hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-01 19:55:15 +02:00
Code Issues Packages Projects Releases Wiki Activity

Python: Add more tests for sensitive function handling

Browse Source
This commit is contained in:
Rasmus Wriedt Larsen
2021-06-10 14:18:09 +02:00
parent eb4f168dd4
commit c341643ec1
1 changed files with 19 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
python/ql/test/experimental/dataflow/sensitive-data/test.py
View File

@@ -24,6 +24,25 @@ safe_to_store = encrypt_password(pwd)
f = get_password
f() # $ SensitiveDataSource=password
# more tests of functions we don't have definition for
x = unkown_func_not_even_imported_get_password() # $ SensitiveDataSource=password
print(x) # $ SensitiveUse=password
f = get_passwd
x = f() # $ MISSING: SensitiveDataSource=password
print(x) # $ MISSING: SensitiveUse=password
import not_found
f = not_found.get_passwd # $ SensitiveDataSource=password
x = f() # $ MISSING: SensitiveDataSource=password
print(x) # $ MISSING: SensitiveUse=password
def my_func(non_sensitive_name):
x = non_sensitive_name() # $ MISSING: SensitiveDataSource=password
print(x) # $ MISSING: SensitiveUse=password
f = not_found.get_passwd # $ SensitiveDataSource=password
my_func(f)
# attributes
foo = ObjectFromDatabase()
foo.secret # $ SensitiveDataSource=secret