We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent e1c810a commit b123a3cCopy full SHA for b123a3c
2 files changed
javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/Consistency.expected
@@ -0,0 +1,3 @@
1
+| tst16.js:5 | expected an alert, but found none | NOT OK | ClientSideUrlRedirectConsistency |
2
+| tst16.js:6 | expected an alert, but found none | NOT OK | ClientSideUrlRedirectConsistency |
3
+| tst16.js:7 | expected an alert, but found none | NOT OK | ClientSideUrlRedirectConsistency |
javascript/ql/test/query-tests/Security/CWE-601/ClientSideUrlRedirect/tst16.js
@@ -0,0 +1,8 @@
+import queryString from 'query-string';
+import querystringify from 'querystringify';
+
4
+function foo() {
5
+ location.href = queryString.parse(location.search).data; // NOT OK
6
+ location.href = queryString.extract(location.search); // NOT OK
7
+ location.href = querystringify.parse(location.search).data; // NOT OK
8
+}
0 commit comments