hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #6323 from RasmusWL/sec-test-layout

Browse Source 
Python: Restructure security tests to contain query name
This commit is contained in:
yoff
2021-08-24 16:50:08 +02:00
committed by GitHub
parent c66a34be9c 5249591747
commit 2f5ed03798
72 changed files with 40 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files

0
python/ql/test/query-tests/Security/CWE-020/IncompleteHostnameRegExp.expected → python/ql/test/query-tests/Security/CWE-020-IncompleteHostnameRegExp/IncompleteHostnameRegExp.expected
View File

0
python/ql/test/query-tests/Security/CWE-020/IncompleteHostnameRegExp.qlref → python/ql/test/query-tests/Security/CWE-020-IncompleteHostnameRegExp/IncompleteHostnameRegExp.qlref
View File

0
python/ql/test/query-tests/Security/CWE-020/hosttest.py → python/ql/test/query-tests/Security/CWE-020-IncompleteHostnameRegExp/hosttest.py
View File

0
python/ql/test/query-tests/Security/CWE-020/IncompleteUrlSubstringSanitization.expected → python/ql/test/query-tests/Security/CWE-020-IncompleteUrlSubstringSanitization/IncompleteUrlSubstringSanitization.expected
View File

0
python/ql/test/query-tests/Security/CWE-020/IncompleteUrlSubstringSanitization.qlref → python/ql/test/query-tests/Security/CWE-020-IncompleteUrlSubstringSanitization/IncompleteUrlSubstringSanitization.qlref
View File

0
python/ql/test/query-tests/Security/CWE-020/urltest.py → python/ql/test/query-tests/Security/CWE-020-IncompleteUrlSubstringSanitization/urltest.py
View File

0
python/ql/test/query-tests/Security/CWE-078-py2/CommandInjection.expected → python/ql/test/query-tests/Security/CWE-078-CommandInjection-py2/CommandInjection.expected
View File

0
python/ql/test/query-tests/Security/CWE-078-py2/CommandInjection.qlref → python/ql/test/query-tests/Security/CWE-078-CommandInjection-py2/CommandInjection.qlref
View File

0
python/ql/test/query-tests/Security/CWE-078-py2/command_injection.py → python/ql/test/query-tests/Security/CWE-078-CommandInjection-py2/command_injection.py
View File

0
python/ql/test/query-tests/Security/CWE-078-py2/options → python/ql/test/query-tests/Security/CWE-078-CommandInjection-py2/options
View File

0
python/ql/test/query-tests/Security/CWE-078/CommandInjection.expected → python/ql/test/query-tests/Security/CWE-078-CommandInjection/CommandInjection.expected
View File

0
python/ql/test/query-tests/Security/CWE-078/CommandInjection.qlref → python/ql/test/query-tests/Security/CWE-078-CommandInjection/CommandInjection.qlref
View File

0
python/ql/test/query-tests/Security/CWE-078/command_injection.py → python/ql/test/query-tests/Security/CWE-078-CommandInjection/command_injection.py
View File

0
python/ql/test/query-tests/Security/CWE-078/options → python/ql/test/query-tests/Security/CWE-078-CommandInjection/options
View File

0
python/ql/test/query-tests/Security/CWE-079/Jinja2WithoutEscaping.expected → python/ql/test/query-tests/Security/CWE-079-Jinja2WithoutEscaping/Jinja2WithoutEscaping.expected
View File

0
python/ql/test/query-tests/Security/CWE-079/Jinja2WithoutEscaping.qlref → python/ql/test/query-tests/Security/CWE-079-Jinja2WithoutEscaping/Jinja2WithoutEscaping.qlref
View File

0
python/ql/test/query-tests/Security/CWE-079/jinja2_escaping.py → python/ql/test/query-tests/Security/CWE-079-Jinja2WithoutEscaping/jinja2_escaping.py
View File

0
python/ql/test/query-tests/Security/CWE-079/options → python/ql/test/query-tests/Security/CWE-079-Jinja2WithoutEscaping/options
View File

0
python/ql/test/query-tests/Security/CWE-079/ReflectedXss.expected → python/ql/test/query-tests/Security/CWE-079-ReflectedXss/ReflectedXss.expected
View File

0
python/ql/test/query-tests/Security/CWE-079/ReflectedXss.qlref → python/ql/test/query-tests/Security/CWE-079-ReflectedXss/ReflectedXss.qlref
View File

0
python/ql/test/query-tests/Security/CWE-079/reflected_xss.py → python/ql/test/query-tests/Security/CWE-079-ReflectedXss/reflected_xss.py
View File

0
python/ql/test/query-tests/Security/CWE-089/SqlInjection.expected → python/ql/test/query-tests/Security/CWE-089-SqlInjection/SqlInjection.expected
View File

0
python/ql/test/query-tests/Security/CWE-089/SqlInjection.qlref → python/ql/test/query-tests/Security/CWE-089-SqlInjection/SqlInjection.qlref
View File

0
python/ql/test/query-tests/Security/CWE-089/sql_injection.py → python/ql/test/query-tests/Security/CWE-089-SqlInjection/sql_injection.py
View File

0
python/ql/test/query-tests/Security/CWE-094/CodeInjection.expected → python/ql/test/query-tests/Security/CWE-094-CodeInjection/CodeInjection.expected
View File

0
python/ql/test/query-tests/Security/CWE-094/CodeInjection.qlref → python/ql/test/query-tests/Security/CWE-094-CodeInjection/CodeInjection.qlref
View File

0
python/ql/test/query-tests/Security/CWE-094/code_injection.py → python/ql/test/query-tests/Security/CWE-094-CodeInjection/code_injection.py
View File

0
python/ql/test/query-tests/Security/CWE-209/ExceptionInfo.expected → python/ql/test/query-tests/Security/CWE-209-StackTraceExposure/ExceptionInfo.expected
View File

0
python/ql/test/query-tests/Security/CWE-209/ExceptionInfo.ql → python/ql/test/query-tests/Security/CWE-209-StackTraceExposure/ExceptionInfo.ql
View File

0
python/ql/test/query-tests/Security/CWE-209/Exceptions.py → python/ql/test/query-tests/Security/CWE-209-StackTraceExposure/Exceptions.py
View File

0
python/ql/test/query-tests/Security/CWE-209/StackTraceExposure.expected → python/ql/test/query-tests/Security/CWE-209-StackTraceExposure/StackTraceExposure.expected
View File

0
python/ql/test/query-tests/Security/CWE-209/StackTraceExposure.qlref → python/ql/test/query-tests/Security/CWE-209-StackTraceExposure/StackTraceExposure.qlref
View File

0
python/ql/test/query-tests/Security/CWE-209/Stacktrace.py → python/ql/test/query-tests/Security/CWE-209-StackTraceExposure/Stacktrace.py
View File

0
python/ql/test/query-tests/Security/CWE-209/options → python/ql/test/query-tests/Security/CWE-209-StackTraceExposure/options
View File

0
python/ql/test/query-tests/Security/CWE-209/test.py → python/ql/test/query-tests/Security/CWE-209-StackTraceExposure/test.py
View File

0
python/ql/test/query-tests/Security/CWE-215/FlaskDebug.expected → python/ql/test/query-tests/Security/CWE-215-FlaskDebug/FlaskDebug.expected
View File

0
python/ql/test/query-tests/Security/CWE-215/FlaskDebug.qlref → python/ql/test/query-tests/Security/CWE-215-FlaskDebug/FlaskDebug.qlref
View File

0
python/ql/test/query-tests/Security/CWE-215/options → python/ql/test/query-tests/Security/CWE-215-FlaskDebug/options
View File

0
python/ql/test/query-tests/Security/CWE-215/settings.py → python/ql/test/query-tests/Security/CWE-215-FlaskDebug/settings.py
View File

0
python/ql/test/query-tests/Security/CWE-215/test.py → python/ql/test/query-tests/Security/CWE-215-FlaskDebug/test.py
View File

0
python/ql/test/query-tests/Security/CWE-326/WeakCryptoKey.expected → python/ql/test/query-tests/Security/CWE-326-WeakCryptoKey/WeakCryptoKey.expected
View File

0
python/ql/test/query-tests/Security/CWE-326/WeakCryptoKey.qlref → python/ql/test/query-tests/Security/CWE-326-WeakCryptoKey/WeakCryptoKey.qlref
View File

0
python/ql/test/query-tests/Security/CWE-326/test_example.py → python/ql/test/query-tests/Security/CWE-326-WeakCryptoKey/test_example.py
View File

0
python/ql/test/query-tests/Security/CWE-326/weak_crypto.py → python/ql/test/query-tests/Security/CWE-326-WeakCryptoKey/weak_crypto.py
View File

0
python/ql/test/query-tests/Security/CWE-327-InsecureProtocol/InsecureDefaultProtocol.expected → python/ql/test/query-tests/Security/CWE-327-InsecureDefaultProtocol/InsecureDefaultProtocol.expected
View File

0
python/ql/test/query-tests/Security/CWE-327-InsecureProtocol/InsecureDefaultProtocol.qlref → python/ql/test/query-tests/Security/CWE-327-InsecureDefaultProtocol/InsecureDefaultProtocol.qlref
View File

7
python/ql/test/query-tests/Security/CWE-327-InsecureDefaultProtocol/InsecureProtocol.py Normal file
View File

@@ -0,0 +1,7 @@
import ssl
# secure versions
ssl.wrap_socket(ssl_version=ssl.PROTOCOL_TLSv1_2)
# possibly insecure default
ssl.wrap_socket()

0
python/ql/test/query-tests/Security/CWE-327/InsecureProtocol.expected → python/ql/test/query-tests/Security/CWE-327-InsecureProtocol/InsecureProtocol.expected
View File

36
python/ql/test/query-tests/Security/CWE-327-InsecureProtocol/InsecureProtocol.py
View File

@@ -1,7 +1,37 @@
import ssl
from OpenSSL import SSL
from ssl import SSLContext
# secure versions
# insecure versions specified
ssl.wrap_socket(ssl_version=ssl.PROTOCOL_SSLv2)
ssl.wrap_socket(ssl_version=ssl.PROTOCOL_SSLv3)
ssl.wrap_socket(ssl_version=ssl.PROTOCOL_TLSv1)
SSLContext(protocol=ssl.PROTOCOL_SSLv2)
SSLContext(protocol=ssl.PROTOCOL_SSLv3)
SSLContext(protocol=ssl.PROTOCOL_TLSv1)
SSL.Context(SSL.SSLv2_METHOD)
SSL.Context(SSL.SSLv3_METHOD)
SSL.Context(SSL.TLSv1_METHOD)
METHOD = SSL.SSLv2_METHOD
SSL.Context(METHOD)
# importing the protocol constant directly
from ssl import PROTOCOL_SSLv2
ssl.wrap_socket(ssl_version=PROTOCOL_SSLv2)
SSLContext(protocol=PROTOCOL_SSLv2)
# secure versions specified
ssl.wrap_socket(ssl_version=ssl.PROTOCOL_TLSv1_2)
SSLContext(protocol=ssl.PROTOCOL_TLSv1_2)
SSL.Context(SSL.TLSv1_2_METHOD)
# possibly insecure default
ssl.wrap_socket()
# insecure versions allowed by specified range
SSLContext(protocol=ssl.PROTOCOL_SSLv23)
SSLContext(protocol=ssl.PROTOCOL_TLS)
SSLContext(protocol=ssl.PROTOCOL_TLS_CLIENT)
SSLContext(protocol=ssl.PROTOCOL_TLS_SERVER)
SSL.Context(SSL.SSLv23_METHOD)

0
python/ql/test/query-tests/Security/CWE-327/InsecureProtocol.qlref → python/ql/test/query-tests/Security/CWE-327-InsecureProtocol/InsecureProtocol.qlref
View File

0
python/ql/test/query-tests/Security/CWE-327/options → python/ql/test/query-tests/Security/CWE-327-InsecureProtocol/options
View File

0
python/ql/test/query-tests/Security/CWE-327/pyOpenSSL_fluent.py → python/ql/test/query-tests/Security/CWE-327-InsecureProtocol/pyOpenSSL_fluent.py
View File

0
python/ql/test/query-tests/Security/CWE-327/ssl_fluent.py → python/ql/test/query-tests/Security/CWE-327-InsecureProtocol/ssl_fluent.py
View File

37
python/ql/test/query-tests/Security/CWE-327/InsecureProtocol.py
View File

@@ -1,37 +0,0 @@
import ssl
from OpenSSL import SSL
from ssl import SSLContext
# insecure versions specified
ssl.wrap_socket(ssl_version=ssl.PROTOCOL_SSLv2)
ssl.wrap_socket(ssl_version=ssl.PROTOCOL_SSLv3)
ssl.wrap_socket(ssl_version=ssl.PROTOCOL_TLSv1)
SSLContext(protocol=ssl.PROTOCOL_SSLv2)
SSLContext(protocol=ssl.PROTOCOL_SSLv3)
SSLContext(protocol=ssl.PROTOCOL_TLSv1)
SSL.Context(SSL.SSLv2_METHOD)
SSL.Context(SSL.SSLv3_METHOD)
SSL.Context(SSL.TLSv1_METHOD)
METHOD = SSL.SSLv2_METHOD
SSL.Context(METHOD)
# importing the protocol constant directly
from ssl import PROTOCOL_SSLv2
ssl.wrap_socket(ssl_version=PROTOCOL_SSLv2)
SSLContext(protocol=PROTOCOL_SSLv2)
# secure versions specified
ssl.wrap_socket(ssl_version=ssl.PROTOCOL_TLSv1_2)
SSLContext(protocol=ssl.PROTOCOL_TLSv1_2)
SSL.Context(SSL.TLSv1_2_METHOD)
# insecure versions allowed by specified range
SSLContext(protocol=ssl.PROTOCOL_SSLv23)
SSLContext(protocol=ssl.PROTOCOL_TLS)
SSLContext(protocol=ssl.PROTOCOL_TLS_CLIENT)
SSLContext(protocol=ssl.PROTOCOL_TLS_SERVER)
SSL.Context(SSL.SSLv23_METHOD)

0
python/ql/test/query-tests/Security/CWE-377/InsecureTemporaryFile.expected → python/ql/test/query-tests/Security/CWE-377-InsecureTemporaryFile/InsecureTemporaryFile.expected
View File

0
python/ql/test/query-tests/Security/CWE-377/InsecureTemporaryFile.py → python/ql/test/query-tests/Security/CWE-377-InsecureTemporaryFile/InsecureTemporaryFile.py
View File

0
python/ql/test/query-tests/Security/CWE-377/InsecureTemporaryFile.qlref → python/ql/test/query-tests/Security/CWE-377-InsecureTemporaryFile/InsecureTemporaryFile.qlref
View File

0
python/ql/test/query-tests/Security/CWE-377/SecureTemporaryFile.py → python/ql/test/query-tests/Security/CWE-377-InsecureTemporaryFile/SecureTemporaryFile.py
View File

0
python/ql/test/query-tests/Security/CWE-502/UnsafeDeserialization.expected → python/ql/test/query-tests/Security/CWE-502-UnsafeDeserialization/UnsafeDeserialization.expected
View File

0
python/ql/test/query-tests/Security/CWE-502/UnsafeDeserialization.qlref → python/ql/test/query-tests/Security/CWE-502-UnsafeDeserialization/UnsafeDeserialization.qlref
View File

0
python/ql/test/query-tests/Security/CWE-502/unsafe_deserialization.py → python/ql/test/query-tests/Security/CWE-502-UnsafeDeserialization/unsafe_deserialization.py
View File

0
python/ql/test/query-tests/Security/CWE-601/UrlRedirect.expected → python/ql/test/query-tests/Security/CWE-601-UrlRedirect/UrlRedirect.expected
View File

0
python/ql/test/query-tests/Security/CWE-601/UrlRedirect.qlref → python/ql/test/query-tests/Security/CWE-601-UrlRedirect/UrlRedirect.qlref
View File

0
python/ql/test/query-tests/Security/CWE-601/options → python/ql/test/query-tests/Security/CWE-601-UrlRedirect/options
View File

0
python/ql/test/query-tests/Security/CWE-601/test.py → python/ql/test/query-tests/Security/CWE-601-UrlRedirect/test.py
View File

0
python/ql/test/query-tests/Security/CWE-732/WeakFilePermissions.expected → python/ql/test/query-tests/Security/CWE-732-WeakFilePermissions/WeakFilePermissions.expected
View File

0
python/ql/test/query-tests/Security/CWE-732/WeakFilePermissions.qlref → python/ql/test/query-tests/Security/CWE-732-WeakFilePermissions/WeakFilePermissions.qlref
View File

0
python/ql/test/query-tests/Security/CWE-732/options → python/ql/test/query-tests/Security/CWE-732-WeakFilePermissions/options
View File

0
python/ql/test/query-tests/Security/CWE-732/test.py → python/ql/test/query-tests/Security/CWE-732-WeakFilePermissions/test.py
View File

0
python/ql/test/query-tests/Security/CWE-798/HardcodedCredentials.expected → python/ql/test/query-tests/Security/CWE-798-HardcodedCredentials/HardcodedCredentials.expected
View File

0
python/ql/test/query-tests/Security/CWE-798/HardcodedCredentials.qlref → python/ql/test/query-tests/Security/CWE-798-HardcodedCredentials/HardcodedCredentials.qlref
View File

0
python/ql/test/query-tests/Security/CWE-798/test.py → python/ql/test/query-tests/Security/CWE-798-HardcodedCredentials/test.py
View File