hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Show that we have initial taint in urlsplit test

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2020-02-26 14:08:47 +01:00
parent 400a8ffae5
commit 0b31cb1716
2 changed files with 12 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
python/ql/test/library-tests/taint/namedtuple/TestTaint.expected
View File

@@ -3,12 +3,13 @@
| test.py:13 | test_basic | c | externally controlled string |
| test.py:13 | test_basic | d | externally controlled string |
| test.py:13 | test_basic | urlsplit_res | [externally controlled string] |
| test.py:20 | test_sanitizer | Attribute | NO TAINT |
| test.py:23 | test_sanitizer | Subscript | NO TAINT |
| test.py:26 | test_sanitizer | Attribute | NO TAINT |
| test.py:29 | test_sanitizer | Attribute | NO TAINT |
| test.py:32 | test_sanitizer | Attribute | externally controlled string |
| test.py:42 | test_namedtuple | a | NO TAINT |
| test.py:42 | test_namedtuple | b | NO TAINT |
| test.py:42 | test_namedtuple | c | NO TAINT |
| test.py:42 | test_namedtuple | d | NO TAINT |
| test.py:19 | test_sanitizer | Attribute | externally controlled string |
| test.py:22 | test_sanitizer | Attribute | NO TAINT |
| test.py:25 | test_sanitizer | Subscript | NO TAINT |
| test.py:28 | test_sanitizer | Attribute | NO TAINT |
| test.py:31 | test_sanitizer | Attribute | NO TAINT |
| test.py:34 | test_sanitizer | Attribute | externally controlled string |
| test.py:44 | test_namedtuple | a | NO TAINT |
| test.py:44 | test_namedtuple | b | NO TAINT |
| test.py:44 | test_namedtuple | c | NO TAINT |
| test.py:44 | test_namedtuple | d | NO TAINT |

2
python/ql/test/library-tests/taint/namedtuple/test.py
View File

@@ -16,6 +16,8 @@ def test_sanitizer():
tainted_string = TAINTED_STRING
urlsplit_res = urlsplit(tainted_string)
test(urlsplit_res.netloc) # should be tainted
if urlsplit_res.netloc == "OK":
test(urlsplit_res.netloc)