Skip to content

Commit b90dd89

Browse files
esbenaesbena
committed
JS: move js/resource-exhaustion to experimental
1 parent 3c9c79a commit b90dd89

File tree

13 files changed

+20
-21
lines changed

13 files changed

+20
-21
lines changed

‎javascript/config/suites/javascript/security

-1
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,6 @@
5151
+ semmlecode-javascript-queries/Security/CWE-730/RegExpInjection.ql: /Security/CWE/CWE-730
5252
+ semmlecode-javascript-queries/Security/CWE-754/UnvalidatedDynamicMethodCall.ql: /Security/CWE/CWE-754
5353
+ semmlecode-javascript-queries/Security/CWE-770/MissingRateLimiting.ql: /Security/CWE/CWE-770
54-
+ semmlecode-javascript-queries/Security/CWE-770/ResourceExhaustion.ql: /Security/CWE/CWE-770
5554
+ semmlecode-javascript-queries/Security/CWE-776/XmlBomb.ql: /Security/CWE/CWE-776
5655
+ semmlecode-javascript-queries/Security/CWE-798/HardcodedCredentials.ql: /Security/CWE/CWE-798
5756
+ semmlecode-javascript-queries/Security/CWE-807/ConditionalBypass.ql: /Security/CWE/CWE-807

‎javascript/ql/src/Security/CWE-770/ResourceExhaustion.qhelp renamed to ‎javascript/ql/src/experimental/Security/CWE-770/ResourceExhaustion.qhelp

File renamed without changes.

‎javascript/ql/src/Security/CWE-770/ResourceExhaustion.ql renamed to ‎javascript/ql/src/experimental/Security/CWE-770/ResourceExhaustion.ql

+1-1
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@
1212

1313
import javascript
1414
import DataFlow::PathGraph
15-
import semmle.javascript.security.dataflow.ResourceExhaustion::ResourceExhaustion
15+
import experimental.semmle.javascript.security.dataflow.ResourceExhaustion::ResourceExhaustion
1616

1717
from Configuration dataflow, DataFlow::PathNode source, DataFlow::PathNode sink
1818
where dataflow.hasFlowPath(source, sink)

‎javascript/ql/src/Security/CWE-770/examples/ResourceExhaustion_timeout.js renamed to ‎javascript/ql/src/experimental/Security/CWE-770/examples/ResourceExhaustion_timeout.js

File renamed without changes.

‎javascript/ql/src/Security/CWE-770/examples/ResourceExhaustion_timeout_fixed.js renamed to ‎javascript/ql/src/experimental/Security/CWE-770/examples/ResourceExhaustion_timeout_fixed.js

File renamed without changes.

‎javascript/ql/src/semmle/javascript/security/dataflow/ResourceExhaustion.qll renamed to ‎javascript/ql/src/experimental/semmle/javascript/security/dataflow/ResourceExhaustion.qll

File renamed without changes.

‎javascript/ql/src/semmle/javascript/security/dataflow/ResourceExhaustionCustomizations.qll renamed to ‎javascript/ql/src/experimental/semmle/javascript/security/dataflow/ResourceExhaustionCustomizations.qll

File renamed without changes.

‎javascript/ql/test/query-tests/Security/CWE-770/ResourceExhaustion.expected renamed to ‎javascript/ql/test/experimental/Security/CWE-770/ResourceExhaustion.expected

+18-18
Original file line numberDiff line numberDiff line change
@@ -1,13 +1,13 @@
11
nodes
2-
| documentation_examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay |
3-
| documentation_examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) |
4-
| documentation_examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) |
5-
| documentation_examples/ResourceExhaustion_timeout.js:5:23:5:52 | url.par ... ).query |
6-
| documentation_examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay |
7-
| documentation_examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url |
8-
| documentation_examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url |
9-
| documentation_examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay |
10-
| documentation_examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay |
2+
| documentaion-examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay |
3+
| documentaion-examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) |
4+
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) |
5+
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:52 | url.par ... ).query |
6+
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay |
7+
| documentaion-examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url |
8+
| documentaion-examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url |
9+
| documentaion-examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay |
10+
| documentaion-examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay |
1111
| resource-exhaustion.js:9:7:9:42 | s |
1212
| resource-exhaustion.js:9:11:9:34 | url.par ... , true) |
1313
| resource-exhaustion.js:9:11:9:40 | url.par ... ).query |
@@ -30,14 +30,14 @@ nodes
3030
| resource-exhaustion.js:88:18:88:18 | s |
3131
| resource-exhaustion.js:88:18:88:18 | s |
3232
edges
33-
| documentation_examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay | documentation_examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay |
34-
| documentation_examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay | documentation_examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay |
35-
| documentation_examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) | documentation_examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay |
36-
| documentation_examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) | documentation_examples/ResourceExhaustion_timeout.js:5:23:5:52 | url.par ... ).query |
37-
| documentation_examples/ResourceExhaustion_timeout.js:5:23:5:52 | url.par ... ).query | documentation_examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay |
38-
| documentation_examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay | documentation_examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) |
39-
| documentation_examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | documentation_examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) |
40-
| documentation_examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | documentation_examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) |
33+
| documentaion-examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay | documentaion-examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay |
34+
| documentaion-examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay | documentaion-examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay |
35+
| documentaion-examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) | documentaion-examples/ResourceExhaustion_timeout.js:5:6:5:59 | delay |
36+
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) | documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:52 | url.par ... ).query |
37+
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:52 | url.par ... ).query | documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay |
38+
| documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:58 | url.par ... y.delay | documentaion-examples/ResourceExhaustion_timeout.js:5:14:5:59 | parseIn ... .delay) |
39+
| documentaion-examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) |
40+
| documentaion-examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | documentaion-examples/ResourceExhaustion_timeout.js:5:23:5:46 | url.par ... , true) |
4141
| resource-exhaustion.js:9:7:9:42 | s | resource-exhaustion.js:10:20:10:20 | s |
4242
| resource-exhaustion.js:9:7:9:42 | s | resource-exhaustion.js:39:12:39:12 | s |
4343
| resource-exhaustion.js:9:7:9:42 | s | resource-exhaustion.js:39:12:39:12 | s |
@@ -59,7 +59,7 @@ edges
5959
| resource-exhaustion.js:10:11:10:21 | parseInt(s) | resource-exhaustion.js:10:7:10:21 | n |
6060
| resource-exhaustion.js:10:20:10:20 | s | resource-exhaustion.js:10:11:10:21 | parseInt(s) |
6161
#select
62-
| documentation_examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay | documentation_examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | documentation_examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay | This creates a timer with a user-controlled duration from $@. | documentation_examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | here |
62+
| documentaion-examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay | documentaion-examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | documentaion-examples/ResourceExhaustion_timeout.js:7:16:7:20 | delay | This creates a timer with a user-controlled duration from $@. | documentaion-examples/ResourceExhaustion_timeout.js:5:33:5:39 | req.url | here |
6363
| resource-exhaustion.js:38:12:38:12 | n | resource-exhaustion.js:9:21:9:27 | req.url | resource-exhaustion.js:38:12:38:12 | n | This creates a string with a user-controlled length from $@. | resource-exhaustion.js:9:21:9:27 | req.url | here |
6464
| resource-exhaustion.js:39:12:39:12 | s | resource-exhaustion.js:9:21:9:27 | req.url | resource-exhaustion.js:39:12:39:12 | s | This creates a string with a user-controlled length from $@. | resource-exhaustion.js:9:21:9:27 | req.url | here |
6565
| resource-exhaustion.js:85:17:85:17 | n | resource-exhaustion.js:9:21:9:27 | req.url | resource-exhaustion.js:85:17:85:17 | n | This creates a timer with a user-controlled duration from $@. | resource-exhaustion.js:9:21:9:27 | req.url | here |

‎javascript/ql/test/experimental/Security/CWE-770/ResourceExhaustion.qlref

+1
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
experimental/Security/CWE-770/ResourceExhaustion.ql

‎javascript/ql/test/query-tests/Security/CWE-770/documentation_examples/ResourceExhaustion_timeout.js renamed to ‎javascript/ql/test/experimental/Security/CWE-770/documentaion-examples/ResourceExhaustion_timeout.js

File renamed without changes.

‎javascript/ql/test/query-tests/Security/CWE-770/documentation_examples/ResourceExhaustion_timeout_fixed.js renamed to ‎javascript/ql/test/experimental/Security/CWE-770/documentaion-examples/ResourceExhaustion_timeout_fixed.js

File renamed without changes.

‎javascript/ql/test/query-tests/Security/CWE-770/resource-exhaustion.js renamed to ‎javascript/ql/test/experimental/Security/CWE-770/resource-exhaustion.js

File renamed without changes.

‎javascript/ql/test/query-tests/Security/CWE-770/ResourceExhaustion.qlref

-1
This file was deleted.

0 commit comments

Comments
 (0)