Skip to content

case对应表

AntJiuFo edited this page Jul 19, 2023 · 2 revisions

还在持续更新中~~

A类case为应该检出的真实有漏洞的case,case名称后不带AB标识的、或者带A的,都是A类case

B类case为实际无漏洞但是看起来很像有漏洞的case,易被引擎检出,case名称后带B的为B类case

case编号 检测场景
case011 astTaintCase-Simple Assignment expression
case012 astTaintCase-Prefix/Suffix expression
case013 astTaintCase-infix expression
case014 astTaintCase-Ternary expressions -- true
case015 astTaintCase-Ternary expressions -- false
case016 astTaintCase-invocation expression
case017 astTaintCase-new expression
case018 astTaintCase-object expression
case019 astTaintCase-object property
case0110 astTaintCase-Array Access
case0111 astTaintCase-Map Access
case0112 astTaintCase-if statement -- discriminant
case0113 astTaintCase-if statement -- true
case0114 astTaintCase-if statement -- false
case0115 astTaintCase-return statement --yield
case0116 astTaintCase-return statement --return
case0117 astTaintCase-switch statement discriminant
case0118 astTaintCase-switch statement case clause
case0119 astTaintCase-switch statement default clause
case0120 astTaintCase-for statement init clause
case0121 astTaintCase-for statement discriminant clause
case0122 astTaintCase-for statement update clause
case0123 astTaintCase-for statement body clause
case0124 astTaintCase-for in
case0125 astTaintCase-for of
case0126 astTaintCase-while condition
case0127 astTaintCase-while body
case0128 astTaintCase-do-while
case0129 astTaintCase-try-statement
case0130 astTaintCase-catch-statement
case0131 astTaintCase-finally-statement
case0132 astTaintCase-anonymous class
case0133 astTaintCase-anonymous function
case0134 astTaintCase-IIFE
case0135 astTaintCase-arrowFunction
case0136 astTaintCase-closure function
case0137 astTaintCase-export statement+func
case0138 astTaintCase-module exports statement + anonymous function
case0139 astTaintCase-Unary expression+Binary expression
case0140 astTaintCase-Binary expression+Binary expression
case0141 astTaintCase-Ternary expressions+Unary/Binary/Ternary expressions
case0142 astTaintCase-invocation expression+unary expression
case0143 astTaintCase-invocation expression+binary expression
case0144 astTaintCase-invocation expression+Ternary expression
case0145 astTaintCase-invocation expression+object property
case0146 astTaintCase-invocation expression+array
case0147 astTaintCase-object property+array
case0148 astTaintCase-method invocation+method invocation
case0149 astTaintCase-method invocation in method invocation
case0150 astTaintCase-return statement+function declaration
case0151 astTaintCase-inner class -- Property access Internal instantiation
case0152 astTaintCase-inner class -- new inner class
case0153 astTaintCase-ThisExpression -- set-->property
case0154 astTaintCase-ThisExpression -- set -->get property
case0155A sourceCase-source Customization -- A
case0155B sourceCase-source Customization -- B
case0155BB sourceCase-source Customization -- BB
case0156 sourceCase-source Customization -- Fuzzy matching
case0157A sinkCase-sink parameter -- A
case0157B sinkCase-sink parameter -- B
case0158 sinkCase-sink directly
case0159 sinkCase-sink object reassign
case0160 sinkCase-sink object require
case0161 sinkCase-sink object import as
case0162 sinkCase-sink object import
case0163 sinkCase-sink object import * as
case0164 sinkCase-sink -- Fuzzy matching -- *.ctx.curl
case0165 specialCase-Template string
case0166 specialCase-Destructuring assignment -- 1
case0167 specialCase-Destructuring assignment -- 2
case0168 specialCase-Destructuring assignment -- 3
case0169 specialCase-Destructuring assignment -- 4
case0170 specialCase-Spread operator -- object assignment
case0171 specialCase-Spread operator -- func param
case0172 specialCase-constructor --> member
case0173 specialCase-parent/child class + super
case0174 specialCase-Native functions
case0175 specialCase-prototype call
case0176 specialCase-Two/Third-party pack
case0177 specialCase-Chained calls
case0178 specialCase-decorator
case0179 specialCase-prototype modify
case0180 specialCase-source --> multi sink
case0180-2 specialCase-source --> multi sink
case0181 specialCase-multi source --> sink
case0181-2 specialCase-multi source --> sink
case0182 specialCase-sink(source)
case0183 specialCase-Promise
case0184 specialCase-util.promisify
case0185 specialCase-callback
case0186 specialCase-sink-->func parameter
case0187 tsCase-type
case0188 tsCase-type as
case0189 tsCase-union type
case0190 tsCase-intersection type
case0191 tsCase-interface implement
case0192 tsCase-interface mixin
case0193 tsCase-generic
case0194 tsCase-reload
case0195 tsCase-namespace
case0196 specialCase-?.
case0197 specialCase-??
case021A sourceSinkAccuracy-source Customization -- A
case021B sourceSinkAccuracy-source Customization -- B
case022A sourceSinkAccuracy-sink parameter -- A
case022B sourceSinkAccuracy-sink parameter -- B
case023A sourceSinkAccuracy-source/sink content -- A
case023B sourceSinkAccuracy-source/sink content -- B
case023BB sourceSinkAccuracy-source/sink content -- BB
case023BBB sourceSinkAccuracy-source/sink content -- BBB
case024A objectAccuracy-object -- source to sink
case024B objectAccuracy-object -- source not to sink
case025A objectAccuracy-Attribute sensitive - A
case025B objectAccuracy-Attribute sensitive - B
case025AA objectAccuracy-Attribute sensitive - AA
case025BB objectAccuracy-Attribute sensitive - BB
case025AAA objectAccuracy-Attribute sensitive - AAA
case025BBB objectAccuracy-Attribute sensitive - BBB
case025AAAA objectAccuracy-Attribute sensitive - AAAA
case025AAAAA objectAccuracy-Attribute sensitive - AAAAA
case025BBBBB objectAccuracy-Attribute sensitive - BBBBB
case026A objectAccuracy-Array Element - A
case026B objectAccuracy-Array Element - B
case027A objectAccuracy-Map Element - A
case027B objectAccuracy-Map Element - B
case028A objectAccuracy-Multi-dimensional array -- A
case028B objectAccuracy-Multi-dimensional array -- B
case029AB objectAccuracy-Element not sure
case0210AB objectAccuracy-char in string -AB
case0211B unReachableAccuracy-static value assignment
case0212B unReachableAccuracy-static value assignment by another value
case0213B unReachableAccuracy-static array
case0214B unReachableAccuracy-static map
case0215B unReachableAccuracy-set method covers the taint value
case0216B unReachableAccuracy-multi return statement
case0217B unReachableAccuracy-logic unreachable
case0218B unReachableAccuracy-logic unreachable
case0219B unReachableAccuracy-Expression solving
case041 mixedCase-if statement +try statement +new statement
case042 mixedCase-object statement + try statement + Destructuring assignment
case043 mixedCase-multi-level object statement + try + Destructuring assignment
case044 mixedCase-try + Destructuring assignment
case045 mixedCase-try + if + object statement + func pass
case046 mixedCase-Destructuring assignment + multi service
case047 mixedCase-promise + require
case048 mixedCase-spread operator + obj expression + to sink
case049 mixedCase-multi spread operator + obj expression in sink
case0410 mixedCase-if statement + binary expression + ?.
case0411 mixedCase-if statement + ?. + Ternary expressions
case0412 mixedCase-?. + array
case0413 mixedCase-binary expression + binary expression + Destructuring assignment
case0414 mixedCase-spread operator + Destructuring assignment + binary expression
case0415 mixedCase-spread operator + Destructuring assignment + third-party pack
case0416 mixedCase-arrow func statement + obj statement + spread operator
case0417 mixedCase-Template string + arrow func statement
case0418 mixedCase-string operate + third-party pack + try statement
case0419 mixedCase-for in + spread operator + arrow func statement
case0420 mixedCase-IIFE + spread operator + Destructuring assignment
Clone this wiki locally