File tree Expand file tree Collapse file tree 6 files changed +4
-12
lines changed
cap/lib/advanced_security/javascript/frameworks/cap
lib/advanced_security/javascript/frameworks/ui5
test/queries/UI5Xss/avoid-duplicate-alerts
xsjs/lib/advanced_security/javascript/frameworks/xsjs Expand file tree Collapse file tree 6 files changed +4
-12
lines changed Original file line number Diff line number Diff line change @@ -44,8 +44,6 @@ class CdsLogSink extends DataFlow::Node {
44
44
}
45
45
46
46
class CAPLogInjectionConfiguration extends LogInjectionConfiguration {
47
- CAPLogInjectionConfiguration ( ) { this = "CAP Log Injection" }
48
-
49
47
override predicate isSource ( DataFlow:: Node start ) {
50
48
super .isSource ( start )
51
49
or
Original file line number Diff line number Diff line change @@ -4,8 +4,6 @@ import advanced_security.javascript.frameworks.ui5.UI5View
4
4
import semmle.javascript.security.dataflow.DomBasedXssQuery as DomBasedXss
5
5
6
6
class Configuration extends DomBasedXss:: Configuration {
7
- Configuration ( ) { this = "UI5 HTML Injection" }
8
-
9
7
override predicate isSource ( DataFlow:: Node start ) {
10
8
super .isSource ( start )
11
9
or
Original file line number Diff line number Diff line change 12
12
| XssTest.js:18:9:18:44 | value1 |
13
13
| XssTest.js:18:18:18:44 | jQuery. ... (value) |
14
14
| XssTest.js:18:39:18:43 | value |
15
+ | XssTest.js:19:20:19:25 | value1 |
15
16
| XssTest.js:20:27:20:32 | value1 |
16
17
edges
17
18
| XssTest.js:3:9:3:50 | value | XssTest.js:4:20:4:24 | value |
22
23
| XssTest.js:10:17:10:40 | documen ... .search | XssTest.js:10:9:10:40 | value |
23
24
| XssTest.js:17:9:17:40 | value | XssTest.js:18:39:18:43 | value |
24
25
| XssTest.js:17:17:17:40 | documen ... .search | XssTest.js:17:9:17:40 | value |
26
+ | XssTest.js:18:9:18:44 | value1 | XssTest.js:19:20:19:25 | value1 |
25
27
| XssTest.js:18:9:18:44 | value1 | XssTest.js:20:27:20:32 | value1 |
26
28
| XssTest.js:18:18:18:44 | jQuery. ... (value) | XssTest.js:18:9:18:44 | value1 |
27
29
| XssTest.js:18:39:18:43 | value | XssTest.js:18:18:18:44 | jQuery. ... (value) |
Original file line number Diff line number Diff line change 1
1
import javascript
2
2
import advanced_security.javascript.frameworks.xsjs.AsyncXSJS
3
- import semmle.javascript.security.dataflow.DomBasedXssQuery as DomBasedXss
3
+ import semmle.javascript.security.dataflow.ReflectedXssQuery as ReflectedXssQuery
4
4
5
5
class XSJSResponseSetBodyCall extends MethodCallNode {
6
6
XSJSResponse response ;
@@ -13,9 +13,7 @@ class XSJSResponseSetBodyCall extends MethodCallNode {
13
13
XSJSResponse getParentXSJSResponse ( ) { result = response }
14
14
}
15
15
16
- class Configuration extends DomBasedXss:: Configuration {
17
- Configuration ( ) { this = "XSJS Reflected XSS Query" }
18
-
16
+ class Configuration extends ReflectedXssQuery:: Configuration {
19
17
override predicate isSource ( DataFlow:: Node start ) {
20
18
super .isSource ( start ) or
21
19
start instanceof RemoteFlowSource
Original file line number Diff line number Diff line change @@ -13,8 +13,6 @@ class XSJSDBConnectionPrepareStatementArgument extends DataFlow::ValueNode {
13
13
}
14
14
15
15
class Configuration extends SqlInjection:: Configuration {
16
- Configuration ( ) { this = "XSJS SQL Injection Query" }
17
-
18
16
override predicate isSource ( DataFlow:: Node start ) {
19
17
super .isSource ( start )
20
18
or
Original file line number Diff line number Diff line change @@ -3,8 +3,6 @@ import advanced_security.javascript.frameworks.xsjs.AsyncXSJS
3
3
import semmle.javascript.security.dataflow.ServerSideUrlRedirectQuery as UrlRedirect
4
4
5
5
class Configuration extends UrlRedirect:: Configuration {
6
- Configuration ( ) { this = "XSJS URL Redirect Query" }
7
-
8
6
override predicate isSource ( DataFlow:: Node start ) {
9
7
super .isSource ( start )
10
8
or
You can’t perform that action at this time.
0 commit comments