File tree Expand file tree Collapse file tree 6 files changed +4
-12
lines changed
cap/lib/advanced_security/javascript/frameworks/cap
lib/advanced_security/javascript/frameworks/ui5
test/queries/UI5Xss/avoid-duplicate-alerts
xsjs/lib/advanced_security/javascript/frameworks/xsjs Expand file tree Collapse file tree 6 files changed +4
-12
lines changed Original file line number Diff line number Diff line change @@ -44,8 +44,6 @@ class CdsLogSink extends DataFlow::Node {
4444}
4545
4646class CAPLogInjectionConfiguration extends LogInjectionConfiguration {
47- CAPLogInjectionConfiguration ( ) { this = "CAP Log Injection" }
48-
4947 override predicate isSource ( DataFlow:: Node start ) {
5048 super .isSource ( start )
5149 or
Original file line number Diff line number Diff line change @@ -4,8 +4,6 @@ import advanced_security.javascript.frameworks.ui5.UI5View
44import semmle.javascript.security.dataflow.DomBasedXssQuery as DomBasedXss
55
66class Configuration extends DomBasedXss:: Configuration {
7- Configuration ( ) { this = "UI5 HTML Injection" }
8-
97 override predicate isSource ( DataFlow:: Node start ) {
108 super .isSource ( start )
119 or
Original file line number Diff line number Diff line change 1212| XssTest.js:18:9:18:44 | value1 |
1313| XssTest.js:18:18:18:44 | jQuery. ... (value) |
1414| XssTest.js:18:39:18:43 | value |
15+ | XssTest.js:19:20:19:25 | value1 |
1516| XssTest.js:20:27:20:32 | value1 |
1617edges
1718| XssTest.js:3:9:3:50 | value | XssTest.js:4:20:4:24 | value |
2223| XssTest.js:10:17:10:40 | documen ... .search | XssTest.js:10:9:10:40 | value |
2324| XssTest.js:17:9:17:40 | value | XssTest.js:18:39:18:43 | value |
2425| XssTest.js:17:17:17:40 | documen ... .search | XssTest.js:17:9:17:40 | value |
26+ | XssTest.js:18:9:18:44 | value1 | XssTest.js:19:20:19:25 | value1 |
2527| XssTest.js:18:9:18:44 | value1 | XssTest.js:20:27:20:32 | value1 |
2628| XssTest.js:18:18:18:44 | jQuery. ... (value) | XssTest.js:18:9:18:44 | value1 |
2729| XssTest.js:18:39:18:43 | value | XssTest.js:18:18:18:44 | jQuery. ... (value) |
Original file line number Diff line number Diff line change 11import javascript
22import advanced_security.javascript.frameworks.xsjs.AsyncXSJS
3- import semmle.javascript.security.dataflow.DomBasedXssQuery as DomBasedXss
3+ import semmle.javascript.security.dataflow.ReflectedXssQuery as ReflectedXssQuery
44
55class XSJSResponseSetBodyCall extends MethodCallNode {
66 XSJSResponse response ;
@@ -13,9 +13,7 @@ class XSJSResponseSetBodyCall extends MethodCallNode {
1313 XSJSResponse getParentXSJSResponse ( ) { result = response }
1414}
1515
16- class Configuration extends DomBasedXss:: Configuration {
17- Configuration ( ) { this = "XSJS Reflected XSS Query" }
18-
16+ class Configuration extends ReflectedXssQuery:: Configuration {
1917 override predicate isSource ( DataFlow:: Node start ) {
2018 super .isSource ( start ) or
2119 start instanceof RemoteFlowSource
Original file line number Diff line number Diff line change @@ -13,8 +13,6 @@ class XSJSDBConnectionPrepareStatementArgument extends DataFlow::ValueNode {
1313}
1414
1515class Configuration extends SqlInjection:: Configuration {
16- Configuration ( ) { this = "XSJS SQL Injection Query" }
17-
1816 override predicate isSource ( DataFlow:: Node start ) {
1917 super .isSource ( start )
2018 or
Original file line number Diff line number Diff line change @@ -3,8 +3,6 @@ import advanced_security.javascript.frameworks.xsjs.AsyncXSJS
33import semmle.javascript.security.dataflow.ServerSideUrlRedirectQuery as UrlRedirect
44
55class Configuration extends UrlRedirect:: Configuration {
6- Configuration ( ) { this = "XSJS URL Redirect Query" }
7-
86 override predicate isSource ( DataFlow:: Node start ) {
97 super .isSource ( start )
108 or
You can’t perform that action at this time.
0 commit comments