hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 03:35:13 +02:00
Code Issues Packages Projects Releases Wiki Activity

Rename to insecure basic auth

Browse Source
This commit is contained in:
luchua-bc
2020-07-28 11:40:21 +00:00
parent 248628b11e
commit 7f911f00ee
8 changed files with 23 additions and 23 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
java/ql/test/experimental/query-tests/security/CWE-522/InsecureBasicAuth.expected Normal file
View File

@@ -0,0 +1,16 @@
edges
| InsecureBasicAuth.java:94:19:94:68 | "http://www.example.com/rest/getuser.do?uid=abcdx" : String | InsecureBasicAuth.java:99:3:99:6 | conn |
| InsecureBasicAuth.java:94:19:94:68 | "http://www.example.com/rest/getuser.do?uid=abcdx" : String | InsecureBasicAuth.java:100:3:100:6 | conn |
| InsecureBasicAuth.java:94:19:94:68 | "http://www.example.com/rest/getuser.do?uid=abcdx" : String | InsecureBasicAuth.java:101:3:101:6 | conn |
nodes
| InsecureBasicAuth.java:94:19:94:68 | "http://www.example.com/rest/getuser.do?uid=abcdx" : String | semmle.label | "http://www.example.com/rest/getuser.do?uid=abcdx" : String |
| InsecureBasicAuth.java:99:3:99:6 | conn | semmle.label | conn |
| InsecureBasicAuth.java:100:3:100:6 | conn | semmle.label | conn |
| InsecureBasicAuth.java:101:3:101:6 | conn | semmle.label | conn |
#select
| InsecureBasicAuth.java:28:3:28:59 | addHeader(...) | Insecure basic authentication |
| InsecureBasicAuth.java:38:3:38:108 | setHeader(...) | Insecure basic authentication |
| InsecureBasicAuth.java:54:3:54:59 | addHeader(...) | Insecure basic authentication |
| InsecureBasicAuth.java:70:3:70:59 | addHeader(...) | Insecure basic authentication |
| InsecureBasicAuth.java:87:3:87:59 | addHeader(...) | Insecure basic authentication |
| InsecureBasicAuth.java:101:3:101:63 | setRequestProperty(...) | Insecure basic authentication |

2
java/ql/test/experimental/query-tests/security/CWE-522/UnsecureBasicAuth.java → java/ql/test/experimental/query-tests/security/CWE-522/InsecureBasicAuth.java
View File

@@ -11,7 +11,7 @@ import java.net.HttpURLConnection;
import java.net.URLConnection;
import java.util.Base64;
public class UnsecureBasicAuth {
public class InsecureBasicAuth {
/**
* Test basic authentication with Apache HTTP POST request using string constructor.
*/

1
java/ql/test/experimental/query-tests/security/CWE-522/InsecureBasicAuth.qlref Normal file
View File

@@ -0,0 +1 @@
experimental/Security/CWE/CWE-522/InsecureBasicAuth.ql

16
java/ql/test/experimental/query-tests/security/CWE-522/UnsecureBasicAuth.expected
View File

@@ -1,16 +0,0 @@
edges
| UnsecureBasicAuth.java:94:19:94:68 | "http://www.example.com/rest/getuser.do?uid=abcdx" : String | UnsecureBasicAuth.java:99:3:99:6 | conn |
| UnsecureBasicAuth.java:94:19:94:68 | "http://www.example.com/rest/getuser.do?uid=abcdx" : String | UnsecureBasicAuth.java:100:3:100:6 | conn |
| UnsecureBasicAuth.java:94:19:94:68 | "http://www.example.com/rest/getuser.do?uid=abcdx" : String | UnsecureBasicAuth.java:101:3:101:6 | conn |
nodes
| UnsecureBasicAuth.java:94:19:94:68 | "http://www.example.com/rest/getuser.do?uid=abcdx" : String | semmle.label | "http://www.example.com/rest/getuser.do?uid=abcdx" : String |
| UnsecureBasicAuth.java:99:3:99:6 | conn | semmle.label | conn |
| UnsecureBasicAuth.java:100:3:100:6 | conn | semmle.label | conn |
| UnsecureBasicAuth.java:101:3:101:6 | conn | semmle.label | conn |
#select
| UnsecureBasicAuth.java:28:3:28:59 | addHeader(...) | Insecure basic authentication |
| UnsecureBasicAuth.java:38:3:38:108 | setHeader(...) | Insecure basic authentication |
| UnsecureBasicAuth.java:54:3:54:59 | addHeader(...) | Insecure basic authentication |
| UnsecureBasicAuth.java:70:3:70:59 | addHeader(...) | Insecure basic authentication |
| UnsecureBasicAuth.java:87:3:87:59 | addHeader(...) | Insecure basic authentication |
| UnsecureBasicAuth.java:101:3:101:63 | setRequestProperty(...) | Insecure basic authentication |

1
java/ql/test/experimental/query-tests/security/CWE-522/UnsecureBasicAuth.qlref
View File

@@ -1 +0,0 @@
experimental/Security/CWE/CWE-522/UnsecureBasicAuth.ql