hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 10:45:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Delete trivial tests

Browse Source
This commit is contained in:
jorgectf
2021-06-28 20:18:31 +02:00
parent 0ca4f240d9
commit 3fd1129895
7 changed files with 5 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
python/ql/test/experimental/query-tests/Security/CWE-943/flask_mongoengine_good.py
View File

@@ -30,7 +30,7 @@ def get_db_find():
safe_search = sanitize(json_search)
retrieved_db = db.get_db()
data = retrieved_db["Movie"].find({'name': safe_search})
return retrieved_db["Movie"].find({'name': safe_search})
# if __name__ == "__main__":
# app.run(debug=True)

2
python/ql/test/experimental/query-tests/Security/CWE-943/flask_pymongo_bad.py
View File

@@ -11,7 +11,7 @@ def home_page():
unsafe_search = request.args['search']
json_search = json.loads(unsafe_search)
data = mongo.db.user.find({'name': json_search})
return mongo.db.user.find({'name': json_search})
# if __name__ == "__main__":
# app.run(debug=True)

2
python/ql/test/experimental/query-tests/Security/CWE-943/flask_pymongo_good.py
View File

@@ -13,7 +13,7 @@ def home_page():
json_search = json.loads(unsafe_search)
safe_search = sanitize(json_search)
data = mongo.db.user.find({'name': safe_search})
return mongo.db.user.find({'name': safe_search})
# if __name__ == "__main__":
# app.run(debug=True)

16
python/ql/test/experimental/query-tests/Security/CWE-943/mongoengine_bad.py
View File

@@ -21,22 +21,6 @@ def connect_find():
db = me.connect('mydb')
return db.movie.find({'name': json_search})
@app.route("/connection_connect_find")
def connection_connect_find():
unsafe_search = request.args['search']
json_search = json.loads(unsafe_search)
db = connect('mydb')
return db.movie.find({'name': json_search})
@app.route("/get_db_find")
def get_db_find():
unsafe_search = request.args['search']
json_search = json.loads(unsafe_search)
db = me.get_db()
return db.movie.find({'name': json_search})
@app.route("/connection_get_db_find")
def connection_get_db_find():
unsafe_search = request.args['search']

18
python/ql/test/experimental/query-tests/Security/CWE-943/mongoengine_good.py
View File

@@ -23,15 +23,6 @@ def connect_find():
db = me.connect('mydb')
return db.movie.find({'name': json_search})
@app.route("/connection_connect_find")
def connection_connect_find():
unsafe_search = request.args['search']
json_search = json.loads(unsafe_search)
safe_search = sanitize(json_search)
db = connect('mydb')
return db.movie.find({'name': json_search})
@app.route("/subclass_objects")
def subclass_objects():
unsafe_search = request.args['search']
@@ -40,15 +31,6 @@ def subclass_objects():
return Movie.objects(__raw__=safe_search)
@app.route("/get_db_find")
def get_db_find():
unsafe_search = request.args['search']
json_search = json.loads(unsafe_search)
safe_search = sanitize(json_search)
db = me.get_db()
return db.movie.find({'name': safe_search})
@app.route("/connection_get_db_find")
def connection_get_db_find():
unsafe_search = request.args['search']

2
python/ql/test/experimental/query-tests/Security/CWE-943/pymongo_bad.py
View File

@@ -11,7 +11,7 @@ def home_page():
unsafe_search = request.args['search']
json_search = json.loads(unsafe_search)
data = client.db.collection.find_one({'data': json_search})
return client.db.collection.find_one({'data': json_search})
# if __name__ == "__main__":
# app.run(debug=True)

2
python/ql/test/experimental/query-tests/Security/CWE-943/pymongo_good.py
View File

@@ -13,7 +13,7 @@ def home_page():
json_search = json.loads(unsafe_search)
safe_search = sanitize(json_search)
data = client.db.collection.find_one({'data': safe_search})
return client.db.collection.find_one({'data': safe_search})
# if __name__ == "__main__":
# app.run(debug=True)