hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-26 17:25:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

C#: Convert sink capture test to inline expectation.

Browse Source
This commit is contained in:
Michael Nebel
2024-05-13 13:25:11 +02:00
parent 26f9297d62
commit a5fd433c20
4 changed files with 18 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
csharp/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.expected
View File

@@ -1,4 +1,2 @@
| Sinks;NewSinks;false;WrapFieldResponseWriteFile;();;Argument[this];html-injection;df-generated |
| Sinks;NewSinks;false;WrapPropResponseWriteFile;();;Argument[this];html-injection;df-generated |
| Sinks;NewSinks;false;WrapResponseWrite;(System.Object);;Argument[0];html-injection;df-generated |
| Sinks;NewSinks;false;WrapResponseWriteFile;(System.String);;Argument[0];html-injection;df-generated |
unexpectedModel
expectedModel

11
csharp/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.ql Normal file
View File

@@ -0,0 +1,11 @@
import csharp
import utils.modelgenerator.internal.CaptureModels
import TestUtilities.InlineMadTest
module InlineMadTestConfig implements InlineMadTestConfigSig {
string getCapturedModel(Callable c) { result = captureSink(c) }
string getKind() { result = "sink" }
}
import InlineMadTest<InlineMadTestConfig>

1
csharp/ql/test/utils/modelgenerator/dataflow/CaptureSinkModels.qlref
View File

@@ -1 +0,0 @@
utils/modelgenerator/CaptureSinkModels.ql

6
csharp/ql/test/utils/modelgenerator/dataflow/Sinks.cs
View File

@@ -13,6 +13,7 @@ public class NewSinks
public string PrivateSetTaintedProp { get; private set; }
// New sink
// sink=Sinks;NewSinks;false;WrapResponseWrite;(System.Object);;Argument[0];html-injection;df-generated
public void WrapResponseWrite(object o)
{
var response = new HttpResponse();
@@ -27,6 +28,7 @@ public class NewSinks
}
// New sink
// sink=Sinks;NewSinks;false;WrapResponseWriteFile;(System.String);;Argument[0];html-injection;df-generated
public void WrapResponseWriteFile(string s)
{
var response = new HttpResponse();
@@ -34,6 +36,7 @@ public class NewSinks
}
// New sink
// sink=Sinks;NewSinks;false;WrapFieldResponseWriteFile;();;Argument[this];html-injection;df-generated
public void WrapFieldResponseWriteFile()
{
var response = new HttpResponse();
@@ -48,6 +51,7 @@ public class NewSinks
}
// New sink
// sink=Sinks;NewSinks;false;WrapPropResponseWriteFile;();;Argument[this];html-injection;df-generated
public void WrapPropResponseWriteFile()
{
var response = new HttpResponse();
@@ -67,4 +71,4 @@ public class NewSinks
var response = new HttpResponse();
response.WriteFile(PrivateSetTaintedProp);
}
}
}