advanced-security
diff --git a/‎javascript/frameworks/cap/src/sensitive-exposure/SensitiveExposureLikely.md‎ renamed to ‎javascript/frameworks/cap/src/sensitive-exposure/SensitiveExposureHeuristicSource.md‎ b/‎javascript/frameworks/cap/src/sensitive-exposure/SensitiveExposureLikely.md‎ renamed to ‎javascript/frameworks/cap/src/sensitive-exposure/SensitiveExposureHeuristicSource.md‎
diff --git a/‎javascript/frameworks/cap/src/sensitive-exposure/SensitiveExposureLikely.ql‎ renamed to ‎javascript/frameworks/cap/src/sensitive-exposure/SensitiveExposureHeuristicSource.ql‎ b/‎javascript/frameworks/cap/src/sensitive-exposure/SensitiveExposureLikely.ql‎ renamed to ‎javascript/frameworks/cap/src/sensitive-exposure/SensitiveExposureHeuristicSource.ql‎
diff --git a/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.expected‎
Lines changed: 17 additions & 0 deletions b/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.expected‎
Lines changed: 17 additions & 0 deletions
diff --git a/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-likely.js‎ renamed to ‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.js‎ b/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-likely.js‎ renamed to ‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.js‎
diff --git a/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.qlref‎
Lines changed: 1 addition & 0 deletions b/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-heuristic-source.qlref‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-likely.expected‎
Lines changed: 0 additions & 17 deletions b/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-likely.expected‎
Lines changed: 0 additions & 17 deletions
diff --git a/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-likely.qlref‎
Lines changed: 0 additions & 1 deletion b/‎javascript/frameworks/cap/test/queries/sensitive-exposure/sensitive-exposure-js-all-sinks/sensitive-exposure-likely.qlref‎
Lines changed: 0 additions & 1 deletion
@@ -0,0 +1,17 @@
+WARNING: module 'PathGraph' has been deprecated and may be removed in future (SensitiveExposureHeuristicSource.ql:18,8-27)
+WARNING: type 'Configuration' has been deprecated and may be removed in future (SensitiveExposureHeuristicSource.ql:20,42-70)
+WARNING: type 'PathNode' has been deprecated and may be removed in future (SensitiveExposureHeuristicSource.ql:28,41-59)
+WARNING: type 'PathNode' has been deprecated and may be removed in future (SensitiveExposureHeuristicSource.ql:28,68-86)
+nodes
+| sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` |
+| sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` |
+| sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) |
+| sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env |
+| sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env |
+edges
+| sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) | sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` |
+| sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) | sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` |
+| sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env | sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) |
+| sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env | sensitive-exposure-heuristic-source.js:6:41:6:67 | JSON.st ... ss.env) |
+#select
+| sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` | sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env | sensitive-exposure-heuristic-source.js:6:18:6:69 | `[INFO] ... .env)}` | This logs sensitive data returned by $@ as clear text. | sensitive-exposure-heuristic-source.js:6:56:6:66 | process.env | process environment |
@@ -0,0 +1 @@
+sensitive-exposure/SensitiveExposureHeuristicSource.ql
Original file line number	Diff line number	Diff line change
`@@ -0,0 +1 @@`
	`1`	`+sensitive-exposure/SensitiveExposureHeuristicSource.ql`