JS: add Mongoose createConnection tests

esbena · esbena · commit 730396df1215 · 2020-03-16T22:11:22.000+01:00
diff --git a/javascript/ql/test/query-tests/Security/CWE-089/untyped/mongoose.js b/javascript/ql/test/query-tests/Security/CWE-089/untyped/mongoose.js
@@ -77,4 +77,7 @@ app.post('/documents/find', (req, res) => {
 		.exec()
 	;
 
+	Mongoose.createConnection(X).count(query); // OK (invalid program)
+	Mongoose.createConnection(X).model(Y).count(query); // NOT OK
+	Mongoose.createConnection(X).models[Y].count(query); // NOT OK
 });

Original file line number	Diff line number	Diff line change
`@@ -77,4 +77,7 @@ app.post('/documents/find', (req, res) => {`
`77`	`77`	`.exec()`
`78`	`78`	`;`
`79`	`79`
	`80`	`+ Mongoose.createConnection(X).count(query); // OK (invalid program)`
	`81`	`+ Mongoose.createConnection(X).model(Y).count(query); // NOT OK`
	`82`	`+ Mongoose.createConnection(X).models[Y].count(query); // NOT OK`
`80`	`83`	`});`