New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Adds support for npm and xsjslib modules #155

Open

mbaluda wants to merge 2 commits into main from mbaluda/modules

Contributor

mbaluda commented Sep 26, 2024

This pull request includes several updates to the XSJS framework adding support for NPM and xsjslib modules.

npm modules with $.require import syntax (from v2.19.0)
add dataflow edges and support for @sap/xss-secure XSS sanitizers
xsjslib modules with $.import("relative/path.xsjslib") syntax using literal relative path
test cases using existing queries


          Add support for XSJS modules

dc481e8

github-advanced-security bot found potential problems

View reviewed changes

javascript/frameworks/xsjs/test/queries/XSJSReflectedXss/XSJSReflectedXss.xsjs

@@ @@ -10,12 +10,12 @@ @@
               function test1(requestParameters) {
                 let someParameterValue1 = requestParameters.get("someParameter1");
                 $.response.contentType = "text/html";
-                $.response.setBody(requestParameterHandler(someParameterValue1));
+                $.response.setBody(requestParameterHandler(someParameterValue1)); // js/xsjs-reflected-xss

Check failure

Code scanning / CodeQL

XSJS Reflected XSS High test

Reflected XSS vulnerability due to

user-provided value

.


          Merge branch 'main' into mbaluda/modules

3c8de35

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet