[Query Create2]: Detect code injection vulnerability in `juice-shop/juice-shop` app

[data-douser]

Target Language

javascript

Query Name (Optional)

DemoJsCodeInjection

Query Type

Security

Query Description

https://github.com/github/codeql/blob/main/javascript/ql/src/Security/CWE-094/CodeInjection.inc.qhelp

Expected Severity

Critical

Code Examples

https://github.com/juice-shop/juice-shop/blob/master/routes/showProductReviews.ts

https://github.com/juice-shop/juice-shop/blob/master/lib/utils.ts

CWE/CVE Reference (Optional)

CWE-094

References (Optional)

Expected query test results

Code of Conduct

• I agree to follow this project's Code of Conduct