Chan9390 / codeql-javascript-unsafe-jquery-plugin

Home Page:https://lab.github.com/githubtraining/codeql-for-javascript:-unsafe-jquery-plugin

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Step 8 - Finding jQuery plugin options: final step

github-learning-lab opened this issue · comments

Step 8: Finding the jQuery plugin options

Now we want to finally find the jQuery plugin options.
These are the last parameter of the functions that we found in the previous step.

⌨️ Write your query

Edit the file plugin-options.ql and copy there your previous query.

  1. Modify your from clause so that the variable that describes that jQuery plugin is of type DataFlow::FunctionNode. As the name suggests, this is a data flow node that refers to a function definition. By typing this variable with this type, your query will restrict the possible values for your plugin variable to this type only.
  2. Use auto-completion on that variable to browse the predicates of DataFlow::FunctionNode and find the one that will get you the last parameter of that function. This parameter is typed DataFlow::ParameterNode
  3. Modify your select statement to return both the plugin and the parameter.

Submit your query.

Congratulations, looks like the query you introduced in 9d084b0 finds the correct results!

Take a look at the instructions for the next step to continue.