CodeQL query for Javascript project

[Sridharc20]

Hi everyone,

I’m working on developing CodeQL queries for JavaScript and would like your input. My goals are:
1. Check if a given OSS package is present in package.json.
2. Verify if the OSS package is actually imported in the code.
3. Generate a call graph.
4. Determine whether a sink function is reachable and executed.
5. Assess if the sink function is exploitable.

So far, I’ve been able to generate the call graph. I’d appreciate any guidance on whether the other checks are feasible with CodeQL, and suggestions on how to approach them.

[jketema]

Hi @Sridharc20,

Thanks for your question.

1. Check if a given OSS package is present in package.json.

This can be checked using the PackageJson class.

2. Verify if the OSS package is actually imported in the code.

This can be checked using the Import class.

4. Determine whether a sink function is reachable and executed.
5. Assess if the sink function is exploitable.

For these you would likely want to have a look a dataflow.