guillsav / codeql-javascript-unsafe-jquery-plugin

https://lab.github.com/githubtraining/codeql-for-javascript:-unsafe-jquery-plugin
0 stars 0 forks source link

Step 6 - Finding jQuery plugin options: property reads #6

Open github-learning-lab[bot] opened 2 years ago

github-learning-lab[bot] commented 2 years ago

Step 6: Finding jQuery plugin options

jQuery plugins are usually defined by assigning a value to a property of the $.fn object:

  $.fn.copyText = function() { ... } // this function is a jQuery plugin

In the following steps, we'll find such plugins, and their options. We'll find

github-learning-lab[bot] commented 2 years ago

:book: Learn about data flow nodes

Take a few minutes to read about the data flow nodes for JavaScript and TypeScript.

github-learning-lab[bot] commented 2 years ago

:keyboard: Finding jQuery property reads

You have already seen how to find references to the jQuery $ function. Now find all places in the code that read the property $.fn. These results of your query will be of type DataFlow::Node.

Notice that jquery() returns a value of type DataFlow::SourceNode, from which the flow of data may be tracked. Use the auto-completion feature after jquery(). to browse the predicates of this DataFlow::SourceNode type, and their documentation. Look for a predicate that gets you all reads of a property named fn.

Write your query in the file property-read.ql and submit it.