CodeQL query for Javascript project #20552
Sridharc20
started this conversation in
General
Replies: 1 comment
-
|
Hi @Sridharc20, Thanks for your question.
This can be checked using the
This can be checked using the
For these you would likely want to have a look a dataflow. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
-
Hi everyone,
I’m working on developing CodeQL queries for JavaScript and would like your input. My goals are:
1. Check if a given OSS package is present in package.json.
2. Verify if the OSS package is actually imported in the code.
3. Generate a call graph.
4. Determine whether a sink function is reachable and executed.
5. Assess if the sink function is exploitable.
So far, I’ve been able to generate the call graph. I’d appreciate any guidance on whether the other checks are feasible with CodeQL, and suggestions on how to approach them.
Beta Was this translation helpful? Give feedback.
All reactions