JS: Add test

asger-semmle · asger-semmle · commit e543097c45fd · 2019-04-18T11:26:39.000+01:00
diff --git a/javascript/ql/test/library-tests/TaintTracking/BasicTaintTracking.expected b/javascript/ql/test/library-tests/TaintTracking/BasicTaintTracking.expected
@@ -12,6 +12,8 @@
 | callbacks.js:44:17:44:24 | source() | callbacks.js:41:10:41:10 | x |
 | callbacks.js:50:18:50:25 | source() | callbacks.js:30:29:30:29 | y |
 | callbacks.js:51:18:51:25 | source() | callbacks.js:30:29:30:29 | y |
+| captured-sanitizer.js:25:3:25:10 | source() | captured-sanitizer.js:13:12:13:12 | x |
+| captured-sanitizer.js:25:3:25:10 | source() | captured-sanitizer.js:15:10:15:10 | x |
 | closure.js:6:15:6:22 | source() | closure.js:8:8:8:31 | string. ... (taint) |
 | closure.js:6:15:6:22 | source() | closure.js:9:8:9:25 | string.trim(taint) |
 | closure.js:6:15:6:22 | source() | closure.js:10:8:10:33 | string. ... nt, 50) |
diff --git a/javascript/ql/test/library-tests/TaintTracking/captured-sanitizer.js b/javascript/ql/test/library-tests/TaintTracking/captured-sanitizer.js
@@ -0,0 +1,25 @@
+import * as dummy from 'dummy';
+
+function f(x) {
+  useVar();
+  useVar();
+  mutateVar();
+  mutateVar();
+
+  function useVar() {
+    if (isSafe(x)) {
+      causeReCapture();
+      causeReCapture();
+      sink(x); // OK
+    }
+    sink(x); // NOT OK
+  }
+
+  function causeReCapture() {}
+
+  function mutateVar() {
+    x = null;
+  }
+}
+
+f(source());
