hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

C#: Add NHibernate SQL injection tests

Browse Source
This commit is contained in:
Tom Hvitved
2025-12-11 13:14:44 +01:00
parent fac84ee9f3
commit 776f6cd56f
3 changed files with 105 additions and 59 deletions
Download Patch File Download Diff File Expand all files Collapse all files

24
csharp/ql/test/query-tests/Security Features/CWE-089/SqlInjectionNHibernate.cs Normal file
View File

@@ -0,0 +1,24 @@
using System;
namespace TestNHibernate
{
using System.Data;
using System.IO;
using System.Text;
using System.Web.UI.WebControls;
class SqlInjection
{
private string connectionString;
public TextBox untrustedData;
public void InjectUntrustedData(NHibernate.ISession session, NHibernate.IStatelessSession statelessSession, NHibernate.Impl.AbstractSessionImpl impl)
{
session.CreateSQLQuery(untrustedData.Text); // $ Alert[cs/sql-injection]
statelessSession.CreateSQLQuery(untrustedData.Text); // $ Alert[cs/sql-injection]
impl.CreateSQLQuery(untrustedData.Text); // $ Alert[cs/sql-injection]
}
}
}