add .js and .py files to js/insecure-download

erik-krogh · erik-krogh · commit 4d1920eec13d · 2020-06-15T12:48:50.000+02:00
diff --git a/javascript/ql/src/semmle/javascript/security/dataflow/InsecureDownloadCustomizations.qll b/javascript/ql/src/semmle/javascript/security/dataflow/InsecureDownloadCustomizations.qll
@@ -53,7 +53,7 @@ module InsecureDownload {
   string unsafeExtension() {
     result =
       ["exe", "dmg", "pkg", "tar.gz", "zip", "sh", "bat", "cmd", "app", "apk", "msi", "dmg",
-          "tar.gz", "zip"]
+          "tar.gz", "zip", "js", "py"]
   }
 
   /**

Original file line number	Diff line number	Diff line change
`@@ -53,7 +53,7 @@ module InsecureDownload {`
`53`	`53`	`string unsafeExtension() {`
`54`	`54`	`result =`
`55`	`55`	`["exe", "dmg", "pkg", "tar.gz", "zip", "sh", "bat", "cmd", "app", "apk", "msi", "dmg",`
`56`		`- "tar.gz", "zip"]`
	`56`	`+ "tar.gz", "zip", "js", "py"]`
`57`	`57`	`}`
`58`	`58`
`59`	`59`	`/**`