hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add tests for html escape functions

Browse Source
This commit is contained in:
Sauyon Lee
2021-08-08 14:40:00 -07:00
parent ed1d855025
commit 814004e63d
1 changed files with 42 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

42
java/ql/test/library-tests/frameworks/spring/webutil/Test.java
View File

@@ -2579,6 +2579,48 @@ public class Test {
out = WebUtils.parseMatrixVariables(in);
sink(getMapValue(out)); // $hasTaintFlow
}
{
// "org.springframework.web.util;HtmlUtils;false;htmlEscape;;;Argument[0];ReturnValue;taint"
String out = null;
String in = (String)source();
out = HtmlUtils.htmlEscape(in, null);
sink(out); // $ hasTaintFlow
}
{
// "org.springframework.web.util;HtmlUtils;false;htmlEscape;;;Argument[0];ReturnValue;taint"
String out = null;
String in = (String)source();
out = HtmlUtils.htmlEscape(in);
sink(out); // $ hasTaintFlow
}
{
// "org.springframework.web.util;HtmlUtils;false;htmlEscapeDecimal;;;Argument[0];ReturnValue;taint"
String out = null;
String in = (String)source();
out = HtmlUtils.htmlEscapeDecimal(in, null);
sink(out); // $ hasTaintFlow
}
{
// "org.springframework.web.util;HtmlUtils;false;htmlEscapeDecimal;;;Argument[0];ReturnValue;taint"
String out = null;
String in = (String)source();
out = HtmlUtils.htmlEscapeDecimal(in);
sink(out); // $ hasTaintFlow
}
{
// "org.springframework.web.util;HtmlUtils;false;htmlEscapeHex;;;Argument[0];ReturnValue;taint"
String out = null;
String in = (String)source();
out = HtmlUtils.htmlEscapeHex(in, null);
sink(out); // $ hasTaintFlow
}
{
// "org.springframework.web.util;HtmlUtils;false;htmlEscapeHex;;;Argument[0];ReturnValue;taint"
String out = null;
String in = (String)source();
out = HtmlUtils.htmlEscapeHex(in);
sink(out); // $ hasTaintFlow
}
}