hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-04 21:25:44 +02:00
Code Issues Packages Projects Releases Wiki Activity

C#: Add test for CaptureSinkModel query.

Browse Source
This commit is contained in:
Michael Nebel
2022-03-18 13:52:19 +01:00
parent 5babb0e66a
commit 6194d5cf63
4 changed files with 44 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
csharp/ql/test/utils/model-generator/CaptureSinkModels.expected Normal file
View File

@@ -0,0 +1,3 @@
| Sinks;NewSinks;false;WrapFieldResponseWriteFile;();Argument[Qualifier];html |
| Sinks;NewSinks;false;WrapResponseWrite;(System.Object);Argument[0];html |
| Sinks;NewSinks;false;WrapResponseWriteFile;(System.String);Argument[0];html |

1
csharp/ql/test/utils/model-generator/CaptureSinkModels.qlref Normal file
View File

@@ -0,0 +1 @@
utils/model-generator/CaptureSinkModels.ql

38
csharp/ql/test/utils/model-generator/Sinks.cs Normal file
View File

@@ -0,0 +1,38 @@
using System;
using System.Web;
namespace Sinks;
public class NewSinks
{
private string tainted;
// New sink
public void WrapResponseWrite(object o)
{
var response = new HttpResponse();
response.Write(o);
}
// NOT new sink as method is private
private void PrivateWrapResponseWrite(object o)
{
var response = new HttpResponse();
response.Write(o);
}
// New sink
public void WrapResponseWriteFile(string s)
{
var response = new HttpResponse();
response.WriteFile(s);
}
// New sink
public void WrapFieldResponseWriteFile()
{
var response = new HttpResponse();
response.WriteFile(tainted);
}
}

3
csharp/ql/test/utils/model-generator/options
View File

@@ -1 +1,2 @@
semmle-extractor-options: /r:System.Linq.dll
semmle-extractor-options: /r:System.Linq.dll /r:System.Collections.Specialized.dll
semmle-extractor-options: ${testdir}/../../resources/stubs/System.Web.cs