Skip to content

Commit 469767d

Browse files
asgerfasgerf
committed
JS: Fix test output
1 parent 081017e commit 469767d

2 files changed

Lines changed: 110 additions & 110 deletions

File tree

‎javascript/ql/test/query-tests/Security/CWE-079/DomBasedXss/Xss.expected‎

Lines changed: 58 additions & 58 deletions
Original file line numberDiff line numberDiff line change
@@ -59,36 +59,36 @@ nodes
5959
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
6060
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
6161
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
62-
| classnames.js:7:31:7:82 | `<span ... <span>` |
63-
| classnames.js:7:31:7:82 | `<span ... <span>` |
64-
| classnames.js:7:46:7:68 | classNa ... w.name) |
65-
| classnames.js:7:57:7:67 | window.name |
66-
| classnames.js:7:57:7:67 | window.name |
67-
| classnames.js:8:31:8:83 | `<span ... <span>` |
68-
| classnames.js:8:31:8:83 | `<span ... <span>` |
69-
| classnames.js:8:46:8:69 | classNa ... w.name) |
70-
| classnames.js:8:58:8:68 | window.name |
71-
| classnames.js:8:58:8:68 | window.name |
72-
| classnames.js:9:31:9:83 | `<span ... <span>` |
73-
| classnames.js:9:31:9:83 | `<span ... <span>` |
74-
| classnames.js:9:46:9:69 | classNa ... w.name) |
75-
| classnames.js:9:58:9:68 | window.name |
76-
| classnames.js:9:58:9:68 | window.name |
62+
| classnames.js:7:31:7:84 | `<span ... <span>` |
63+
| classnames.js:7:31:7:84 | `<span ... <span>` |
64+
| classnames.js:7:47:7:69 | classNa ... w.name) |
65+
| classnames.js:7:58:7:68 | window.name |
66+
| classnames.js:7:58:7:68 | window.name |
67+
| classnames.js:8:31:8:85 | `<span ... <span>` |
68+
| classnames.js:8:31:8:85 | `<span ... <span>` |
69+
| classnames.js:8:47:8:70 | classNa ... w.name) |
70+
| classnames.js:8:59:8:69 | window.name |
71+
| classnames.js:8:59:8:69 | window.name |
72+
| classnames.js:9:31:9:85 | `<span ... <span>` |
73+
| classnames.js:9:31:9:85 | `<span ... <span>` |
74+
| classnames.js:9:47:9:70 | classNa ... w.name) |
75+
| classnames.js:9:59:9:69 | window.name |
76+
| classnames.js:9:59:9:69 | window.name |
7777
| classnames.js:10:45:10:55 | window.name |
7878
| classnames.js:10:45:10:55 | window.name |
79-
| classnames.js:11:31:11:77 | `<span ... <span>` |
80-
| classnames.js:11:31:11:77 | `<span ... <span>` |
81-
| classnames.js:11:46:11:63 | unsafeStyle('foo') |
82-
| classnames.js:13:31:13:81 | `<span ... <span>` |
83-
| classnames.js:13:31:13:81 | `<span ... <span>` |
84-
| classnames.js:13:46:13:67 | safeSty ... w.name) |
85-
| classnames.js:13:56:13:66 | window.name |
86-
| classnames.js:13:56:13:66 | window.name |
87-
| classnames.js:15:31:15:76 | `<span ... <span>` |
88-
| classnames.js:15:31:15:76 | `<span ... <span>` |
89-
| classnames.js:15:46:15:62 | clsx(window.name) |
90-
| classnames.js:15:51:15:61 | window.name |
91-
| classnames.js:15:51:15:61 | window.name |
79+
| classnames.js:11:31:11:79 | `<span ... <span>` |
80+
| classnames.js:11:31:11:79 | `<span ... <span>` |
81+
| classnames.js:11:47:11:64 | unsafeStyle('foo') |
82+
| classnames.js:13:31:13:83 | `<span ... <span>` |
83+
| classnames.js:13:31:13:83 | `<span ... <span>` |
84+
| classnames.js:13:47:13:68 | safeSty ... w.name) |
85+
| classnames.js:13:57:13:67 | window.name |
86+
| classnames.js:13:57:13:67 | window.name |
87+
| classnames.js:15:31:15:78 | `<span ... <span>` |
88+
| classnames.js:15:31:15:78 | `<span ... <span>` |
89+
| classnames.js:15:47:15:63 | clsx(window.name) |
90+
| classnames.js:15:52:15:62 | window.name |
91+
| classnames.js:15:52:15:62 | window.name |
9292
| jquery.js:2:7:2:40 | tainted |
9393
| jquery.js:2:7:2:40 | tainted |
9494
| jquery.js:2:17:2:33 | document.location |
@@ -631,30 +631,30 @@ edges
631631
| angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x |
632632
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url |
633633
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') |
634-
| classnames.js:7:46:7:68 | classNa ... w.name) | classnames.js:7:31:7:82 | `<span ... <span>` |
635-
| classnames.js:7:46:7:68 | classNa ... w.name) | classnames.js:7:31:7:82 | `<span ... <span>` |
636-
| classnames.js:7:57:7:67 | window.name | classnames.js:7:46:7:68 | classNa ... w.name) |
637-
| classnames.js:7:57:7:67 | window.name | classnames.js:7:46:7:68 | classNa ... w.name) |
638-
| classnames.js:8:46:8:69 | classNa ... w.name) | classnames.js:8:31:8:83 | `<span ... <span>` |
639-
| classnames.js:8:46:8:69 | classNa ... w.name) | classnames.js:8:31:8:83 | `<span ... <span>` |
640-
| classnames.js:8:58:8:68 | window.name | classnames.js:8:46:8:69 | classNa ... w.name) |
641-
| classnames.js:8:58:8:68 | window.name | classnames.js:8:46:8:69 | classNa ... w.name) |
642-
| classnames.js:9:46:9:69 | classNa ... w.name) | classnames.js:9:31:9:83 | `<span ... <span>` |
643-
| classnames.js:9:46:9:69 | classNa ... w.name) | classnames.js:9:31:9:83 | `<span ... <span>` |
644-
| classnames.js:9:58:9:68 | window.name | classnames.js:9:46:9:69 | classNa ... w.name) |
645-
| classnames.js:9:58:9:68 | window.name | classnames.js:9:46:9:69 | classNa ... w.name) |
646-
| classnames.js:10:45:10:55 | window.name | classnames.js:11:46:11:63 | unsafeStyle('foo') |
647-
| classnames.js:10:45:10:55 | window.name | classnames.js:11:46:11:63 | unsafeStyle('foo') |
648-
| classnames.js:11:46:11:63 | unsafeStyle('foo') | classnames.js:11:31:11:77 | `<span ... <span>` |
649-
| classnames.js:11:46:11:63 | unsafeStyle('foo') | classnames.js:11:31:11:77 | `<span ... <span>` |
650-
| classnames.js:13:46:13:67 | safeSty ... w.name) | classnames.js:13:31:13:81 | `<span ... <span>` |
651-
| classnames.js:13:46:13:67 | safeSty ... w.name) | classnames.js:13:31:13:81 | `<span ... <span>` |
652-
| classnames.js:13:56:13:66 | window.name | classnames.js:13:46:13:67 | safeSty ... w.name) |
653-
| classnames.js:13:56:13:66 | window.name | classnames.js:13:46:13:67 | safeSty ... w.name) |
654-
| classnames.js:15:46:15:62 | clsx(window.name) | classnames.js:15:31:15:76 | `<span ... <span>` |
655-
| classnames.js:15:46:15:62 | clsx(window.name) | classnames.js:15:31:15:76 | `<span ... <span>` |
656-
| classnames.js:15:51:15:61 | window.name | classnames.js:15:46:15:62 | clsx(window.name) |
657-
| classnames.js:15:51:15:61 | window.name | classnames.js:15:46:15:62 | clsx(window.name) |
634+
| classnames.js:7:47:7:69 | classNa ... w.name) | classnames.js:7:31:7:84 | `<span ... <span>` |
635+
| classnames.js:7:47:7:69 | classNa ... w.name) | classnames.js:7:31:7:84 | `<span ... <span>` |
636+
| classnames.js:7:58:7:68 | window.name | classnames.js:7:47:7:69 | classNa ... w.name) |
637+
| classnames.js:7:58:7:68 | window.name | classnames.js:7:47:7:69 | classNa ... w.name) |
638+
| classnames.js:8:47:8:70 | classNa ... w.name) | classnames.js:8:31:8:85 | `<span ... <span>` |
639+
| classnames.js:8:47:8:70 | classNa ... w.name) | classnames.js:8:31:8:85 | `<span ... <span>` |
640+
| classnames.js:8:59:8:69 | window.name | classnames.js:8:47:8:70 | classNa ... w.name) |
641+
| classnames.js:8:59:8:69 | window.name | classnames.js:8:47:8:70 | classNa ... w.name) |
642+
| classnames.js:9:47:9:70 | classNa ... w.name) | classnames.js:9:31:9:85 | `<span ... <span>` |
643+
| classnames.js:9:47:9:70 | classNa ... w.name) | classnames.js:9:31:9:85 | `<span ... <span>` |
644+
| classnames.js:9:59:9:69 | window.name | classnames.js:9:47:9:70 | classNa ... w.name) |
645+
| classnames.js:9:59:9:69 | window.name | classnames.js:9:47:9:70 | classNa ... w.name) |
646+
| classnames.js:10:45:10:55 | window.name | classnames.js:11:47:11:64 | unsafeStyle('foo') |
647+
| classnames.js:10:45:10:55 | window.name | classnames.js:11:47:11:64 | unsafeStyle('foo') |
648+
| classnames.js:11:47:11:64 | unsafeStyle('foo') | classnames.js:11:31:11:79 | `<span ... <span>` |
649+
| classnames.js:11:47:11:64 | unsafeStyle('foo') | classnames.js:11:31:11:79 | `<span ... <span>` |
650+
| classnames.js:13:47:13:68 | safeSty ... w.name) | classnames.js:13:31:13:83 | `<span ... <span>` |
651+
| classnames.js:13:47:13:68 | safeSty ... w.name) | classnames.js:13:31:13:83 | `<span ... <span>` |
652+
| classnames.js:13:57:13:67 | window.name | classnames.js:13:47:13:68 | safeSty ... w.name) |
653+
| classnames.js:13:57:13:67 | window.name | classnames.js:13:47:13:68 | safeSty ... w.name) |
654+
| classnames.js:15:47:15:63 | clsx(window.name) | classnames.js:15:31:15:78 | `<span ... <span>` |
655+
| classnames.js:15:47:15:63 | clsx(window.name) | classnames.js:15:31:15:78 | `<span ... <span>` |
656+
| classnames.js:15:52:15:62 | window.name | classnames.js:15:47:15:63 | clsx(window.name) |
657+
| classnames.js:15:52:15:62 | window.name | classnames.js:15:47:15:63 | clsx(window.name) |
658658
| jquery.js:2:7:2:40 | tainted | jquery.js:7:20:7:26 | tainted |
659659
| jquery.js:2:7:2:40 | tainted | jquery.js:8:28:8:34 | tainted |
660660
| jquery.js:2:17:2:33 | document.location | jquery.js:2:17:2:40 | documen ... .search |
@@ -1117,12 +1117,12 @@ edges
11171117
| angular2-client.ts:35:44:35:91 | this.ro ... arams.x | angular2-client.ts:35:44:35:89 | this.ro ... .params | angular2-client.ts:35:44:35:91 | this.ro ... arams.x | Cross-site scripting vulnerability due to $@. | angular2-client.ts:35:44:35:89 | this.ro ... .params | user-provided value |
11181118
| angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url | angular2-client.ts:37:44:37:58 | this.router.url | Cross-site scripting vulnerability due to $@. | angular2-client.ts:37:44:37:58 | this.router.url | user-provided value |
11191119
| angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | Cross-site scripting vulnerability due to $@. | angular2-client.ts:41:44:41:76 | routeSn ... ('foo') | user-provided value |
1120-
| classnames.js:7:31:7:82 | `<span ... <span>` | classnames.js:7:57:7:67 | window.name | classnames.js:7:31:7:82 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:7:57:7:67 | window.name | user-provided value |
1121-
| classnames.js:8:31:8:83 | `<span ... <span>` | classnames.js:8:58:8:68 | window.name | classnames.js:8:31:8:83 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:8:58:8:68 | window.name | user-provided value |
1122-
| classnames.js:9:31:9:83 | `<span ... <span>` | classnames.js:9:58:9:68 | window.name | classnames.js:9:31:9:83 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:9:58:9:68 | window.name | user-provided value |
1123-
| classnames.js:11:31:11:77 | `<span ... <span>` | classnames.js:10:45:10:55 | window.name | classnames.js:11:31:11:77 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:10:45:10:55 | window.name | user-provided value |
1124-
| classnames.js:13:31:13:81 | `<span ... <span>` | classnames.js:13:56:13:66 | window.name | classnames.js:13:31:13:81 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:13:56:13:66 | window.name | user-provided value |
1125-
| classnames.js:15:31:15:76 | `<span ... <span>` | classnames.js:15:51:15:61 | window.name | classnames.js:15:31:15:76 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:15:51:15:61 | window.name | user-provided value |
1120+
| classnames.js:7:31:7:84 | `<span ... <span>` | classnames.js:7:58:7:68 | window.name | classnames.js:7:31:7:84 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:7:58:7:68 | window.name | user-provided value |
1121+
| classnames.js:8:31:8:85 | `<span ... <span>` | classnames.js:8:59:8:69 | window.name | classnames.js:8:31:8:85 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:8:59:8:69 | window.name | user-provided value |
1122+
| classnames.js:9:31:9:85 | `<span ... <span>` | classnames.js:9:59:9:69 | window.name | classnames.js:9:31:9:85 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:9:59:9:69 | window.name | user-provided value |
1123+
| classnames.js:11:31:11:79 | `<span ... <span>` | classnames.js:10:45:10:55 | window.name | classnames.js:11:31:11:79 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:10:45:10:55 | window.name | user-provided value |
1124+
| classnames.js:13:31:13:83 | `<span ... <span>` | classnames.js:13:57:13:67 | window.name | classnames.js:13:31:13:83 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:13:57:13:67 | window.name | user-provided value |
1125+
| classnames.js:15:31:15:78 | `<span ... <span>` | classnames.js:15:52:15:62 | window.name | classnames.js:15:31:15:78 | `<span ... <span>` | Cross-site scripting vulnerability due to $@. | classnames.js:15:52:15:62 | window.name | user-provided value |
11261126
| jquery.js:7:5:7:34 | "<div i ... + "\\">" | jquery.js:2:17:2:40 | documen ... .search | jquery.js:7:5:7:34 | "<div i ... + "\\">" | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:40 | documen ... .search | user-provided value |
11271127
| jquery.js:8:18:8:34 | "XSS: " + tainted | jquery.js:2:17:2:33 | document.location | jquery.js:8:18:8:34 | "XSS: " + tainted | Cross-site scripting vulnerability due to $@. | jquery.js:2:17:2:33 | document.location | user-provided value |
11281128
| jquery.js:10:5:10:40 | "<b>" + ... "</b>" | jquery.js:10:13:10:20 | location | jquery.js:10:5:10:40 | "<b>" + ... "</b>" | Cross-site scripting vulnerability due to $@. | jquery.js:10:13:10:20 | location | user-provided value |

0 commit comments

Comments
 (0)