Skip to content

Conversation

rvermeulen
Copy link

This pack will hold the heuristic models part of the standard library for easy enablement.
Currently, only holds source models for XMLHttpRequest.

This pack will hold the heuristic models part of the standard library
for easy enablement.
Currently, only holds source models for XMLHttpRequest.
const req = new XMLHttpRequest();
req.open(url);
req.send("foo");
console.log(req.responseText);

Check warning

Code scanning / CodeQL

Log injection

Log entry depends on a [user-provided value](1).
const req = new XMLHttpRequest();
req.open(url);
req.send("foo");
console.log(req.responseText);

Check notice

Code scanning / CodeQL

UI5 Client-side cross-site scripting partial paths

Partial XSS path from [source](1) to [node](2)
const req = new XMLHttpRequest();
req.open(url);
req.send("foo");
console.log(req.responseText);

Check notice

Code scanning / CodeQL

List all remote sources

Remote flow source of type: Remote flow
Copy link
Contributor

@jeongsoolee09 jeongsoolee09 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, confirmed that it finds a similar node in our benchmark.

@jeongsoolee09 jeongsoolee09 merged commit bf440a4 into main Dec 21, 2023
@jeongsoolee09 jeongsoolee09 deleted the rvermeulen/heuristic-sources-pack branch December 21, 2023 19:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants