Skip to content

Commit 4137d3f

Browse files
committed
JS: Split CWE-079 tests into their own folders
1 parent 287ec0c commit 4137d3f

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

67 files changed

+258
-53
lines changed

javascript/ql/test/query-tests/Security/CWE-079/Consistency.ql

Lines changed: 0 additions & 8 deletions
This file was deleted.

javascript/ql/test/query-tests/Security/CWE-079/Consistency.expected renamed to javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/ConsistencyDomBasedXss.expected

File renamed without changes.
Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
import javascript
2+
import testUtilities.ConsistencyChecking
3+
import semmle.javascript.security.dataflow.DomBasedXss as DomXss

javascript/ql/test/query-tests/Security/CWE-079/Xss.expected renamed to javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/Xss.expected

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -59,11 +59,6 @@ nodes
5959
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
6060
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
6161
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
62-
| exception-xss.js:2:6:2:28 | foo |
63-
| exception-xss.js:2:12:2:28 | document.location |
64-
| exception-xss.js:2:12:2:28 | document.location |
65-
| exception-xss.js:86:17:86:19 | foo |
66-
| exception-xss.js:86:17:86:19 | foo |
6762
| jquery.js:2:7:2:40 | tainted |
6863
| jquery.js:2:17:2:33 | document.location |
6964
| jquery.js:2:17:2:33 | document.location |
@@ -577,10 +572,6 @@ edges
577572
| angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
578573
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url |
579574
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
580-
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo |
581-
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo |
582-
| exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo |
583-
| exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo |
584575
| jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted |
585576
| jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted |
586577
| jquery.js:2:7:2:40 | tainted | jquery.js:7:20:7:26 | tainted |
@@ -1022,7 +1013,6 @@ edges
10221013
| angular2-client.ts:35:44:35:91 | this.ro ... arams.x | angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x | Cross-site scripting vulnerability due to $@. | angular2-client.ts:35:44:35:89 | this.ro ... .params | user-provided value |
10231014
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url | Cross-site scripting vulnerability due to $@. | angular2-client.ts:37:44:37:58 | this.router.url | user-provided value |
10241015
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | Cross-site scripting vulnerability due to $@. | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | user-provided value |
1025-
| exception-xss.js:86:17:86:19 | foo | exception-xss.js:2:12:2:28 | document.location | exception-xss.js:86:17:86:19 | foo | Cross-site scripting vulnerability due to $@. | exception-xss.js:2:12:2:28 | document.location | user-provided value |
10261016
| jquery.js:4:5:4:11 | tainted | jquery.js:2:17:2:33 | document.location | jquery.js:4:5:4:11 | tainted | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:33 | document.location | user-provided value |
10271017
| jquery.js:7:5:7:34 | "<div i ... + "\\">" | jquery.js:2:17:2:33 | document.location | jquery.js:7:5:7:34 | "<div i ... + "\\">" | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:33 | document.location | user-provided value |
10281018
| jquery.js:8:18:8:34 | "XSS: " + tainted | jquery.js:2:17:2:33 | document.location | jquery.js:8:18:8:34 | "XSS: " + tainted | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:33 | document.location | user-provided value |

javascript/ql/test/query-tests/Security/CWE-079/Xss.qlref renamed to javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/Xss.qlref

File renamed without changes.

javascript/ql/test/query-tests/Security/CWE-079/XssWithAdditionalSources.expected renamed to javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/XssWithAdditionalSources.expected

Lines changed: 0 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -59,11 +59,6 @@ nodes
5959
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
6060
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
6161
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
62-
| exception-xss.js:2:6:2:28 | foo |
63-
| exception-xss.js:2:12:2:28 | document.location |
64-
| exception-xss.js:2:12:2:28 | document.location |
65-
| exception-xss.js:86:17:86:19 | foo |
66-
| exception-xss.js:86:17:86:19 | foo |
6762
| jquery.js:2:7:2:40 | tainted |
6863
| jquery.js:2:17:2:33 | document.location |
6964
| jquery.js:2:17:2:33 | document.location |
@@ -581,10 +576,6 @@ edges
581576
| angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
582577
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url |
583578
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
584-
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo |
585-
| exception-xss.js:2:6:2:28 | foo | exception-xss.js:86:17:86:19 | foo |
586-
| exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo |
587-
| exception-xss.js:2:12:2:28 | document.location | exception-xss.js:2:6:2:28 | foo |
588579
| jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted |
589580
| jquery.js:2:7:2:40 | tainted | jquery.js:4:5:4:11 | tainted |
590581
| jquery.js:2:7:2:40 | tainted | jquery.js:7:20:7:26 | tainted |

javascript/ql/test/query-tests/Security/CWE-079/XssWithAdditionalSources.ql renamed to javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/XssWithAdditionalSources.ql

File renamed without changes.

javascript/ql/test/query-tests/Security/CWE-079/addEventListener.js renamed to javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/addEventListener.js

File renamed without changes.

javascript/ql/test/query-tests/Security/CWE-079/angular2-client.ts renamed to javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/angular2-client.ts

File renamed without changes.

javascript/ql/test/query-tests/Security/CWE-079/encodeuri.js renamed to javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/encodeuri.js

File renamed without changes.

0 commit comments

Comments
 (0)