@@ -33,18 +33,18 @@ nodes
3333| app.js:59:38:59:74 | req.que ... ringRaw |
3434| app.js:66:18:66:34 | req.query.rawHtml |
3535| app.js:66:18:66:34 | req.query.rawHtml |
36- | projectA/src/index.js:7:16:7:30 | req.query.sinkA |
37- | projectA/src/index.js:7:16:7:30 | req.query.sinkA |
3836| projectA/src/index.js:12:16:12:30 | req.query.sinkA |
3937| projectA/src/index.js:12:16:12:30 | req.query.sinkA |
4038| projectA/src/index.js:17:16:17:30 | req.query.sinkA |
4139| projectA/src/index.js:17:16:17:30 | req.query.sinkA |
42- | projectA/src/index.js:32 :16:32 :30 | req.query.sinkA |
43- | projectA/src/index.js:32 :16:32 :30 | req.query.sinkA |
40+ | projectA/src/index.js:22 :16:22 :30 | req.query.sinkA |
41+ | projectA/src/index.js:22 :16:22 :30 | req.query.sinkA |
4442| projectA/src/index.js:37:16:37:30 | req.query.sinkA |
4543| projectA/src/index.js:37:16:37:30 | req.query.sinkA |
4644| projectA/src/index.js:42:16:42:30 | req.query.sinkA |
4745| projectA/src/index.js:42:16:42:30 | req.query.sinkA |
46+ | projectA/src/index.js:47:16:47:30 | req.query.sinkA |
47+ | projectA/src/index.js:47:16:47:30 | req.query.sinkA |
4848| projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> |
4949| projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> |
5050| projectA/views/main.ejs:2:5:2:9 | sinkA |
@@ -57,16 +57,16 @@ nodes
5757| projectA/views/upward_traversal.ejs:1:1:1:12 | <%- sinkA %> |
5858| projectA/views/upward_traversal.ejs:1:1:1:12 | <%- sinkA %> |
5959| projectA/views/upward_traversal.ejs:1:5:1:9 | sinkA |
60- | projectB/src/index.js:8:16:8:30 | req.query.sinkB |
61- | projectB/src/index.js:8:16:8:30 | req.query.sinkB |
6260| projectB/src/index.js:13:16:13:30 | req.query.sinkB |
6361| projectB/src/index.js:13:16:13:30 | req.query.sinkB |
6462| projectB/src/index.js:18:16:18:30 | req.query.sinkB |
6563| projectB/src/index.js:18:16:18:30 | req.query.sinkB |
66- | projectB/src/index.js:33 :16:33 :30 | req.query.sinkB |
67- | projectB/src/index.js:33 :16:33 :30 | req.query.sinkB |
64+ | projectB/src/index.js:23 :16:23 :30 | req.query.sinkB |
65+ | projectB/src/index.js:23 :16:23 :30 | req.query.sinkB |
6866| projectB/src/index.js:38:16:38:30 | req.query.sinkB |
6967| projectB/src/index.js:38:16:38:30 | req.query.sinkB |
68+ | projectB/src/index.js:43:16:43:30 | req.query.sinkB |
69+ | projectB/src/index.js:43:16:43:30 | req.query.sinkB |
7070| projectB/views/main.ejs:3:1:3:12 | <%- sinkB %> |
7171| projectB/views/main.ejs:3:1:3:12 | <%- sinkB %> |
7272| projectB/views/main.ejs:3:5:3:9 | sinkB |
@@ -183,18 +183,18 @@ edges
183183| app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_include.ejs:3:9:3:15 | rawHtml |
184184| app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_sinks.ejs:4:13:4:19 | rawHtml |
185185| app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_sinks.ejs:4:13:4:19 | rawHtml |
186- | projectA/src/index.js:7:16:7:30 | req.query.sinkA | projectA/views/main.ejs:2:5:2:9 | sinkA |
187- | projectA/src/index.js:7:16:7:30 | req.query.sinkA | projectA/views/main.ejs:2:5:2:9 | sinkA |
188186| projectA/src/index.js:12:16:12:30 | req.query.sinkA | projectA/views/main.ejs:2:5:2:9 | sinkA |
189187| projectA/src/index.js:12:16:12:30 | req.query.sinkA | projectA/views/main.ejs:2:5:2:9 | sinkA |
190- | projectA/src/index.js:17:16:17:30 | req.query.sinkA | projectA/views/subfolder/index .ejs:2:5:2:9 | sinkA |
191- | projectA/src/index.js:17:16:17:30 | req.query.sinkA | projectA/views/subfolder/index .ejs:2:5:2:9 | sinkA |
192- | projectA/src/index.js:32 :16:32 :30 | req.query.sinkA | projectA/views/subfolder/other .ejs:2:5:2:9 | sinkA |
193- | projectA/src/index.js:32 :16:32 :30 | req.query.sinkA | projectA/views/subfolder/other .ejs:2:5:2:9 | sinkA |
188+ | projectA/src/index.js:17:16:17:30 | req.query.sinkA | projectA/views/main .ejs:2:5:2:9 | sinkA |
189+ | projectA/src/index.js:17:16:17:30 | req.query.sinkA | projectA/views/main .ejs:2:5:2:9 | sinkA |
190+ | projectA/src/index.js:22 :16:22 :30 | req.query.sinkA | projectA/views/subfolder/index .ejs:2:5:2:9 | sinkA |
191+ | projectA/src/index.js:22 :16:22 :30 | req.query.sinkA | projectA/views/subfolder/index .ejs:2:5:2:9 | sinkA |
194192| projectA/src/index.js:37:16:37:30 | req.query.sinkA | projectA/views/subfolder/other.ejs:2:5:2:9 | sinkA |
195193| projectA/src/index.js:37:16:37:30 | req.query.sinkA | projectA/views/subfolder/other.ejs:2:5:2:9 | sinkA |
196- | projectA/src/index.js:42:16:42:30 | req.query.sinkA | projectA/views/upward_traversal.ejs:1:5:1:9 | sinkA |
197- | projectA/src/index.js:42:16:42:30 | req.query.sinkA | projectA/views/upward_traversal.ejs:1:5:1:9 | sinkA |
194+ | projectA/src/index.js:42:16:42:30 | req.query.sinkA | projectA/views/subfolder/other.ejs:2:5:2:9 | sinkA |
195+ | projectA/src/index.js:42:16:42:30 | req.query.sinkA | projectA/views/subfolder/other.ejs:2:5:2:9 | sinkA |
196+ | projectA/src/index.js:47:16:47:30 | req.query.sinkA | projectA/views/upward_traversal.ejs:1:5:1:9 | sinkA |
197+ | projectA/src/index.js:47:16:47:30 | req.query.sinkA | projectA/views/upward_traversal.ejs:1:5:1:9 | sinkA |
198198| projectA/views/main.ejs:2:5:2:9 | sinkA | projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> |
199199| projectA/views/main.ejs:2:5:2:9 | sinkA | projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> |
200200| projectA/views/subfolder/index.ejs:2:5:2:9 | sinkA | projectA/views/subfolder/index.ejs:2:1:2:12 | <%- sinkA %> |
@@ -203,16 +203,16 @@ edges
203203| projectA/views/subfolder/other.ejs:2:5:2:9 | sinkA | projectA/views/subfolder/other.ejs:2:1:2:12 | <%- sinkA %> |
204204| projectA/views/upward_traversal.ejs:1:5:1:9 | sinkA | projectA/views/upward_traversal.ejs:1:1:1:12 | <%- sinkA %> |
205205| projectA/views/upward_traversal.ejs:1:5:1:9 | sinkA | projectA/views/upward_traversal.ejs:1:1:1:12 | <%- sinkA %> |
206- | projectB/src/index.js:8:16:8:30 | req.query.sinkB | projectB/views/main.ejs:3:5:3:9 | sinkB |
207- | projectB/src/index.js:8:16:8:30 | req.query.sinkB | projectB/views/main.ejs:3:5:3:9 | sinkB |
208206| projectB/src/index.js:13:16:13:30 | req.query.sinkB | projectB/views/main.ejs:3:5:3:9 | sinkB |
209207| projectB/src/index.js:13:16:13:30 | req.query.sinkB | projectB/views/main.ejs:3:5:3:9 | sinkB |
210- | projectB/src/index.js:18:16:18:30 | req.query.sinkB | projectB/views/subfolder/index .ejs:3:5:3:9 | sinkB |
211- | projectB/src/index.js:18:16:18:30 | req.query.sinkB | projectB/views/subfolder/index .ejs:3:5:3:9 | sinkB |
212- | projectB/src/index.js:33 :16:33 :30 | req.query.sinkB | projectB/views/subfolder/other .ejs:3:5:3:9 | sinkB |
213- | projectB/src/index.js:33 :16:33 :30 | req.query.sinkB | projectB/views/subfolder/other .ejs:3:5:3:9 | sinkB |
208+ | projectB/src/index.js:18:16:18:30 | req.query.sinkB | projectB/views/main .ejs:3:5:3:9 | sinkB |
209+ | projectB/src/index.js:18:16:18:30 | req.query.sinkB | projectB/views/main .ejs:3:5:3:9 | sinkB |
210+ | projectB/src/index.js:23 :16:23 :30 | req.query.sinkB | projectB/views/subfolder/index .ejs:3:5:3:9 | sinkB |
211+ | projectB/src/index.js:23 :16:23 :30 | req.query.sinkB | projectB/views/subfolder/index .ejs:3:5:3:9 | sinkB |
214212| projectB/src/index.js:38:16:38:30 | req.query.sinkB | projectB/views/subfolder/other.ejs:3:5:3:9 | sinkB |
215213| projectB/src/index.js:38:16:38:30 | req.query.sinkB | projectB/views/subfolder/other.ejs:3:5:3:9 | sinkB |
214+ | projectB/src/index.js:43:16:43:30 | req.query.sinkB | projectB/views/subfolder/other.ejs:3:5:3:9 | sinkB |
215+ | projectB/src/index.js:43:16:43:30 | req.query.sinkB | projectB/views/subfolder/other.ejs:3:5:3:9 | sinkB |
216216| projectB/views/main.ejs:3:5:3:9 | sinkB | projectB/views/main.ejs:3:1:3:12 | <%- sinkB %> |
217217| projectB/views/main.ejs:3:5:3:9 | sinkB | projectB/views/main.ejs:3:1:3:12 | <%- sinkB %> |
218218| projectB/views/subfolder/index.ejs:3:5:3:9 | sinkB | projectB/views/subfolder/index.ejs:3:1:3:12 | <%- sinkB %> |
@@ -251,17 +251,17 @@ edges
251251| views/njk_sinks.njk:15:49:15:74 | dataInG ... JsonRaw | views/njk_sinks.njk:15:49:15:81 | dataInG ... \| json |
252252| views/njk_sinks.njk:15:49:15:74 | dataInG ... JsonRaw | views/njk_sinks.njk:15:49:15:81 | dataInG ... \| json |
253253#select
254- | projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> | projectA/src/index.js:7:16:7:30 | req.query.sinkA | projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA/src/index.js:7:16:7:30 | req.query.sinkA | user-provided value |
255254| projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> | projectA/src/index.js:12:16:12:30 | req.query.sinkA | projectA/views/main.ejs:2:1:2:12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA/src/index.js:12:16:12:30 | req.query.sinkA | user-provided value |
256- | projectA/views/subfolder/index .ejs:2:1:2:12 | <%- sinkA %> | projectA/src/index.js:17:16:17:30 | req.query.sinkA | projectA/views/subfolder/index .ejs:2:1:2:12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA/src/index.js:17:16:17:30 | req.query.sinkA | user-provided value |
257- | projectA/views/subfolder/other .ejs:2:1:2:12 | <%- sinkA %> | projectA/src/index.js:32 :16:32 :30 | req.query.sinkA | projectA/views/subfolder/other .ejs:2:1:2:12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA/src/index.js:32 :16:32 :30 | req.query.sinkA | user-provided value |
255+ | projectA/views/main .ejs:2:1:2:12 | <%- sinkA %> | projectA/src/index.js:17:16:17:30 | req.query.sinkA | projectA/views/main .ejs:2:1:2:12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA/src/index.js:17:16:17:30 | req.query.sinkA | user-provided value |
256+ | projectA/views/subfolder/index .ejs:2:1:2:12 | <%- sinkA %> | projectA/src/index.js:22 :16:22 :30 | req.query.sinkA | projectA/views/subfolder/index .ejs:2:1:2:12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA/src/index.js:22 :16:22 :30 | req.query.sinkA | user-provided value |
258257| projectA/views/subfolder/other.ejs:2:1:2:12 | <%- sinkA %> | projectA/src/index.js:37:16:37:30 | req.query.sinkA | projectA/views/subfolder/other.ejs:2:1:2:12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA/src/index.js:37:16:37:30 | req.query.sinkA | user-provided value |
259- | projectA/views/upward_traversal .ejs:1 :1:1 :12 | <%- sinkA %> | projectA/src/index.js:42:16:42:30 | req.query.sinkA | projectA/views/upward_traversal .ejs:1 :1:1 :12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA/src/index.js:42:16:42:30 | req.query.sinkA | user-provided value |
260- | projectB /views/main .ejs:3 :1:3 :12 | <%- sinkB %> | projectB /src/index.js:8 :16:8 :30 | req.query.sinkB | projectB /views/main .ejs:3 :1:3 :12 | <%- sinkB %> | Cross-site scripting vulnerability due to $@. | projectB /src/index.js:8 :16:8 :30 | req.query.sinkB | user-provided value |
258+ | projectA/views/subfolder/other .ejs:2 :1:2 :12 | <%- sinkA %> | projectA/src/index.js:42:16:42:30 | req.query.sinkA | projectA/views/subfolder/other .ejs:2 :1:2 :12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA/src/index.js:42:16:42:30 | req.query.sinkA | user-provided value |
259+ | projectA /views/upward_traversal .ejs:1 :1:1 :12 | <%- sinkA %> | projectA /src/index.js:47 :16:47 :30 | req.query.sinkA | projectA /views/upward_traversal .ejs:1 :1:1 :12 | <%- sinkA %> | Cross-site scripting vulnerability due to $@. | projectA /src/index.js:47 :16:47 :30 | req.query.sinkA | user-provided value |
261260| projectB/views/main.ejs:3:1:3:12 | <%- sinkB %> | projectB/src/index.js:13:16:13:30 | req.query.sinkB | projectB/views/main.ejs:3:1:3:12 | <%- sinkB %> | Cross-site scripting vulnerability due to $@. | projectB/src/index.js:13:16:13:30 | req.query.sinkB | user-provided value |
262- | projectB/views/subfolder/index .ejs:3:1:3:12 | <%- sinkB %> | projectB/src/index.js:18:16:18:30 | req.query.sinkB | projectB/views/subfolder/index .ejs:3:1:3:12 | <%- sinkB %> | Cross-site scripting vulnerability due to $@. | projectB/src/index.js:18:16:18:30 | req.query.sinkB | user-provided value |
263- | projectB/views/subfolder/other .ejs:3:1:3:12 | <%- sinkB %> | projectB/src/index.js:33 :16:33 :30 | req.query.sinkB | projectB/views/subfolder/other .ejs:3:1:3:12 | <%- sinkB %> | Cross-site scripting vulnerability due to $@. | projectB/src/index.js:33 :16:33 :30 | req.query.sinkB | user-provided value |
261+ | projectB/views/main .ejs:3:1:3:12 | <%- sinkB %> | projectB/src/index.js:18:16:18:30 | req.query.sinkB | projectB/views/main .ejs:3:1:3:12 | <%- sinkB %> | Cross-site scripting vulnerability due to $@. | projectB/src/index.js:18:16:18:30 | req.query.sinkB | user-provided value |
262+ | projectB/views/subfolder/index .ejs:3:1:3:12 | <%- sinkB %> | projectB/src/index.js:23 :16:23 :30 | req.query.sinkB | projectB/views/subfolder/index .ejs:3:1:3:12 | <%- sinkB %> | Cross-site scripting vulnerability due to $@. | projectB/src/index.js:23 :16:23 :30 | req.query.sinkB | user-provided value |
264263| projectB/views/subfolder/other.ejs:3:1:3:12 | <%- sinkB %> | projectB/src/index.js:38:16:38:30 | req.query.sinkB | projectB/views/subfolder/other.ejs:3:1:3:12 | <%- sinkB %> | Cross-site scripting vulnerability due to $@. | projectB/src/index.js:38:16:38:30 | req.query.sinkB | user-provided value |
264+ | projectB/views/subfolder/other.ejs:3:1:3:12 | <%- sinkB %> | projectB/src/index.js:43:16:43:30 | req.query.sinkB | projectB/views/subfolder/other.ejs:3:1:3:12 | <%- sinkB %> | Cross-site scripting vulnerability due to $@. | projectB/src/index.js:43:16:43:30 | req.query.sinkB | user-provided value |
265265| views/angularjs_include.ejs:3:5:3:18 | <%- rawHtml %> | app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_include.ejs:3:5:3:18 | <%- rawHtml %> | Cross-site scripting vulnerability due to $@. | app.js:66:18:66:34 | req.query.rawHtml | user-provided value |
266266| views/angularjs_sinks.ejs:4:9:4:22 | <%- rawHtml %> | app.js:66:18:66:34 | req.query.rawHtml | views/angularjs_sinks.ejs:4:9:4:22 | <%- rawHtml %> | Cross-site scripting vulnerability due to $@. | app.js:66:18:66:34 | req.query.rawHtml | user-provided value |
267267| views/ejs_include1.ejs:1:1:1:10 | <%- foo %> | app.js:8:18:8:34 | req.query.rawHtml | views/ejs_include1.ejs:1:1:1:10 | <%- foo %> | Cross-site scripting vulnerability due to $@. | app.js:8:18:8:34 | req.query.rawHtml | user-provided value |
0 commit comments