JS: Mark a spurious alert

asgerf · asgerf · commit e91a046a17a3 · 2025-02-28T13:28:12.000+01:00
diff --git a/javascript/ql/test/query-tests/Security/CWE-312/passwords.js b/javascript/ql/test/query-tests/Security/CWE-312/passwords.js
@@ -75,7 +75,7 @@
     console.log(config);
 
     var temp = { encryptedPassword: req.body.password };
-    console.log(temp.encryptedPassword); // OK - XXX
+    console.log(temp.encryptedPassword); // $ SPURIOUS: Alert[js/clear-text-logging]
 
     var secret = password;
     console.log(`pw: ${secret}`); // $ Alert[js/clear-text-logging]
