codeql-sap-js/javascript/frameworks/ui5/test/queries/UI5LogInjection/log-custom-control-sanitized/UI5LogInjection.expected at cf73e686ccf20544f0335fe4ce5f3a8977039601 · advanced-security/codeql-sap-js · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
nodes
| webapp/control/xss.js:8:23:8:40 | { type: "string" } |
| webapp/control/xss.js:15:21:15:46 | value |
| webapp/control/xss.js:15:29:15:46 | oControl.getText() |
| webapp/control/xss.js:16:21:16:56 | sanitized |
| webapp/control/xss.js:16:33:16:56 | encodeX ... value)) |
| webapp/control/xss.js:16:43:16:55 | String(value) |
| webapp/control/xss.js:16:50:16:54 | value |
| webapp/control/xss.js:17:38:17:46 | sanitized |
| webapp/controller/app.controller.js:9:17:9:27 | input: null |
| webapp/view/app.view.xml:5:5:7:28 | value={/input} |
| webapp/view/app.view.xml:8:5:8:38 | text={/input} |
edges
| webapp/control/xss.js:8:23:8:40 | { type: "string" } | webapp/control/xss.js:15:29:15:46 | oControl.getText() |
| webapp/control/xss.js:8:23:8:40 | { type: "string" } | webapp/controller/app.controller.js:9:17:9:27 | input: null |
| webapp/control/xss.js:15:21:15:46 | value | webapp/control/xss.js:16:50:16:54 | value |
| webapp/control/xss.js:15:29:15:46 | oControl.getText() | webapp/control/xss.js:15:21:15:46 | value |
| webapp/control/xss.js:16:21:16:56 | sanitized | webapp/control/xss.js:17:38:17:46 | sanitized |
| webapp/control/xss.js:16:33:16:56 | encodeX ... value)) | webapp/control/xss.js:16:21:16:56 | sanitized |
| webapp/control/xss.js:16:43:16:55 | String(value) | webapp/control/xss.js:16:33:16:56 | encodeX ... value)) |
| webapp/control/xss.js:16:50:16:54 | value | webapp/control/xss.js:16:43:16:55 | String(value) |
| webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/control/xss.js:8:23:8:40 | { type: "string" } |
| webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/view/app.view.xml:5:5:7:28 | value={/input} |
| webapp/controller/app.controller.js:9:17:9:27 | input: null | webapp/view/app.view.xml:8:5:8:38 | text={/input} |
| webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:9:17:9:27 | input: null |
| webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/controller/app.controller.js:11:26:11:45 | new JSONModel(oData) |
| webapp/view/app.view.xml:8:5:8:38 | text={/input} | webapp/controller/app.controller.js:9:17:9:27 | input: null |
#select
| webapp/control/xss.js:17:38:17:46 | sanitized | webapp/view/app.view.xml:5:5:7:28 | value={/input} | webapp/control/xss.js:17:38:17:46 | sanitized | Log entry depends on a $@. | webapp/view/app.view.xml:5:5:7:28 | value={/input} | user-provided value |