-xss.js:10:11:10:11 | e |
95- | exception-xss.js:10:11:10:11 | e | exception-xss.js:11:18:11:18 | e |
96- | exception-xss.js:15:3:15:12 | exceptional return of inner(foo) | exception-xss.js:16:11:16:11 | e |
97- | exception-xss.js:15:9:15:11 | foo | exception-xss.js:4:17:4:17 | x |
98- | exception-xss.js:15:9:15:11 | foo | exception-xss.js:15:3:15:12 | exceptional return of inner(foo) |
99- | exception-xss.js:16:11:16:11 | e | exception-xss.js:17:18:17:18 | e |
100- | exception-xss.js:21:11:21:13 | foo | exception-xss.js:21:11:21:21 | foo + "bar" |
101- | exception-xss.js:21:11:21:21 | foo + "bar" | exception-xss.js:22:11:22:11 | e |
102- | exception-xss.js:22:11:22:11 | e | exception-xss.js:23:18:23:18 | e |
103- | exception-xss.js:33:11:33:22 | ["bar", foo] | exception-xss.js:34:11:34:11 | e |
104- | exception-xss.js:33:19:33:21 | foo | exception-xss.js:33:11:33:22 | ["bar", foo] |
105- | exception-xss.js:34:11:34:11 | e | exception-xss.js:35:18:35:18 | e |
106- | exception-xss.js:38:16:38:16 | x | exception-xss.js:39:9:39:9 | x |
107- | exception-xss.js:39:9:39:9 | x | exception-xss.js:39:3:39:10 | exceptional return of deep2(x) |
108- | exception-xss.js:39:9:39:9 | x | exception-xss.js:41:17:41:17 | x |
109- | exception-xss.js:41:17:41:17 | x | exception-xss.js:42:9:42:9 | x |
110- | exception-xss.js:42:9:42:9 | x | exception-xss.js:4:17:4:17 | x |
111- | exception-xss.js:42:9:42:9 | x | exception-xss.js:42:3:42:10 | exceptional return of inner(x) |
112- | exception-xss.js:46:3:46:19 | exceptional return of deep("bar" + foo) | exception-xss.js:47:11:47:11 | e |
113- | exception-xss.js:46:8:46:18 | "bar" + foo | exception-xss.js:38:16:38:16 | x |
114- | exception-xss.js:46:8:46:18 | "bar" + foo | exception-xss.js:46:3:46:19 | exceptional return of deep("bar" + foo) |
115- | exception-xss.js:46:16:46:18 | foo | exception-xss.js:46:8:46:18 | "bar" + foo |
116- | exception-xss.js:47:11:47:11 | e | exception-xss.js:48:18:48:18 | e |
117- | exception-xss.js:74:28:74:28 | x | exception-xss.js:75:10:75:10 | x |
118- | exception-xss.js:75:10:75:10 | x | exception-xss.js:4:17:4:17 | x |
119- | exception-xss.js:75:10:75:10 | x | exception-xss.js:75:4:75:11 | exceptional return of inner(x) |
120- | exception-xss.js:81:3:81:19 | exceptional return of myWeirdInner(foo) | exception-xss.js:82:11:82:11 | e |
121- | exception-xss.js:81:16:81:18 | foo | exception-xss.js:74:28:74:28 | x |
122- | exception-xss.js:81:16:81:18 | foo | exception-xss.js:81:3:81:19 | exceptional return of myWeirdInner(foo) |
123- | exception-xss.js:82:11:82:11 | e | exception-xss.js:83:18:83:18 | e |
124- | exception-xss.js:89:11:89:13 | foo | exception-xss.js:89:11:89:26 | foo.match(/foo/) |
125- | exception-xss.js:89:11:89:26 | foo.match(/foo/) | exception-xss.js:90:11:90:11 | e |
126- | exception-xss.js:90:11:90:11 | e | exception-xss.js:91:18:91:18 | e |
127- | exception-xss.js:95:11:95:22 | [foo, "bar"] | exception-xss.js:96:11:96:11 | e |
128- | exception-xss.js:95:12:95:14 | foo | exception-xss.js:95:11:95:22 | [foo, "bar"] |
129- | exception-xss.js:96:11:96:11 | e | exception-xss.js:97:18:97:18 | e |
130- | exception-xss.js:102:12:102:14 | foo | exception-xss.js:106:11:106:11 | e |
131- | exception-xss.js:106:11:106:11 | e | exception-xss.js:107:18:107:18 | e |
132- | exception-xss.js:117:11:117:23 | req.params.id | exception-xss.js:118:11:118:11 | e |
133- | exception-xss.js:118:11:118:11 | e | exception-xss.js:119:28:119:28 | e |
134- | exception-xss.js:119:28:119:28 | e | exception-xss.js:119:12:119:28 | "Exception: " + e |
135- | exception-xss.js:125:45:125:68 | documen ... .search | exception-xss.js:128:11:128:52 | session ... ssion') |
136- | exception-xss.js:128:11:128:52 | session ... ssion') | exception-xss.js:129:11:129:11 | e |
137- | exception-xss.js:129:11:129:11 | e | exception-xss.js:130:18:130:18 | e |
138- | exception-xss.js:136:10:136:22 | req.params.id | exception-xss.js:136:26:136:30 | error |
139- | exception-xss.js:136:26:136:30 | error | exception-xss.js:138:19:138:23 | error |
140- | exception-xss.js:146:6:146:35 | foo | exception-xss.js:148:33:148:35 | foo |
141- | exception-xss.js:146:6:146:35 | foo | exception-xss.js:153:8:153:10 | foo |
142- | exception-xss.js:146:6:146:35 | foo | exception-xss.js:174:31:174:33 | foo |
143- | exception-xss.js:146:12:146:35 | documen ... .search | exception-xss.js:146:6:146:35 | foo |
144- | exception-xss.js:148:2:148:46 | new Pro ... solve)) [PromiseError] | exception-xss.js:148:55:148:55 | e |
145- | exception-xss.js:148:33:148:35 | foo | exception-xss.js:148:2:148:46 | new Pro ... solve)) [PromiseError] |
146- | exception-xss.js:148:55:148:55 | e | exception-xss.js:149:18:149:18 | e |
147- | exception-xss.js:153:8:153:10 | foo | exception-xss.js:154:11:154:11 | e |
148- | exception-xss.js:154:11:154:11 | e | exception-xss.js:155:18:155:18 | e |
149- | exception-xss.js:170:17:170:23 | tainted | exception-xss.js:171:11:171:17 | tainted |
150- | exception-xss.js:174:2:174:44 | new Pro ... solve)) [PromiseError] | exception-xss.js:174:53:174:53 | e |
151- | exception-xss.js:174:25:174:43 | exceptional return of inner(foo, resolve) | exception-xss.js:174:2:174:44 | new Pro ... solve)) [PromiseError] |
152- | exception-xss.js:174:31:174:33 | foo | exception-xss.js:170:17:170:23 | tainted |
153- | exception-xss.js:174:31:174:33 | foo | exception-xss.js:174:25:174:43 | exceptional return of inner(foo, resolve) |
154- | exception-xss.js:174:53:174:53 | e | exception-xss.js:175:18:175:18 | e |
155- | exception-xss.js:180:10:180:22 | req.params.id | exception-xss.js:180:26:180:30 | error |
156- | exception-xss.js:180:26:180:30 | error | exception-xss.js:182:19:182:23 | error |
83+ | exception-xss.js:2:6:2:28 | foo | exception-xss.js:9:11:9:13 | foo | provenance | |
84+ | exception-xss.js:2:6:2:28 | foo | exception-xss.js:15:9:15:11 | foo | provenance | |
85+ | exception-xss.js:2:6:2:28 | foo | exception-xss.js:21:11:21:13 | foo | provenance | |
86+ | exception-xss.js:2:6:2:28 | foo | exception-xss.js:33:19:33:21 | foo | provenance | |
87+ | exception-xss.js:2:6:2:28 | foo | exception-xss.js:46:16:46:18 | foo | provenance | |
88+ | exception-xss.js:2:6:2:28 | foo | exception-xss.js:81:16:81:18 | foo | provenance | |
89+ | exception-xss.js:2:6:2:28 | foo | exception-xss.js:89:11:89:13 | foo | provenance | |
90+ | exception-xss.js:2:6:2:28 | foo | exception-xss.js:95:12:95:14 | foo | provenance | |
91+ | exception-xss.js:2:6:2:28 | foo | exception-xss.js:102:12:102:14 | foo | provenance | |
92+ | exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo | provenance | |
93+ | exception-xss.js:4:17:4:17 | x | exception-xss.js:5:11:5:11 | x | provenance | |
94+ | exception-xss.js:9:11:9:13 | foo | exception-xss.js:10:11:10:11 | e | provenance | Config |
95+ | exception-xss.js:10:11:10:11 | e | exception-xss.js:11:18:11:18 | e | provenance | |
96+ | exception-xss.js:15:3:15:12 | exceptional return of inner(foo) | exception-xss.js:16:11:16:11 | e | provenance | |
97+ | exception-xss.js:15:9:15:11 | foo | exception-xss.js:4:17:4:17 | x | provenance | |
98+ | exception-xss.js:15:9:15:11 | foo | exception-xss.js:15:3:15:12 | exceptional return of inner(foo) | provenance | Config |
99+ | exception-xss.js:16:11:16:11 | e | exception-xss.js:17:18:17:18 | e | provenance | |
100+ | exception-xss.js:21:11:21:13 | foo | exception-xss.js:21:11:21:21 | foo + "bar" | provenance | |
101+ | exception-xss.js:21:11:21:21 | foo + "bar" | exception-xss.js:22:11:22:11 | e | provenance | Config |
102+ | exception-xss.js:22:11:22:11 | e | exception-xss.js:23:18:23:18 | e | provenance | |
103+ | exception-xss.js:33:11:33:22 | ["bar", foo] | exception-xss.js:34:11:34:11 | e | provenance | Config |
104+ | exception-xss.js:33:19:33:21 | foo | exception-xss.js:33:11:33:22 | ["bar", foo] | provenance | |
105+ | exception-xss.js:34:11:34:11 | e | exception-xss.js:35:18:35:18 | e | provenance | |
106+ | exception-xss.js:38:16:38:16 | x | exception-xss.js:39:9:39:9 | x | provenance | |
107+ | exception-xss.js:39:9:39:9 | x | exception-xss.js:39:3:39:10 | exceptional return of deep2(x) | provenance | |
108+ | exception-xss.js:39:9:39:9 | x | exception-xss.js:41:17:41:17 | x | provenance | |
109+ | exception-xss.js:41:17:41:17 | x | exception-xss.js:42:9:42:9 | x | provenance | |
110+ | exception-xss.js:42:9:42:9 | x | exception-xss.js:4:17:4:17 | x | provenance | |
111+ | exception-xss.js:42:9:42:9 | x | exception-xss.js:42:3:42:10 | exceptional return of inner(x) | provenance | Config |
112+ | exception-xss.js:46:3:46:19 | exceptional return of deep("bar" + foo) | exception-xss.js:47:11:47:11 | e | provenance | |
113+ | exception-xss.js:46:8:46:18 | "bar" + foo | exception-xss.js:38:16:38:16 | x | provenance | |
114+ | exception-xss.js:46:8:46:18 | "bar" + foo | exception-xss.js:46:3:46:19 | exceptional return of deep("bar" + foo) | provenance | |
115+ | exception-xss.js:46:16:46:18 | foo | exception-xss.js:46:8:46:18 | "bar" + foo | provenance | |
116+ | exception-xss.js:47:11:47:11 | e | exception-xss.js:48:18:48:18 | e | provenance | |
117+ | exception-xss.js:74:28:74:28 | x | exception-xss.js:75:10:75:10 | x | provenance | |
118+ | exception-xss.js:75:10:75:10 | x | exception-xss.js:4:17:4:17 | x | provenance | |
119+ | exception-xss.js:75:10:75:10 | x | exception-xss.js:75:4:75:11 | exceptional return of inner(x) | provenance | Config |
120+ | exception-xss.js:81:3:81:19 | exceptional return of myWeirdInner(foo) | exception-xss.js:82:11:82:11 | e | provenance | |
121+ | exception-xss.js:81:16:81:18 | foo | exception-xss.js:74:28:74:28 | x | provenance | |
122+ | exception-xss.js:81:16:81:18 | foo | exception-xss.js:81:3:81:19 | exceptional return of myWeirdInner(foo) | provenance | |
123+ | exception-xss.js:82:11:82:11 | e | exception-xss.js:83:18:83:18 | e | provenance | |
124+ | exception-xss.js:89:11:89:13 | foo | exception-xss.js:89:11:89:26 | foo.match(/foo/) | provenance | |
125+ | exception-xss.js:89:11:89:26 | foo.match(/foo/) | exception-xss.js:90:11:90:11 | e | provenance | Config |
126+ | exception-xss.js:90:11:90:11 | e | exception-xss.js:91:18:91:18 | e | provenance | |
127+ | exception-xss.js:95:11:95:22 | [foo, "bar"] | exception-xss.js:96:11:96:11 | e | provenance | Config |
128+ | exception-xss.js:95:12:95:14 | foo | exception-xss.js:95:11:95:22 | [foo, "bar"] | provenance | |
129+ | exception-xss.js:96:11:96:11 | e | exception-xss.js:97:18:97:18 | e | provenance | |
130+ | exception-xss.js:102:12:102:14 | foo | exception-xss.js:106:11:106:11 | e | provenance | Config |
131+ | exception-xss.js:106:11:106:11 | e | exception-xss.js:107:18:107:18 | e | provenance | |
132+ | exception-xss.js:117:11:117:23 | req.params.id | exception-xss.js:118:11:118:11 | e | provenance | Config |
133+ | exception-xss.js:118:11:118:11 | e | exception-xss.js:119:28:119:28 | e | provenance | |
134+ | exception-xss.js:119:28:119:28 | e | exception-xss.js:119:12:119:28 | "Exception: " + e | provenance | |
135+ | exception-xss.js:125:45:125:68 | documen ... .search | exception-xss.js:128:11:128:52 | session ... ssion') | provenance | |
136+ | exception-xss.js:128:11:128:52 | session ... ssion') | exception-xss.js:129:11:129:11 | e | provenance | Config |
137+ | exception-xss.js:129:11:129:11 | e | exception-xss.js:130:18:130:18 | e | provenance | |
138+ | exception-xss.js:136:10:136:22 | req.params.id | exception-xss.js:136:26:136:30 | error | provenance | Config |
139+ | exception-xss.js:136:26:136:30 | error | exception-xss.js:138:19:138:23 | error | provenance | |
140+ | exception-xss.js:146:6:146:35 | foo | exception-xss.js:148:33:148:35 | foo | provenance | |
141+ | exception-xss.js:146:6:146:35 | foo | exception-xss.js:153:8:153:10 | foo | provenance | |
142+ | exception-xss.js:146:6:146:35 | foo | exception-xss.js:174:31:174:33 | foo | provenance | |
143+ | exception-xss.js:146:12:146:35 | documen ... .search | exception-xss.js:146:6:146:35 | foo | provenance | |
144+ | exception-xss.js:148:2:148:46 | new Pro ... solve)) [PromiseError] | exception-xss.js:148:55:148:55 | e | provenance | |
145+ | exception-xss.js:148:33:148:35 | foo | exception-xss.js:148:2:148:46 | new Pro ... solve)) [PromiseError] | provenance | Config |
146+ | exception-xss.js:148:55:148:55 | e | exception-xss.js:149:18:149:18 | e | provenance | |
147+ | exception-xss.js:153:8:153:10 | foo | exception-xss.js:154:11:154:11 | e | provenance | Config |
148+ | exception-xss.js:154:11:154:11 | e | exception-xss.js:155:18:155:18 | e | provenance | |
149+ | exception-xss.js:170:17:170:23 | tainted | exception-xss.js:171:11:171:17 | tainted | provenance | |
150+ | exception-xss.js:174:2:174:44 | new Pro ... solve)) [PromiseError] | exception-xss.js:174:53:174:53 | e | provenance | |
151+ | exception-xss.js:174:25:174:43 | exceptional return of inner(foo, resolve) | exception-xss.js:174:2:174:44 | new Pro ... solve)) [PromiseError] | provenance | |
152+ | exception-xss.js:174:31:174:33 | foo | exception-xss.js:170:17:170:23 | tainted | provenance | |
153+ | exception-xss.js:174:31:174:33 | foo | exception-xss.js:174:25:174:43 | exceptional return of inner(foo, resolve) | provenance | Config |
154+ | exception-xss.js:174:53:174:53 | e | exception-xss.js:175:18:175:18 | e | provenance | |
155+ | exception-xss.js:180:10:180:22 | req.params.id | exception-xss.js:180:26:180:30 | error | provenance | Config |
156+ | exception-xss.js:180:26:180:30 | error | exception-xss.js:182:19:182:23 | error | provenance | |
157157subpaths
158158| exception-xss.js:15:9:15:11 | foo | exception-xss.js:4:17:4:17 | x | exception-xss.js:5:11:5:11 | x | exception-xss.js:15:3:15:12 | exceptional return of inner(foo) |
159159| exception-xss.js:39:9:39:9 | x | exception-xss.js:41:17:41:17 | x | exception-xss.js:42:3:42:10 | exceptional return of inner(x) | exception-xss.js:39:3:39:10 | exceptional return of deep2(x) |
0 commit comments