hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-25 08:45:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Improve test cases

Browse Source 
Set NONET (2048) by default.
This commit is contained in:
Arthur Baars
2021-10-01 11:16:53 +02:00
parent 0419d28ba0
commit b06bb7a789
2 changed files with 9 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
ql/test/query-tests/security/cwe-611/LibXmlRuby.rb
View File

@@ -1,15 +1,15 @@
class LibXmlRubyXXE < ApplicationController
content = params[:xml]
LibXML::XML::Document.string(content, { options: 2, encoding: 'utf-8' })
LibXML::XML::Document.file(content, { options: LibXML::XML::Options::NOENT })
LibXML::XML::Document.io(content, { options: XML::Options::NOENT })
LibXML::XML::Parser.string(content, { options: 2 })
LibXML::XML::Parser.file(content, { options: 3 })
LibXML::XML::Parser.io(content, { options: 2 })
LibXML::XML::Document.string(content, { options: 2 | 2048, encoding: 'utf-8' })
LibXML::XML::Document.file(content, { options: LibXML::XML::Options::NOENT | 2048})
LibXML::XML::Document.io(content, { options: XML::Options::NOENT| 2048 })
LibXML::XML::Parser.string(content, { options: 2 | 2048 })
LibXML::XML::Parser.file(content, { options: 3 | 2048 })
LibXML::XML::Parser.io(content, { options: 2 | 2048})
XML::Document.string(content, { options: 2 })
XML::Parser.string(content, { options: 2 })
XML::Document.string(content, { options: 2 | 2048 })
XML::Parser.string(content, { options: 2 | 2048 })
LibXML::XML::Parser.file(content, { options: 2048 }) # OK

2
ql/test/query-tests/security/cwe-611/Nokogiri.rb
View File

@@ -10,7 +10,7 @@ class NokogiriXXE < ApplicationController
Nokogiri::XML::parse(content, nil, nil, ~Nokogiri::XML::ParseOptions::NOENT) #OK
Nokogiri::XML::parse(content, nil, nil, ~Nokogiri::XML::ParseOptions::NONET)
Nokogiri::XML::parse(content, nil, nil, Nokogiri::XML::ParseOptions.new 2)
options = Nokogiri::XML::ParseOptions.new 0
options = Nokogiri::XML::ParseOptions.new 2048
options.noent
Nokogiri::XML::parse(content, nil, nil, options)
Nokogiri::XML::parse(content, nil, nil, (Nokogiri::XML::ParseOptions.new 0).noent)