Skip to content

Commit ccab7b6

Browse files
cklincklin
committed
JS: update diff-informed expected files
This commit adds expected files for diff-informed testing. These expected files describe how diff-informed queries produce alerts that are not completely in accordance with the given diff ranges.
1 parent 21170a1 commit ccab7b6

26 files changed

Lines changed: 98 additions & 0 deletions

‎javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/DIFF-INFORMED/UnsafeHtmlConstruction/47d3c.expected‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
Filtering alerts to these ranges:
2+
jquery-plugin.js:all
3+
lib/package.json:all
4+
lib/src/MyNode.ts:all
5+
lib2/index.ts:all
6+
lib2/package.json:all
7+
lib2/src/MyNode.ts:all
8+
main.js:1-10
9+
main.js:13-16
10+
main.js:18-119
11+
package.json:all
12+
typed.ts:all
13+
Wrongly included: | main.js:12:49:12:49 | s | This XML parsing which depends on $@ might later allow $@. | main.js:11:60:11:60 | s | library input | main.js:17:48:17:50 | tmp | cross-site scripting |

‎javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/DIFF-INFORMED/UnsafeHtmlConstruction/ad592.expected‎

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
Filtering alerts to these ranges:
2+
jquery-plugin.js:all
3+
lib/package.json:all
4+
lib/src/MyNode.ts:all
5+
lib2/index.ts:all
6+
lib2/package.json:all
7+
lib2/src/MyNode.ts:all
8+
main.js:1-10
9+
main.js:13-15
10+
main.js:17-119
11+
package.json:all
12+
typed.ts:all
13+
Wrongly included: | main.js:12:49:12:49 | s | This XML parsing which depends on $@ might later allow $@. | main.js:11:60:11:60 | s | library input | main.js:16:21:16:35 | xml.cloneNode() | cross-site scripting |

‎javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/DIFF-INFORMED/UnsafeHtmlConstruction/main.js/(16,21)-(16,35).expected‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
Filtering alerts to these ranges:
2+
main.js:(16,21)-(16,35)
3+
Wrongly included: | main.js:12:49:12:49 | s | This XML parsing which depends on $@ might later allow $@. | main.js:11:60:11:60 | s | library input | main.js:17:48:17:50 | tmp | cross-site scripting |

‎javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/DIFF-INFORMED/UnsafeHtmlConstruction/main.js/(17,48)-(17,50).expected‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
Filtering alerts to these ranges:
2+
main.js:(17,48)-(17,50)
3+
Wrongly included: | main.js:12:49:12:49 | s | This XML parsing which depends on $@ might later allow $@. | main.js:11:60:11:60 | s | library input | main.js:16:21:16:35 | xml.cloneNode() | cross-site scripting |

‎javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/DIFF-INFORMED/UnsafeHtmlConstruction/main.js/16.expected‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
Filtering alerts to these ranges:
2+
main.js:16
3+
Wrongly included: | main.js:12:49:12:49 | s | This XML parsing which depends on $@ might later allow $@. | main.js:11:60:11:60 | s | library input | main.js:17:48:17:50 | tmp | cross-site scripting |

‎javascript/ql/test/query-tests/Security/CWE-079/UnsafeHtmlConstruction/DIFF-INFORMED/UnsafeHtmlConstruction/main.js/17.expected‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
Filtering alerts to these ranges:
2+
main.js:17
3+
Wrongly included: | main.js:12:49:12:49 | s | This XML parsing which depends on $@ might later allow $@. | main.js:11:60:11:60 | s | library input | main.js:16:21:16:35 | xml.cloneNode() | cross-site scripting |

‎javascript/ql/test/query-tests/Security/CWE-400/ReDoS/DIFF-INFORMED/PolynomialReDoS/polynomial-redos.js/(15,28)-(15,35).expected‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
Filtering alerts to these ranges:
2+
polynomial-redos.js:(15,28)-(15,35)
3+
Wrongly included: | polynomial-redos.js:15:2:15:52 | tainted ... (?!`)/) | This $@ that depends on $@ may run slow on strings starting with '`_' and with many repetitions of '\t'. | polynomial-redos.js:15:41:15:43 | \s* | regular expression | polynomial-redos.js:5:16:5:32 | req.query.tainted | a user-provided value |

‎javascript/ql/test/query-tests/Security/CWE-400/ReDoS/DIFF-INFORMED/PolynomialReDoS/polynomial-redos.js/(15,41)-(15,43).expected‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
Filtering alerts to these ranges:
2+
polynomial-redos.js:(15,41)-(15,43)
3+
Wrongly included: | polynomial-redos.js:15:2:15:52 | tainted ... (?!`)/) | This $@ that depends on $@ may run slow on strings starting with '`' and with many repetitions of '\t'. | polynomial-redos.js:15:28:15:35 | [\s\S]*? | regular expression | polynomial-redos.js:5:16:5:32 | req.query.tainted | a user-provided value |

‎javascript/ql/test/query-tests/Security/CWE-400/ReDoS/DIFF-INFORMED/PolynomialReDoS/polynomial-redos.js/(17,11)-(17,12).expected‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
Filtering alerts to these ranges:
2+
polynomial-redos.js:(17,11)-(17,12)
3+
Wrongly included: | polynomial-redos.js:17:2:17:30 | /^(.*,) ... ainted) | This $@ that depends on $@ may run slow on strings with many repetitions of ','. | polynomial-redos.js:17:5:17:6 | .* | regular expression | polynomial-redos.js:5:16:5:32 | req.query.tainted | a user-provided value |

‎javascript/ql/test/query-tests/Security/CWE-400/ReDoS/DIFF-INFORMED/PolynomialReDoS/polynomial-redos.js/(17,5)-(17,6).expected‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
Filtering alerts to these ranges:
2+
polynomial-redos.js:(17,5)-(17,6)
3+
Wrongly included: | polynomial-redos.js:17:2:17:30 | /^(.*,) ... ainted) | This $@ that depends on $@ may run slow on strings starting with ',' and with many repetitions of ',,'. | polynomial-redos.js:17:11:17:12 | .+ | regular expression | polynomial-redos.js:5:16:5:32 | req.query.tainted | a user-provided value |

0 commit comments

Comments
 (0)