Skip to content

Commit 24714c4

Browse files
asgerfasgerf
committed
JS: Update test output after rebase
1 parent 9e25bbc commit 24714c4

File tree

2 files changed

+107
-0
lines changed

2 files changed

+107
-0
lines changed

‎javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/Xss.expected‎

Lines changed: 56 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,32 @@ nodes
8989
| classnames.js:15:47:15:63 | clsx(window.name) |
9090
| classnames.js:15:52:15:62 | window.name |
9191
| classnames.js:15:52:15:62 | window.name |
92+
| dates.js:9:9:9:69 | taint |
93+
| dates.js:9:17:9:69 | decodeU ... ing(1)) |
94+
| dates.js:9:36:9:50 | window.location |
95+
| dates.js:9:36:9:50 | window.location |
96+
| dates.js:9:36:9:55 | window.location.hash |
97+
| dates.js:9:36:9:68 | window. ... ring(1) |
98+
| dates.js:11:31:11:70 | `Time i ... aint)}` |
99+
| dates.js:11:31:11:70 | `Time i ... aint)}` |
100+
| dates.js:11:42:11:68 | dateFns ... taint) |
101+
| dates.js:11:63:11:67 | taint |
102+
| dates.js:12:31:12:73 | `Time i ... aint)}` |
103+
| dates.js:12:31:12:73 | `Time i ... aint)}` |
104+
| dates.js:12:42:12:71 | dateFns ... taint) |
105+
| dates.js:12:66:12:70 | taint |
106+
| dates.js:13:31:13:72 | `Time i ... time)}` |
107+
| dates.js:13:31:13:72 | `Time i ... time)}` |
108+
| dates.js:13:42:13:70 | dateFns ... )(time) |
109+
| dates.js:13:59:13:63 | taint |
110+
| dates.js:16:31:16:69 | `Time i ... aint)}` |
111+
| dates.js:16:31:16:69 | `Time i ... aint)}` |
112+
| dates.js:16:42:16:67 | moment( ... (taint) |
113+
| dates.js:16:62:16:66 | taint |
114+
| dates.js:18:31:18:66 | `Time i ... aint)}` |
115+
| dates.js:18:31:18:66 | `Time i ... aint)}` |
116+
| dates.js:18:42:18:64 | datefor ... taint) |
117+
| dates.js:18:59:18:63 | taint |
92118
| express.js:7:15:7:33 | req.param("wobble") |
93119
| express.js:7:15:7:33 | req.param("wobble") |
94120
| express.js:7:15:7:33 | req.param("wobble") |
@@ -688,6 +714,31 @@ edges
688714
| classnames.js:15:47:15:63 | clsx(window.name) | classnames.js:15:31:15:78 | `<span ... <span>` |
689715
| classnames.js:15:52:15:62 | window.name | classnames.js:15:47:15:63 | clsx(window.name) |
690716
| classnames.js:15:52:15:62 | window.name | classnames.js:15:47:15:63 | clsx(window.name) |
717+
| dates.js:9:9:9:69 | taint | dates.js:11:63:11:67 | taint |
718+
| dates.js:9:9:9:69 | taint | dates.js:12:66:12:70 | taint |
719+
| dates.js:9:9:9:69 | taint | dates.js:13:59:13:63 | taint |
720+
| dates.js:9:9:9:69 | taint | dates.js:16:62:16:66 | taint |
721+
| dates.js:9:9:9:69 | taint | dates.js:18:59:18:63 | taint |
722+
| dates.js:9:17:9:69 | decodeU ... ing(1)) | dates.js:9:9:9:69 | taint |
723+
| dates.js:9:36:9:50 | window.location | dates.js:9:36:9:55 | window.location.hash |
724+
| dates.js:9:36:9:50 | window.location | dates.js:9:36:9:55 | window.location.hash |
725+
| dates.js:9:36:9:55 | window.location.hash | dates.js:9:36:9:68 | window. ... ring(1) |
726+
| dates.js:9:36:9:68 | window. ... ring(1) | dates.js:9:17:9:69 | decodeU ... ing(1)) |
727+
| dates.js:11:42:11:68 | dateFns ... taint) | dates.js:11:31:11:70 | `Time i ... aint)}` |
728+
| dates.js:11:42:11:68 | dateFns ... taint) | dates.js:11:31:11:70 | `Time i ... aint)}` |
729+
| dates.js:11:63:11:67 | taint | dates.js:11:42:11:68 | dateFns ... taint) |
730+
| dates.js:12:42:12:71 | dateFns ... taint) | dates.js:12:31:12:73 | `Time i ... aint)}` |
731+
| dates.js:12:42:12:71 | dateFns ... taint) | dates.js:12:31:12:73 | `Time i ... aint)}` |
732+
| dates.js:12:66:12:70 | taint | dates.js:12:42:12:71 | dateFns ... taint) |
733+
| dates.js:13:42:13:70 | dateFns ... )(time) | dates.js:13:31:13:72 | `Time i ... time)}` |
734+
| dates.js:13:42:13:70 | dateFns ... )(time) | dates.js:13:31:13:72 | `Time i ... time)}` |
735+
| dates.js:13:59:13:63 | taint | dates.js:13:42:13:70 | dateFns ... )(time) |
736+
| dates.js:16:42:16:67 | moment( ... (taint) | dates.js:16:31:16:69 | `Time i ... aint)}` |
737+
| dates.js:16:42:16:67 | moment( ... (taint) | dates.js:16:31:16:69 | `Time i ... aint)}` |
738+
| dates.js:16:62:16:66 | taint | dates.js:16:42:16:67 | moment( ... (taint) |
739+
| dates.js:18:42:18:64 | datefor ... taint) | dates.js:18:31:18:66 | `Time i ... aint)}` |
740+
| dates.js:18:42:18:64 | datefor ... taint) | dates.js:18:31:18:66 | `Time i ... aint)}` |
741+
| dates.js:18:59:18:63 | taint | dates.js:18:42:18:64 | datefor ... taint) |
691742
| express.js:7:15:7:33 | req.param("wobble") | express.js:7:15:7:33 | req.param("wobble") |
692743
| jquery.js:2:7:2:40 | tainted | jquery.js:7:20:7:26 | tainted |
693744
| jquery.js:2:7:2:40 | tainted | jquery.js:8:28:8:34 | tainted |
@@ -1179,6 +1230,11 @@ edges
11791230
| classnames.js:11:31:11:79 | `<span ... <span>` | classnames.js:10:45:10:55 | window.name | classnames.js:11:31:11:79 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:10:45:10:55 | window.name | user-provided value |
11801231
| classnames.js:13:31:13:83 | `<span ... <span>` | classnames.js:13:57:13:67 | window.name | classnames.js:13:31:13:83 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:13:57:13:67 | window.name | user-provided value |
11811232
| classnames.js:15:31:15:78 | `<span ... <span>` | classnames.js:15:52:15:62 | window.name | classnames.js:15:31:15:78 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:15:52:15:62 | window.name | user-provided value |
1233+
| dates.js:11:31:11:70 | `Time i ... aint)}` | dates.js:9:36:9:50 | window.location | dates.js:11:31:11:70 | `Time i ... aint)}` | Cross-site scripting vulnerability due to $@. | dates.js:9:36:9:50 | window.location | user-provided value |
1234+
| dates.js:12:31:12:73 | `Time i ... aint)}` | dates.js:9:36:9:50 | window.location | dates.js:12:31:12:73 | `Time i ... aint)}` | Cross-site scripting vulnerability due to $@. | dates.js:9:36:9:50 | window.location | user-provided value |
1235+
| dates.js:13:31:13:72 | `Time i ... time)}` | dates.js:9:36:9:50 | window.location | dates.js:13:31:13:72 | `Time i ... time)}` | Cross-site scripting vulnerability due to $@. | dates.js:9:36:9:50 | window.location | user-provided value |
1236+
| dates.js:16:31:16:69 | `Time i ... aint)}` | dates.js:9:36:9:50 | window.location | dates.js:16:31:16:69 | `Time i ... aint)}` | Cross-site scripting vulnerability due to $@. | dates.js:9:36:9:50 | window.location | user-provided value |
1237+
| dates.js:18:31:18:66 | `Time i ... aint)}` | dates.js:9:36:9:50 | window.location | dates.js:18:31:18:66 | `Time i ... aint)}` | Cross-site scripting vulnerability due to $@. | dates.js:9:36:9:50 | window.location | user-provided value |
11821238
| express.js:7:15:7:33 | req.param("wobble") | express.js:7:15:7:33 | req.param("wobble") | express.js:7:15:7:33 | req.param("wobble") | Cross-site scripting vulnerability due to $@. | express.js:7:15:7:33 | req.param("wobble") | user-provided value |
11831239
| jquery.js:7:5:7:34 | "<div i ... + "\\">" | jquery.js:2:17:2:40 | documen ... .search | jquery.js:7:5:7:34 | "<div i ... + "\\">" | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:40 | documen ... .search | user-provided value |
11841240
| jquery.js:8:18:8:34 | "XSS: " + tainted | jquery.js:2:17:2:33 | document.location | jquery.js:8:18:8:34 | "XSS: " + tainted | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:33 | document.location | user-provided value |

‎javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/XssWithAdditionalSources.expected‎

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -89,6 +89,32 @@ nodes
8989
| classnames.js:15:47:15:63 | clsx(window.name) |
9090
| classnames.js:15:52:15:62 | window.name |
9191
| classnames.js:15:52:15:62 | window.name |
92+
| dates.js:9:9:9:69 | taint |
93+
| dates.js:9:17:9:69 | decodeU ... ing(1)) |
94+
| dates.js:9:36:9:50 | window.location |
95+
| dates.js:9:36:9:50 | window.location |
96+
| dates.js:9:36:9:55 | window.location.hash |
97+
| dates.js:9:36:9:68 | window. ... ring(1) |
98+
| dates.js:11:31:11:70 | `Time i ... aint)}` |
99+
| dates.js:11:31:11:70 | `Time i ... aint)}` |
100+
| dates.js:11:42:11:68 | dateFns ... taint) |
101+
| dates.js:11:63:11:67 | taint |
102+
| dates.js:12:31:12:73 | `Time i ... aint)}` |
103+
| dates.js:12:31:12:73 | `Time i ... aint)}` |
104+
| dates.js:12:42:12:71 | dateFns ... taint) |
105+
| dates.js:12:66:12:70 | taint |
106+
| dates.js:13:31:13:72 | `Time i ... time)}` |
107+
| dates.js:13:31:13:72 | `Time i ... time)}` |
108+
| dates.js:13:42:13:70 | dateFns ... )(time) |
109+
| dates.js:13:59:13:63 | taint |
110+
| dates.js:16:31:16:69 | `Time i ... aint)}` |
111+
| dates.js:16:31:16:69 | `Time i ... aint)}` |
112+
| dates.js:16:42:16:67 | moment( ... (taint) |
113+
| dates.js:16:62:16:66 | taint |
114+
| dates.js:18:31:18:66 | `Time i ... aint)}` |
115+
| dates.js:18:31:18:66 | `Time i ... aint)}` |
116+
| dates.js:18:42:18:64 | datefor ... taint) |
117+
| dates.js:18:59:18:63 | taint |
92118
| express.js:7:15:7:33 | req.param("wobble") |
93119
| express.js:7:15:7:33 | req.param("wobble") |
94120
| express.js:7:15:7:33 | req.param("wobble") |
@@ -692,6 +718,31 @@ edges
692718
| classnames.js:15:47:15:63 | clsx(window.name) | classnames.js:15:31:15:78 | `<span ... <span>` |
693719
| classnames.js:15:52:15:62 | window.name | classnames.js:15:47:15:63 | clsx(window.name) |
694720
| classnames.js:15:52:15:62 | window.name | classnames.js:15:47:15:63 | clsx(window.name) |
721+
| dates.js:9:9:9:69 | taint | dates.js:11:63:11:67 | taint |
722+
| dates.js:9:9:9:69 | taint | dates.js:12:66:12:70 | taint |
723+
| dates.js:9:9:9:69 | taint | dates.js:13:59:13:63 | taint |
724+
| dates.js:9:9:9:69 | taint | dates.js:16:62:16:66 | taint |
725+
| dates.js:9:9:9:69 | taint | dates.js:18:59:18:63 | taint |
726+
| dates.js:9:17:9:69 | decodeU ... ing(1)) | dates.js:9:9:9:69 | taint |
727+
| dates.js:9:36:9:50 | window.location | dates.js:9:36:9:55 | window.location.hash |
728+
| dates.js:9:36:9:50 | window.location | dates.js:9:36:9:55 | window.location.hash |
729+
| dates.js:9:36:9:55 | window.location.hash | dates.js:9:36:9:68 | window. ... ring(1) |
730+
| dates.js:9:36:9:68 | window. ... ring(1) | dates.js:9:17:9:69 | decodeU ... ing(1)) |
731+
| dates.js:11:42:11:68 | dateFns ... taint) | dates.js:11:31:11:70 | `Time i ... aint)}` |
732+
| dates.js:11:42:11:68 | dateFns ... taint) | dates.js:11:31:11:70 | `Time i ... aint)}` |
733+
| dates.js:11:63:11:67 | taint | dates.js:11:42:11:68 | dateFns ... taint) |
734+
| dates.js:12:42:12:71 | dateFns ... taint) | dates.js:12:31:12:73 | `Time i ... aint)}` |
735+
| dates.js:12:42:12:71 | dateFns ... taint) | dates.js:12:31:12:73 | `Time i ... aint)}` |
736+
| dates.js:12:66:12:70 | taint | dates.js:12:42:12:71 | dateFns ... taint) |
737+
| dates.js:13:42:13:70 | dateFns ... )(time) | dates.js:13:31:13:72 | `Time i ... time)}` |
738+
| dates.js:13:42:13:70 | dateFns ... )(time) | dates.js:13:31:13:72 | `Time i ... time)}` |
739+
| dates.js:13:59:13:63 | taint | dates.js:13:42:13:70 | dateFns ... )(time) |
740+
| dates.js:16:42:16:67 | moment( ... (taint) | dates.js:16:31:16:69 | `Time i ... aint)}` |
741+
| dates.js:16:42:16:67 | moment( ... (taint) | dates.js:16:31:16:69 | `Time i ... aint)}` |
742+
| dates.js:16:62:16:66 | taint | dates.js:16:42:16:67 | moment( ... (taint) |
743+
| dates.js:18:42:18:64 | datefor ... taint) | dates.js:18:31:18:66 | `Time i ... aint)}` |
744+
| dates.js:18:42:18:64 | datefor ... taint) | dates.js:18:31:18:66 | `Time i ... aint)}` |
745+
| dates.js:18:59:18:63 | taint | dates.js:18:42:18:64 | datefor ... taint) |
695746
| express.js:7:15:7:33 | req.param("wobble") | express.js:7:15:7:33 | req.param("wobble") |
696747
| jquery.js:2:7:2:40 | tainted | jquery.js:7:20:7:26 | tainted |
697748
| jquery.js:2:7:2:40 | tainted | jquery.js:8:28:8:34 | tainted |

0 commit comments

Comments
 (0)