hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-21 19:26:31 +01:00
Code Issues Packages Projects Releases Wiki Activity

deprecate SqlConstruction

Browse Source
This commit is contained in:
Erik Krogh Kristensen
2022-05-01 17:57:48 +02:00
parent 6c67e51ec3
commit c0eca0d09a
15 changed files with 49 additions and 85 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
python/ql/test/library-tests/frameworks/sqlalchemy/taint_test.py
View File

@@ -8,14 +8,14 @@ def test_taint():
ensure_tainted(ts) # $ tainted
t1 = sqlalchemy.text(ts) # $ constructedSql=ts
t2 = sqlalchemy.text(text=ts) # $ constructedSql=ts
t3 = sqlalchemy.sql.text(ts) # $ constructedSql=ts
t4 = sqlalchemy.sql.text(text=ts) # $ constructedSql=ts
t5 = sqlalchemy.sql.expression.text(ts) # $ constructedSql=ts
t6 = sqlalchemy.sql.expression.text(text=ts) # $ constructedSql=ts
t7 = sqlalchemy.sql.expression.TextClause(ts) # $ constructedSql=ts
t8 = sqlalchemy.sql.expression.TextClause(text=ts) # $ constructedSql=ts
t1 = sqlalchemy.text(ts) # $ getSql=ts
t2 = sqlalchemy.text(text=ts) # $ getSql=ts
t3 = sqlalchemy.sql.text(ts) # $ getSql=ts
t4 = sqlalchemy.sql.text(text=ts) # $ getSql=ts
t5 = sqlalchemy.sql.expression.text(ts) # $ getSql=ts
t6 = sqlalchemy.sql.expression.text(text=ts) # $ getSql=ts
t7 = sqlalchemy.sql.expression.TextClause(ts) # $ getSql=ts
t8 = sqlalchemy.sql.expression.TextClause(text=ts) # $ getSql=ts
# Since we flag user-input to a TextClause with its' own query, we don't want to
# have a taint-step for it as that would lead to us also giving an alert for normal