JS: Accept alerts for missing-x-frame-options

asgerf · asgerf · commit cea53371f2df · 2025-02-28T13:28:29.000+01:00
diff --git a/javascript/ql/test/query-tests/Security/CWE-451/connect-bad.js b/javascript/ql/test/query-tests/Security/CWE-451/connect-bad.js
@@ -1,7 +1,7 @@
 var connect = require('connect');
 var http = require('http');
 
-var app = connect();
+var app = connect(); // $ Alert
 
 app.use(function (req, res){
 
diff --git a/javascript/ql/test/query-tests/Security/CWE-451/express-bad.js b/javascript/ql/test/query-tests/Security/CWE-451/express-bad.js
@@ -1,5 +1,5 @@
 var express = require('express'),
-    app = express();
+    app = express(); // $ Alert
 
 
 app.get('/', function (req, res) {
diff --git a/javascript/ql/test/query-tests/Security/CWE-451/hapi-bad.js b/javascript/ql/test/query-tests/Security/CWE-451/hapi-bad.js
@@ -1,5 +1,5 @@
 var Hapi = require('hapi');
-var server = new Hapi.Server();
+var server = new Hapi.Server(); // $ Alert
 server.route({
     handler: function (request, reply){
 
diff --git a/javascript/ql/test/query-tests/Security/CWE-451/koa-bad.js b/javascript/ql/test/query-tests/Security/CWE-451/koa-bad.js
@@ -1,5 +1,5 @@
 var Koa = require('koa');
-var app = new Koa();
+var app = new Koa(); // $ Alert
 app.use(function handler(ctx){
 
 });
diff --git a/javascript/ql/test/query-tests/Security/CWE-451/node-bad.js b/javascript/ql/test/query-tests/Security/CWE-451/node-bad.js
@@ -1,4 +1,4 @@
 var http = require('http')
 
 http.createServer(function (request, response) {
-  }).listen(9615)
+  }).listen(9615) // $ Alert
diff --git a/javascript/ql/test/query-tests/Security/CWE-451/restify-bad.js b/javascript/ql/test/query-tests/Security/CWE-451/restify-bad.js
@@ -1,5 +1,5 @@
 var restify = require('restify');
-var server = restify.createServer();
+var server = restify.createServer(); // $ Alert
 server.head('/', function (request, response){
 
 });
