File tree Expand file tree Collapse file tree 3 files changed +10
-0
lines changed
javascript/ql/test/library-tests/TaintTracking Expand file tree Collapse file tree 3 files changed +10
-0
lines changed Original file line number Diff line number Diff line change @@ -154,6 +154,8 @@ typeInferenceMismatch
154
154
| json-stringify.js:2:16:2:23 | source() | json-stringify.js:42:8:42:51 | JSON.st ... urce))) |
155
155
| json-stringify.js:2:16:2:23 | source() | json-stringify.js:45:8:45:23 | fastJson(source) |
156
156
| json-stringify.js:3:15:3:22 | source() | json-stringify.js:8:8:8:31 | jsonStr ... (taint) |
157
+ | logical-and.js:2:17:2:24 | source() | logical-and.js:4:10:4:24 | "safe" && taint |
158
+ | logical-and.js:2:17:2:24 | source() | logical-and.js:5:10:5:24 | taint && "safe" |
157
159
| nested-props.js:4:13:4:20 | source() | nested-props.js:5:10:5:14 | obj.x |
158
160
| nested-props.js:9:18:9:25 | source() | nested-props.js:10:10:10:16 | obj.x.y |
159
161
| nested-props.js:35:13:35:20 | source() | nested-props.js:36:10:36:20 | doLoad(obj) |
Original file line number Diff line number Diff line change 73
73
| importedReactComponent.jsx:4:40:4:47 | source() | exportedReactComponent.jsx:2:10:2:19 | props.text |
74
74
| indexOf.js:4:11:4:18 | source() | indexOf.js:9:10:9:10 | x |
75
75
| indexOf.js:4:11:4:18 | source() | indexOf.js:13:10:13:10 | x |
76
+ | logical-and.js:2:17:2:24 | source() | logical-and.js:4:10:4:24 | "safe" && taint |
77
+ | logical-and.js:2:17:2:24 | source() | logical-and.js:5:10:5:24 | taint && "safe" |
76
78
| nested-props.js:4:13:4:20 | source() | nested-props.js:5:10:5:14 | obj.x |
77
79
| nested-props.js:9:18:9:25 | source() | nested-props.js:10:10:10:16 | obj.x.y |
78
80
| nested-props.js:35:13:35:20 | source() | nested-props.js:36:10:36:20 | doLoad(obj) |
Original file line number Diff line number Diff line change
1
+ function test ( ) {
2
+ var taint = source ( ) ;
3
+
4
+ sink ( "safe" && taint ) ; // NOT OK
5
+ sink ( taint && "safe" ) ; // OK
6
+ }
You can’t perform that action at this time.
0 commit comments