hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-22 15:25:18 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add remote flow source test

Browse Source
This commit is contained in:
Ed Minnix
2025-01-31 11:32:13 -05:00
parent 6ae7edeae0
commit aaefa0f82a
6 changed files with 39 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
csharp/ql/integration-tests/all-platforms/blazor/remoteFlowSource.expected Normal file
View File

@@ -0,0 +1,6 @@
| BlazorTest/Components/Pages/TestPage.razor:10:29:10:36 | access to property UrlParam | ASP.NET Core component route parameter |
| BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | ASP.NET Core component route parameter |
| BlazorTest/Components/Pages/TestPage.razor:19:38:19:47 | access to property QueryParam | ASP.NET Core component query string |
| BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | ASP.NET Core component query string |
| BlazorTest/Components/Pages/TestPage.razor:27:29:27:39 | access to property InputValue1 | ASP.NET Core `InputBase<>.Value`-bound property read |
| BlazorTest/Components/Pages/TestPage.razor:80:29:80:39 | access to property InputValue6 | ASP.NET Core `InputBase<>.Value`-bound property read |

7
csharp/ql/integration-tests/all-platforms/blazor/remoteFlowSource.ql Normal file
View File

@@ -0,0 +1,7 @@
import semmle.code.csharp.security.dataflow.flowsources.Remote
from RemoteFlowSource source, File f
where
source.getLocation().getFile() = f and
(f.fromSource() or f.getExtension() = "razor")
select source, source.getSourceType()

6
csharp/ql/integration-tests/all-platforms/blazor_build_mode_none/remoteFlowSource.expected Normal file
View File

@@ -0,0 +1,6 @@
| BlazorTest/Components/Pages/TestPage.razor:10:29:10:36 | access to property UrlParam | ASP.NET Core component route parameter |
| BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | ASP.NET Core component route parameter |
| BlazorTest/Components/Pages/TestPage.razor:19:38:19:47 | access to property QueryParam | ASP.NET Core component query string |
| BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | ASP.NET Core component query string |
| BlazorTest/Components/Pages/TestPage.razor:27:29:27:39 | access to property InputValue1 | ASP.NET Core `InputBase<>.Value`-bound property read |
| BlazorTest/Components/Pages/TestPage.razor:80:29:80:39 | access to property InputValue6 | ASP.NET Core `InputBase<>.Value`-bound property read |

7
csharp/ql/integration-tests/all-platforms/blazor_build_mode_none/remoteFlowSource.ql Normal file
View File

@@ -0,0 +1,7 @@
import semmle.code.csharp.security.dataflow.flowsources.Remote
from RemoteFlowSource source, File f
where
source.getLocation().getFile() = f and
(f.fromSource() or f.getExtension() = "razor")
select source, source.getSourceType()

6
csharp/ql/integration-tests/all-platforms/blazor_net_8/remoteFlowSource.expected Normal file
View File

@@ -0,0 +1,6 @@
| BlazorTest/Components/Pages/TestPage.razor:10:29:10:36 | access to property UrlParam | ASP.NET Core component route parameter |
| BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | ASP.NET Core component route parameter |
| BlazorTest/Components/Pages/TestPage.razor:19:38:19:47 | access to property QueryParam | ASP.NET Core component query string |
| BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | ASP.NET Core component query string |
| BlazorTest/Components/Pages/TestPage.razor:27:29:27:39 | access to property InputValue1 | ASP.NET Core `InputBase<>.Value`-bound property read |
| BlazorTest/Components/Pages/TestPage.razor:80:29:80:39 | access to property InputValue6 | ASP.NET Core `InputBase<>.Value`-bound property read |

7
csharp/ql/integration-tests/all-platforms/blazor_net_8/remoteFlowSource.ql Normal file
View File

@@ -0,0 +1,7 @@
import semmle.code.csharp.security.dataflow.flowsources.Remote
from RemoteFlowSource source, File f
where
source.getLocation().getFile() = f and
(f.fromSource() or f.getExtension() = "razor")
select source, source.getSourceType()