GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — codeql/javascript/ql/src/Security/CWE-209/StackTraceExposure.ql at main · github/codeql Expand file tree/ Copy pathStackTraceExposure.qlMore file actions 23 lines (21 loc) · 895 Bytes / Copy pathStackTraceExposure.qlFile metadata and controls23 lines (21 loc) · 895 Bytes 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 /** * @name Information exposure through a stack trace * @description Propagating stack trace information to an external user can * unintentionally reveal implementation details that are useful * to an attacker for developing a subsequent exploit. * @kind path-problem * @problem.severity warning * @security-severity 5.4 * @precision very-high * @id js/stack-trace-exposure * @tags security * external/cwe/cwe-209 * external/cwe/cwe-497 */ import javascript import semmle.javascript.security.dataflow.StackTraceExposureQuery import StackTraceExposureFlow::PathGraph from StackTraceExposureFlow::PathNode source, StackTraceExposureFlow::PathNode sink where StackTraceExposureFlow::flowPath(source, sink) select sink.getNode(), source, sink, "This information exposed to the user depends on $@.", source.getNode(), "stack trace information" |
| You are visitor 01402520 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |