Add query suite inclusion tests for cpp, python

This commit is contained in:
Tamas Vajk
2025-04-28 08:45:41 +02:00
parent 966b7463ee
commit a408e216ae
12 changed files with 1263 additions and 0 deletions

View File

@@ -0,0 +1,176 @@
ql/python/ql/src/AlertSuppression.ql
ql/python/ql/src/Classes/MaybeUndefinedClassAttribute.ql
ql/python/ql/src/Classes/ShouldBeContextManager.ql
ql/python/ql/src/Classes/UndefinedClassAttribute.ql
ql/python/ql/src/Classes/UselessClass.ql
ql/python/ql/src/Expressions/NonPortableComparisonUsingIs.ql
ql/python/ql/src/Filters/ClassifyFiles.ql
ql/python/ql/src/Functions/ReturnValueIgnored.ql
ql/python/ql/src/Imports/ImportShadowedByLoopVar.ql
ql/python/ql/src/Imports/ImportStarUsed.ql
ql/python/ql/src/Imports/Imports.ql
ql/python/ql/src/Lexical/FCommentedOutCode.ql
ql/python/ql/src/Lexical/ToDoComment.ql
ql/python/ql/src/Metrics/CLinesOfCode.ql
ql/python/ql/src/Metrics/ClassAfferentCoupling.ql
ql/python/ql/src/Metrics/ClassEfferentCoupling.ql
ql/python/ql/src/Metrics/CommentRatio.ql
ql/python/ql/src/Metrics/CyclomaticComplexity.ql
ql/python/ql/src/Metrics/Dependencies/ExternalDependencies.ql
ql/python/ql/src/Metrics/Dependencies/ExternalDependenciesSourceLinks.ql
ql/python/ql/src/Metrics/DirectImports.ql
ql/python/ql/src/Metrics/DocStringRatio.ql
ql/python/ql/src/Metrics/External/CommitDisplayStrings.ql
ql/python/ql/src/Metrics/External/CommitSourceLinks.ql
ql/python/ql/src/Metrics/FClasses.ql
ql/python/ql/src/Metrics/FFunctionsAndMethods.ql
ql/python/ql/src/Metrics/FLines.ql
ql/python/ql/src/Metrics/FLinesOfCode.ql
ql/python/ql/src/Metrics/FLinesOfComments.ql
ql/python/ql/src/Metrics/FLinesOfDuplicatedCode.ql
ql/python/ql/src/Metrics/FLinesOfSimilarCode.ql
ql/python/ql/src/Metrics/FNumberOfTests.ql
ql/python/ql/src/Metrics/FunctionNumberOfCalls.ql
ql/python/ql/src/Metrics/FunctionStatementNestingDepth.ql
ql/python/ql/src/Metrics/History/HChurn.ql
ql/python/ql/src/Metrics/History/HLinesAdded.ql
ql/python/ql/src/Metrics/History/HLinesDeleted.ql
ql/python/ql/src/Metrics/History/HNumberOfAuthors.ql
ql/python/ql/src/Metrics/History/HNumberOfCoCommits.ql
ql/python/ql/src/Metrics/History/HNumberOfCommits.ql
ql/python/ql/src/Metrics/History/HNumberOfReCommits.ql
ql/python/ql/src/Metrics/History/HNumberOfRecentAuthors.ql
ql/python/ql/src/Metrics/History/HNumberOfRecentChangedFiles.ql
ql/python/ql/src/Metrics/History/HNumberOfRecentCommits.ql
ql/python/ql/src/Metrics/Internal/CallableDisplayStrings.ql
ql/python/ql/src/Metrics/Internal/CallableExtents.ql
ql/python/ql/src/Metrics/Internal/CallableSourceLinks.ql
ql/python/ql/src/Metrics/Internal/ClassDisplayStrings.ql
ql/python/ql/src/Metrics/Internal/ClassExtents.ql
ql/python/ql/src/Metrics/Internal/ClassSourceLinks.ql
ql/python/ql/src/Metrics/Internal/TypeAnnotations.ql
ql/python/ql/src/Metrics/LackofCohesionInMethodsCK.ql
ql/python/ql/src/Metrics/LackofCohesionInMethodsHM.ql
ql/python/ql/src/Metrics/ModuleAfferentCoupling.ql
ql/python/ql/src/Metrics/ModuleEfferentCoupling.ql
ql/python/ql/src/Metrics/NumberOfParametersWithoutDefault.ql
ql/python/ql/src/Metrics/NumberOfStatements.ql
ql/python/ql/src/Metrics/TransitiveImports.ql
ql/python/ql/src/Security/CWE-020-ExternalAPIs/ExternalAPIsUsedWithUntrustedData.ql
ql/python/ql/src/Security/CWE-020-ExternalAPIs/UntrustedDataToExternalAPI.ql
ql/python/ql/src/Statements/AssertLiteralConstant.ql
ql/python/ql/src/Statements/C_StyleParentheses.ql
ql/python/ql/src/Statements/DocStrings.ql
ql/python/ql/src/Statements/ExecUsed.ql
ql/python/ql/src/Statements/StringConcatenationInLoop.ql
ql/python/ql/src/Variables/Global.ql
ql/python/ql/src/Variables/ShadowBuiltin.ql
ql/python/ql/src/Variables/ShadowGlobal.ql
ql/python/ql/src/Variables/UndefinedGlobal.ql
ql/python/ql/src/Variables/UnusedParameter.ql
ql/python/ql/src/analysis/CallGraphEfficiency.ql
ql/python/ql/src/analysis/CallGraphMarginalEfficiency.ql
ql/python/ql/src/analysis/Consistency.ql
ql/python/ql/src/analysis/ContextEfficiency.ql
ql/python/ql/src/analysis/ContextMarginalEfficiency.ql
ql/python/ql/src/analysis/Definitions.ql
ql/python/ql/src/analysis/Efficiency.ql
ql/python/ql/src/analysis/FailedInference.ql
ql/python/ql/src/analysis/ImportFailure.ql
ql/python/ql/src/analysis/KeyPointsToFailure.ql
ql/python/ql/src/analysis/PointsToFailure.ql
ql/python/ql/src/analysis/Pruned.ql
ql/python/ql/src/analysis/RatioOfDefinitions.ql
ql/python/ql/src/analysis/Summary.ql
ql/python/ql/src/analysis/TypeHierarchyFailure.ql
ql/python/ql/src/analysis/TypeInferenceFailure.ql
ql/python/ql/src/experimental/Classes/NamingConventionsClasses.ql
ql/python/ql/src/experimental/Functions/NamingConventionsFunctions.ql
ql/python/ql/src/experimental/Security/CWE-022/ZipSlip.ql
ql/python/ql/src/experimental/Security/CWE-022bis/TarSlipImprov.ql
ql/python/ql/src/experimental/Security/CWE-022bis/UnsafeUnpack.ql
ql/python/ql/src/experimental/Security/CWE-074/remoteCommandExecution/RemoteCommandExecution.ql
ql/python/ql/src/experimental/Security/CWE-079/EmailXss.ql
ql/python/ql/src/experimental/Security/CWE-091/XsltInjection.ql
ql/python/ql/src/experimental/Security/CWE-094/Js2Py.ql
ql/python/ql/src/experimental/Security/CWE-1236/CsvInjection.ql
ql/python/ql/src/experimental/Security/CWE-176/UnicodeBypassValidation.ql
ql/python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/PossibleTimingAttackAgainstHash.ql
ql/python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHash/TimingAttackAgainstHash.ql
ql/python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstHeaderValue/TimingAttackAgainstHeaderValue.ql
ql/python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/PossibleTimingAttackAgainstSensitiveInfo.ql
ql/python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo/TimingAttackAgainstSensitiveInfo.ql
ql/python/ql/src/experimental/Security/CWE-287-ConstantSecretKey/WebAppConstantSecretKey.ql
ql/python/ql/src/experimental/Security/CWE-287/ImproperLdapAuth.ql
ql/python/ql/src/experimental/Security/CWE-327/Azure/UnsafeUsageOfClientSideEncryptionVersion.ql
ql/python/ql/src/experimental/Security/CWE-338/InsecureRandomness.ql
ql/python/ql/src/experimental/Security/CWE-340/TokenBuiltFromUUID.ql
ql/python/ql/src/experimental/Security/CWE-346/CorsBypass.ql
ql/python/ql/src/experimental/Security/CWE-347/JWTEmptyKeyOrAlgorithm.ql
ql/python/ql/src/experimental/Security/CWE-347/JWTMissingSecretOrPublicKeyVerification.ql
ql/python/ql/src/experimental/Security/CWE-348/ClientSuppliedIpUsedInSecurityCheck.ql
ql/python/ql/src/experimental/Security/CWE-409/DecompressionBombs.ql
ql/python/ql/src/experimental/Security/CWE-522/LdapInsecureAuth.ql
ql/python/ql/src/experimental/Security/CWE-611/SimpleXmlRpcServer.ql
ql/python/ql/src/experimental/Security/CWE-770/UnicodeDoS.ql
ql/python/ql/src/experimental/Security/CWE-942/CorsMisconfigurationMiddleware.ql
ql/python/ql/src/experimental/cryptography/example_alerts/UnknownAsymmetricKeyGen.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakAsymmetricKeyGen.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakAsymmetricPadding.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakBlockMode.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakBlockModeIVorNonce.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakEllipticCurve.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakHashes.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakKDFAlgorithm.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakKDFIteration.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakKDFKeyLength.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakKDFMode.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakKDFSaltGen.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakKDFSaltSize.ql
ql/python/ql/src/experimental/cryptography/example_alerts/WeakSymmetricEncryption.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/AllAsymmetricAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/AllCryptoAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/AsymmetricEncryptionAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/AsymmetricKeyGenOperation.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/AsymmetricPaddingAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/AuthenticatedEncryptionAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/BlockModeAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/BlockModeKnownIVsOrNonces.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/BlockModeUnknownIVsOrNonces.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/EllipticCurveAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/HashingAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/KeyDerivationAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/KeyExchangeAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/SigningAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/SymmetricEncryptionAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/new_models/SymmetricPaddingAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/old_models/AllCryptoAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/old_models/BlockModeAlgorithms.ql
ql/python/ql/src/experimental/cryptography/inventory/old_models/HashingAlgorithms.ql
ql/python/ql/src/external/DuplicateBlock.ql
ql/python/ql/src/external/DuplicateFunction.ql
ql/python/ql/src/external/MostlyDuplicateClass.ql
ql/python/ql/src/external/MostlyDuplicateFile.ql
ql/python/ql/src/external/MostlySimilarFile.ql
ql/python/ql/src/external/SimilarFunction.ql
ql/python/ql/src/meta/ClassHierarchy/Find.ql
ql/python/ql/src/meta/alerts/InterestingTaintSinks.ql
ql/python/ql/src/meta/alerts/RemoteFlowSources.ql
ql/python/ql/src/meta/alerts/RemoteFlowSourcesReach.ql
ql/python/ql/src/meta/alerts/RequestHandlers.ql
ql/python/ql/src/meta/alerts/TaintSinks.ql
ql/python/ql/src/meta/analysis-quality/CallGraph.ql
ql/python/ql/src/meta/analysis-quality/PointsToResolvableCallRatio.ql
ql/python/ql/src/meta/analysis-quality/PointsToResolvableCalls.ql
ql/python/ql/src/meta/analysis-quality/PointsToResolvableCallsRelevantTarget.ql
ql/python/ql/src/meta/analysis-quality/ResolvableCallCandidates.ql
ql/python/ql/src/meta/analysis-quality/SummarizedCallableCallSites.ql
ql/python/ql/src/meta/analysis-quality/TTCallGraph.ql
ql/python/ql/src/meta/analysis-quality/TTCallGraphMissing.ql
ql/python/ql/src/meta/analysis-quality/TTCallGraphNew.ql
ql/python/ql/src/meta/analysis-quality/TTCallGraphNewAmbiguous.ql
ql/python/ql/src/meta/analysis-quality/TTCallGraphOverview.ql
ql/python/ql/src/meta/analysis-quality/TTCallGraphShared.ql
ql/python/ql/src/meta/debug/DebugStats.ql
ql/python/ql/src/meta/debug/SimpleClassDebug.ql
ql/python/ql/src/utils/modeleditor/FrameworkModeEndpoints.ql

View File

@@ -0,0 +1,4 @@
ql/python/ql/src/Functions/NonCls.ql
ql/python/ql/src/Functions/NonSelf.ql
ql/python/ql/src/Functions/SignatureSpecialMethods.ql
ql/python/ql/src/Resources/FileNotAlwaysClosed.ql

View File

@@ -0,0 +1,43 @@
ql/python/ql/src/Diagnostics/ExtractedFiles.ql
ql/python/ql/src/Diagnostics/ExtractionWarnings.ql
ql/python/ql/src/Expressions/UseofInput.ql
ql/python/ql/src/Security/CVE-2018-1281/BindToAllInterfaces.ql
ql/python/ql/src/Security/CWE-020/CookieInjection.ql
ql/python/ql/src/Security/CWE-020/IncompleteHostnameRegExp.ql
ql/python/ql/src/Security/CWE-020/IncompleteUrlSubstringSanitization.ql
ql/python/ql/src/Security/CWE-020/OverlyLargeRange.ql
ql/python/ql/src/Security/CWE-022/PathInjection.ql
ql/python/ql/src/Security/CWE-074/TemplateInjection.ql
ql/python/ql/src/Security/CWE-078/CommandInjection.ql
ql/python/ql/src/Security/CWE-079/ReflectedXss.ql
ql/python/ql/src/Security/CWE-089/SqlInjection.ql
ql/python/ql/src/Security/CWE-090/LdapInjection.ql
ql/python/ql/src/Security/CWE-094/CodeInjection.ql
ql/python/ql/src/Security/CWE-113/HeaderInjection.ql
ql/python/ql/src/Security/CWE-116/BadTagFilter.ql
ql/python/ql/src/Security/CWE-209/StackTraceExposure.ql
ql/python/ql/src/Security/CWE-215/FlaskDebug.ql
ql/python/ql/src/Security/CWE-285/PamAuthorization.ql
ql/python/ql/src/Security/CWE-295/MissingHostKeyValidation.ql
ql/python/ql/src/Security/CWE-312/CleartextLogging.ql
ql/python/ql/src/Security/CWE-312/CleartextStorage.ql
ql/python/ql/src/Security/CWE-326/WeakCryptoKey.ql
ql/python/ql/src/Security/CWE-327/BrokenCryptoAlgorithm.ql
ql/python/ql/src/Security/CWE-327/InsecureDefaultProtocol.ql
ql/python/ql/src/Security/CWE-327/InsecureProtocol.ql
ql/python/ql/src/Security/CWE-327/WeakSensitiveDataHashing.ql
ql/python/ql/src/Security/CWE-352/CSRFProtectionDisabled.ql
ql/python/ql/src/Security/CWE-377/InsecureTemporaryFile.ql
ql/python/ql/src/Security/CWE-502/UnsafeDeserialization.ql
ql/python/ql/src/Security/CWE-601/UrlRedirect.ql
ql/python/ql/src/Security/CWE-611/Xxe.ql
ql/python/ql/src/Security/CWE-614/InsecureCookie.ql
ql/python/ql/src/Security/CWE-643/XpathInjection.ql
ql/python/ql/src/Security/CWE-730/PolynomialReDoS.ql
ql/python/ql/src/Security/CWE-730/ReDoS.ql
ql/python/ql/src/Security/CWE-730/RegexInjection.ql
ql/python/ql/src/Security/CWE-776/XmlBomb.ql
ql/python/ql/src/Security/CWE-918/FullServerSideRequestForgery.ql
ql/python/ql/src/Security/CWE-943/NoSqlInjection.ql
ql/python/ql/src/Summary/LinesOfCode.ql
ql/python/ql/src/Summary/LinesOfUserCode.ql

View File

@@ -0,0 +1,173 @@
ql/python/ql/src/Classes/ConflictingAttributesInBaseClasses.ql
ql/python/ql/src/Classes/DefineEqualsWhenAddingAttributes.ql
ql/python/ql/src/Classes/EqualsOrHash.ql
ql/python/ql/src/Classes/EqualsOrNotEquals.ql
ql/python/ql/src/Classes/IncompleteOrdering.ql
ql/python/ql/src/Classes/InconsistentMRO.ql
ql/python/ql/src/Classes/InitCallsSubclassMethod.ql
ql/python/ql/src/Classes/MissingCallToDel.ql
ql/python/ql/src/Classes/MissingCallToInit.ql
ql/python/ql/src/Classes/MutatingDescriptor.ql
ql/python/ql/src/Classes/OverwritingAttributeInSuperClass.ql
ql/python/ql/src/Classes/PropertyInOldStyleClass.ql
ql/python/ql/src/Classes/SlotsInOldStyleClass.ql
ql/python/ql/src/Classes/SubclassShadowing.ql
ql/python/ql/src/Classes/SuperInOldStyleClass.ql
ql/python/ql/src/Classes/SuperclassDelCalledMultipleTimes.ql
ql/python/ql/src/Classes/SuperclassInitCalledMultipleTimes.ql
ql/python/ql/src/Classes/WrongNameForArgumentInClassInstantiation.ql
ql/python/ql/src/Classes/WrongNumberArgumentsInClassInstantiation.ql
ql/python/ql/src/Diagnostics/ExtractedFiles.ql
ql/python/ql/src/Diagnostics/ExtractionWarnings.ql
ql/python/ql/src/Exceptions/CatchingBaseException.ql
ql/python/ql/src/Exceptions/EmptyExcept.ql
ql/python/ql/src/Exceptions/IllegalExceptionHandlerType.ql
ql/python/ql/src/Exceptions/IllegalRaise.ql
ql/python/ql/src/Exceptions/IncorrectExceptOrder.ql
ql/python/ql/src/Exceptions/NotImplementedIsNotAnException.ql
ql/python/ql/src/Exceptions/RaisingTuple.ql
ql/python/ql/src/Exceptions/UnguardedNextInGenerator.ql
ql/python/ql/src/Expressions/CallToSuperWrongClass.ql
ql/python/ql/src/Expressions/CompareConstants.ql
ql/python/ql/src/Expressions/CompareIdenticalValues.ql
ql/python/ql/src/Expressions/CompareIdenticalValuesMissingSelf.ql
ql/python/ql/src/Expressions/Comparisons/UselessComparisonTest.ql
ql/python/ql/src/Expressions/ContainsNonContainer.ql
ql/python/ql/src/Expressions/DuplicateKeyInDictionaryLiteral.ql
ql/python/ql/src/Expressions/EqualsNone.ql
ql/python/ql/src/Expressions/ExpectedMappingForFormatString.ql
ql/python/ql/src/Expressions/ExplicitCallToDel.ql
ql/python/ql/src/Expressions/Formatting/MixedExplicitImplicitIn3101Format.ql
ql/python/ql/src/Expressions/Formatting/UnusedArgumentIn3101Format.ql
ql/python/ql/src/Expressions/Formatting/UnusedNamedArgumentIn3101Format.ql
ql/python/ql/src/Expressions/Formatting/WrongNameInArgumentsFor3101Format.ql
ql/python/ql/src/Expressions/Formatting/WrongNumberArgumentsFor3101Format.ql
ql/python/ql/src/Expressions/HashedButNoHash.ql
ql/python/ql/src/Expressions/IncorrectComparisonUsingIs.ql
ql/python/ql/src/Expressions/NonCallableCalled.ql
ql/python/ql/src/Expressions/Regex/BackspaceEscape.ql
ql/python/ql/src/Expressions/Regex/DuplicateCharacterInSet.ql
ql/python/ql/src/Expressions/Regex/MissingPartSpecialGroup.ql
ql/python/ql/src/Expressions/Regex/UnmatchableCaret.ql
ql/python/ql/src/Expressions/Regex/UnmatchableDollar.ql
ql/python/ql/src/Expressions/TruncatedDivision.ql
ql/python/ql/src/Expressions/UnintentionalImplicitStringConcatenation.ql
ql/python/ql/src/Expressions/UnnecessaryLambda.ql
ql/python/ql/src/Expressions/UnsupportedFormatCharacter.ql
ql/python/ql/src/Expressions/UseofApply.ql
ql/python/ql/src/Expressions/UseofInput.ql
ql/python/ql/src/Expressions/WrongNameForArgumentInCall.ql
ql/python/ql/src/Expressions/WrongNumberArgumentsForFormat.ql
ql/python/ql/src/Expressions/WrongNumberArgumentsInCall.ql
ql/python/ql/src/Functions/ConsistentReturns.ql
ql/python/ql/src/Functions/DeprecatedSliceMethod.ql
ql/python/ql/src/Functions/ExplicitReturnInInit.ql
ql/python/ql/src/Functions/IncorrectRaiseInSpecialMethod.ql
ql/python/ql/src/Functions/IncorrectlyOverriddenMethod.ql
ql/python/ql/src/Functions/IncorrectlySpecifiedOverriddenMethod.ql
ql/python/ql/src/Functions/InitIsGenerator.ql
ql/python/ql/src/Functions/IterReturnsNonIterator.ql
ql/python/ql/src/Functions/IterReturnsNonSelf.ql
ql/python/ql/src/Functions/ModificationOfParameterWithDefault.ql
ql/python/ql/src/Functions/NonCls.ql
ql/python/ql/src/Functions/NonSelf.ql
ql/python/ql/src/Functions/OverlyComplexDelMethod.ql
ql/python/ql/src/Functions/ReturnConsistentTupleSizes.ql
ql/python/ql/src/Functions/SignatureOverriddenMethod.ql
ql/python/ql/src/Functions/SignatureSpecialMethods.ql
ql/python/ql/src/Functions/UseImplicitNoneReturnValue.ql
ql/python/ql/src/Imports/CyclicImport.ql
ql/python/ql/src/Imports/DeprecatedModule.ql
ql/python/ql/src/Imports/EncodingError.ql
ql/python/ql/src/Imports/FromImportOfMutableAttribute.ql
ql/python/ql/src/Imports/ImportandImportFrom.ql
ql/python/ql/src/Imports/ModuleImportsItself.ql
ql/python/ql/src/Imports/ModuleLevelCyclicImport.ql
ql/python/ql/src/Imports/MultipleImports.ql
ql/python/ql/src/Imports/SyntaxError.ql
ql/python/ql/src/Imports/UnintentionalImport.ql
ql/python/ql/src/Imports/UnusedImport.ql
ql/python/ql/src/Lexical/CommentedOutCode.ql
ql/python/ql/src/Lexical/OldOctalLiteral.ql
ql/python/ql/src/Numerics/Pythagorean.ql
ql/python/ql/src/Resources/FileNotAlwaysClosed.ql
ql/python/ql/src/Security/CVE-2018-1281/BindToAllInterfaces.ql
ql/python/ql/src/Security/CWE-020/CookieInjection.ql
ql/python/ql/src/Security/CWE-020/IncompleteHostnameRegExp.ql
ql/python/ql/src/Security/CWE-020/IncompleteUrlSubstringSanitization.ql
ql/python/ql/src/Security/CWE-020/OverlyLargeRange.ql
ql/python/ql/src/Security/CWE-022/PathInjection.ql
ql/python/ql/src/Security/CWE-022/TarSlip.ql
ql/python/ql/src/Security/CWE-074/TemplateInjection.ql
ql/python/ql/src/Security/CWE-078/CommandInjection.ql
ql/python/ql/src/Security/CWE-078/UnsafeShellCommandConstruction.ql
ql/python/ql/src/Security/CWE-079/Jinja2WithoutEscaping.ql
ql/python/ql/src/Security/CWE-079/ReflectedXss.ql
ql/python/ql/src/Security/CWE-089/SqlInjection.ql
ql/python/ql/src/Security/CWE-090/LdapInjection.ql
ql/python/ql/src/Security/CWE-094/CodeInjection.ql
ql/python/ql/src/Security/CWE-113/HeaderInjection.ql
ql/python/ql/src/Security/CWE-116/BadTagFilter.ql
ql/python/ql/src/Security/CWE-117/LogInjection.ql
ql/python/ql/src/Security/CWE-209/StackTraceExposure.ql
ql/python/ql/src/Security/CWE-215/FlaskDebug.ql
ql/python/ql/src/Security/CWE-285/PamAuthorization.ql
ql/python/ql/src/Security/CWE-295/MissingHostKeyValidation.ql
ql/python/ql/src/Security/CWE-295/RequestWithoutValidation.ql
ql/python/ql/src/Security/CWE-312/CleartextLogging.ql
ql/python/ql/src/Security/CWE-312/CleartextStorage.ql
ql/python/ql/src/Security/CWE-326/WeakCryptoKey.ql
ql/python/ql/src/Security/CWE-327/BrokenCryptoAlgorithm.ql
ql/python/ql/src/Security/CWE-327/InsecureDefaultProtocol.ql
ql/python/ql/src/Security/CWE-327/InsecureProtocol.ql
ql/python/ql/src/Security/CWE-327/WeakSensitiveDataHashing.ql
ql/python/ql/src/Security/CWE-352/CSRFProtectionDisabled.ql
ql/python/ql/src/Security/CWE-377/InsecureTemporaryFile.ql
ql/python/ql/src/Security/CWE-502/UnsafeDeserialization.ql
ql/python/ql/src/Security/CWE-601/UrlRedirect.ql
ql/python/ql/src/Security/CWE-611/Xxe.ql
ql/python/ql/src/Security/CWE-614/InsecureCookie.ql
ql/python/ql/src/Security/CWE-643/XpathInjection.ql
ql/python/ql/src/Security/CWE-730/PolynomialReDoS.ql
ql/python/ql/src/Security/CWE-730/ReDoS.ql
ql/python/ql/src/Security/CWE-730/RegexInjection.ql
ql/python/ql/src/Security/CWE-732/WeakFilePermissions.ql
ql/python/ql/src/Security/CWE-776/XmlBomb.ql
ql/python/ql/src/Security/CWE-798/HardcodedCredentials.ql
ql/python/ql/src/Security/CWE-918/FullServerSideRequestForgery.ql
ql/python/ql/src/Security/CWE-918/PartialServerSideRequestForgery.ql
ql/python/ql/src/Security/CWE-943/NoSqlInjection.ql
ql/python/ql/src/Statements/AssertOnTuple.ql
ql/python/ql/src/Statements/BreakOrReturnInFinally.ql
ql/python/ql/src/Statements/ConstantInConditional.ql
ql/python/ql/src/Statements/IterableStringOrSequence.ql
ql/python/ql/src/Statements/MismatchInMultipleAssignment.ql
ql/python/ql/src/Statements/ModificationOfLocals.ql
ql/python/ql/src/Statements/NestedLoopsSameVariable.ql
ql/python/ql/src/Statements/NestedLoopsSameVariableWithReuse.ql
ql/python/ql/src/Statements/NonIteratorInForLoop.ql
ql/python/ql/src/Statements/RedundantAssignment.ql
ql/python/ql/src/Statements/ReturnOrYieldOutsideFunction.ql
ql/python/ql/src/Statements/ShouldUseWithStatement.ql
ql/python/ql/src/Statements/SideEffectInAssert.ql
ql/python/ql/src/Statements/StatementNoEffect.ql
ql/python/ql/src/Statements/TopLevelPrint.ql
ql/python/ql/src/Statements/UnnecessaryDelete.ql
ql/python/ql/src/Statements/UnnecessaryElseClause.ql
ql/python/ql/src/Statements/UnnecessaryPass.ql
ql/python/ql/src/Statements/UnreachableCode.ql
ql/python/ql/src/Statements/UnusedExceptionObject.ql
ql/python/ql/src/Statements/UseOfExit.ql
ql/python/ql/src/Summary/LinesOfCode.ql
ql/python/ql/src/Summary/LinesOfUserCode.ql
ql/python/ql/src/Testing/ImpreciseAssert.ql
ql/python/ql/src/Variables/GlobalAtModuleLevel.ql
ql/python/ql/src/Variables/LeakingListComprehension.ql
ql/python/ql/src/Variables/LoopVariableCapture/LoopVariableCapture.ql
ql/python/ql/src/Variables/MultiplyDefined.ql
ql/python/ql/src/Variables/SuspiciousUnusedLoopIterationVariable.ql
ql/python/ql/src/Variables/UndefinedExport.ql
ql/python/ql/src/Variables/UndefinedPlaceHolder.ql
ql/python/ql/src/Variables/UninitializedLocal.ql
ql/python/ql/src/Variables/UnusedLocalVariable.ql
ql/python/ql/src/Variables/UnusedModuleVariable.ql

View File

@@ -0,0 +1,51 @@
ql/python/ql/src/Diagnostics/ExtractedFiles.ql
ql/python/ql/src/Diagnostics/ExtractionWarnings.ql
ql/python/ql/src/Expressions/UseofInput.ql
ql/python/ql/src/Security/CVE-2018-1281/BindToAllInterfaces.ql
ql/python/ql/src/Security/CWE-020/CookieInjection.ql
ql/python/ql/src/Security/CWE-020/IncompleteHostnameRegExp.ql
ql/python/ql/src/Security/CWE-020/IncompleteUrlSubstringSanitization.ql
ql/python/ql/src/Security/CWE-020/OverlyLargeRange.ql
ql/python/ql/src/Security/CWE-022/PathInjection.ql
ql/python/ql/src/Security/CWE-022/TarSlip.ql
ql/python/ql/src/Security/CWE-074/TemplateInjection.ql
ql/python/ql/src/Security/CWE-078/CommandInjection.ql
ql/python/ql/src/Security/CWE-078/UnsafeShellCommandConstruction.ql
ql/python/ql/src/Security/CWE-079/Jinja2WithoutEscaping.ql
ql/python/ql/src/Security/CWE-079/ReflectedXss.ql
ql/python/ql/src/Security/CWE-089/SqlInjection.ql
ql/python/ql/src/Security/CWE-090/LdapInjection.ql
ql/python/ql/src/Security/CWE-094/CodeInjection.ql
ql/python/ql/src/Security/CWE-113/HeaderInjection.ql
ql/python/ql/src/Security/CWE-116/BadTagFilter.ql
ql/python/ql/src/Security/CWE-117/LogInjection.ql
ql/python/ql/src/Security/CWE-209/StackTraceExposure.ql
ql/python/ql/src/Security/CWE-215/FlaskDebug.ql
ql/python/ql/src/Security/CWE-285/PamAuthorization.ql
ql/python/ql/src/Security/CWE-295/MissingHostKeyValidation.ql
ql/python/ql/src/Security/CWE-295/RequestWithoutValidation.ql
ql/python/ql/src/Security/CWE-312/CleartextLogging.ql
ql/python/ql/src/Security/CWE-312/CleartextStorage.ql
ql/python/ql/src/Security/CWE-326/WeakCryptoKey.ql
ql/python/ql/src/Security/CWE-327/BrokenCryptoAlgorithm.ql
ql/python/ql/src/Security/CWE-327/InsecureDefaultProtocol.ql
ql/python/ql/src/Security/CWE-327/InsecureProtocol.ql
ql/python/ql/src/Security/CWE-327/WeakSensitiveDataHashing.ql
ql/python/ql/src/Security/CWE-352/CSRFProtectionDisabled.ql
ql/python/ql/src/Security/CWE-377/InsecureTemporaryFile.ql
ql/python/ql/src/Security/CWE-502/UnsafeDeserialization.ql
ql/python/ql/src/Security/CWE-601/UrlRedirect.ql
ql/python/ql/src/Security/CWE-611/Xxe.ql
ql/python/ql/src/Security/CWE-614/InsecureCookie.ql
ql/python/ql/src/Security/CWE-643/XpathInjection.ql
ql/python/ql/src/Security/CWE-730/PolynomialReDoS.ql
ql/python/ql/src/Security/CWE-730/ReDoS.ql
ql/python/ql/src/Security/CWE-730/RegexInjection.ql
ql/python/ql/src/Security/CWE-732/WeakFilePermissions.ql
ql/python/ql/src/Security/CWE-776/XmlBomb.ql
ql/python/ql/src/Security/CWE-798/HardcodedCredentials.ql
ql/python/ql/src/Security/CWE-918/FullServerSideRequestForgery.ql
ql/python/ql/src/Security/CWE-918/PartialServerSideRequestForgery.ql
ql/python/ql/src/Security/CWE-943/NoSqlInjection.ql
ql/python/ql/src/Summary/LinesOfCode.ql
ql/python/ql/src/Summary/LinesOfUserCode.ql

View File

@@ -0,0 +1,14 @@
import runs_on
import pytest
from query_suites import *
well_known_query_suites = ['python-code-quality.qls', 'python-security-and-quality.qls', 'python-security-extended.qls', 'python-code-scanning.qls']
@runs_on.posix
@pytest.mark.parametrize("query_suite", well_known_query_suites)
def test(codeql, python, check_query_suite, query_suite):
check_query_suite(query_suite)
@runs_on.posix
def test_not_included_queries(codeql, python, check_queries_not_included):
check_queries_not_included('python', well_known_query_suites)