add test for unsafe-code-construction query · existentializm/codeql@d790f3c · GitHub
Skip to content

Commit d790f3c

Browse files
erik-krogherik-krogh
committed
add test for unsafe-code-construction query
1 parent 198a464 commit d790f3c

4 files changed

Lines changed: 38 additions & 0 deletions

File tree

‎javascript/ql/test/query-tests/Security/CWE-094/CodeInjection/UnsafeCodeConstruction.expected‎

Lines changed: 21 additions & 0 deletions

‎javascript/ql/test/query-tests/Security/CWE-094/CodeInjection/UnsafeCodeConstruction.qlref‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
Security/CWE-094/UnsafeCodeConstruction.ql

‎javascript/ql/test/query-tests/Security/CWE-094/CodeInjection/lib/index.js‎

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,11 @@
1+
export function unsafeDeserialize(data) {
2+
return eval("(" + data + ")"); // NOT OK
3+
}
4+
5+
export function unsafeGetter(obj, name) {
6+
return eval("obj." + name); // NOT OK
7+
}
8+
9+
export function safeAssignment(obj, value) {
10+
eval("obj.foo = " + JSON.stringify(value)); // OK
11+
}

‎javascript/ql/test/query-tests/Security/CWE-094/CodeInjection/lib/package.json‎

Lines changed: 5 additions & 0 deletions

0 commit comments

Comments
 (0)