File tree Expand file tree Collapse file tree 2 files changed +19
-0
lines changed
javascript/ql/test/query-tests/Security/CWE-918 Expand file tree Collapse file tree 2 files changed +19
-0
lines changed Original file line number Diff line number Diff line change
1
+ consistencyIssue
2
+ resultInWrongFile
Original file line number Diff line number Diff line change
1
+ import javascript
2
+ import semmle.javascript.security.dataflow.RequestForgeryQuery as RequestForgery
3
+ import semmle.javascript.security.dataflow.ClientSideRequestForgeryQuery as ClientSideRequestForgery
4
+ import testUtilities.ConsistencyChecking
5
+
6
+ query predicate resultInWrongFile ( DataFlow:: Node node ) {
7
+ exists ( DataFlow:: Configuration cfg , string filePattern |
8
+ cfg instanceof RequestForgery:: Configuration and
9
+ filePattern = ".*serverSide.*"
10
+ or
11
+ cfg instanceof ClientSideRequestForgery:: Configuration and
12
+ filePattern = ".*clientSide.*"
13
+ |
14
+ cfg .hasFlow ( _, node ) and
15
+ not node .getFile ( ) .getRelativePath ( ) .regexpMatch ( filePattern )
16
+ )
17
+ }
You can’t perform that action at this time.
0 commit comments