add test for importScripts

erik-krogh · erik-krogh · commit 6e84ac8e6c15 · 2020-09-14T16:02:34.000+02:00
diff --git a/javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/tst13.js b/javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/tst13.js
@@ -43,4 +43,6 @@ function foo() {
     var el = document.createElement("script");
     el.src = payload;
     document.body.appendChild(el); // NOT OK
+
+    importScripts(payload); // NOT OK
 }

Original file line number	Diff line number	Diff line change
`@@ -43,4 +43,6 @@ function foo() {`
`43`	`43`	`var el = document.createElement("script");`
`44`	`44`	`el.src = payload;`
`45`	`45`	`document.body.appendChild(el); // NOT OK`
	`46`	`+`
	`47`	`+ importScripts(payload); // NOT OK`
`46`	`48`	`}`