Update javascript/ql/test/experimental/Security/CWE-918/check-regex.js

Napalys · erik-krogh · web-flow · commit 1eabb6cbdd20 · 2024-11-11T15:40:22.000+01:00
Co-authored-by: Erik Krogh Kristensen &lt;erik-krogh@github.com&gt;
diff --git a/javascript/ql/test/experimental/Security/CWE-918/check-regex.js b/javascript/ql/test/experimental/Security/CWE-918/check-regex.js
@@ -58,7 +58,7 @@ app.get('/check-with-axios', req => {
     axios.get(baseURL + req.params.tainted); // OK
   }
   if (!isValidPathMatchAll(req.params.tainted) ) {
-    axios.get(baseURL + req.params.tainted); // SSRF
+    axios.get(baseURL + req.params.tainted); // NOT OK - SSRF
   } else {
     axios.get(baseURL + req.params.tainted); // OK
   }

Original file line number	Diff line number	Diff line change
`@@ -58,7 +58,7 @@ app.get('/check-with-axios', req => {`
`58`	`58`	`axios.get(baseURL + req.params.tainted); // OK`
`59`	`59`	`}`
`60`	`60`	`if (!isValidPathMatchAll(req.params.tainted) ) {`
`61`		`- axios.get(baseURL + req.params.tainted); // SSRF`
	`61`	`+ axios.get(baseURL + req.params.tainted); // NOT OK - SSRF`
`62`	`62`	`} else {`
`63`	`63`	`axios.get(baseURL + req.params.tainted); // OK`
`64`	`64`	`}`