hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-05-02 12:15:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

Make similarly named files in tests and qhelp in sync

Browse Source
This commit is contained in:
edvraa
2021-04-22 12:23:46 +03:00
parent 57689df5aa
commit c9c9758e01
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
csharp/ql/src/Security Features/CWE-502/UnsafeDeserializationUntrustedInputGood.cs
View File

@@ -6,7 +6,7 @@ class Good
public static object Deserialize(TextBox textBox)
{
JavaScriptSerializer sr = new JavaScriptSerializer();
// GOOD
// GOOD: no unsafe type resolver
return sr.DeserializeObject(textBox.Text);
}
}

6
csharp/ql/test/query-tests/Security Features/CWE-502/UnsafeDeserializationUntrustedInput/UnsafeDeserializationUntrustedInputGood.cs
View File

@@ -5,8 +5,8 @@ class Good
{
public static object Deserialize(TextBox textBox)
{
JavaScriptSerializer sr = new JavaScriptSerializer(new SimpleTypeResolver());
// GOOD
return sr.DeserializeObject("hardcoded");
JavaScriptSerializer sr = new JavaScriptSerializer();
// GOOD: no unsafe type resolver
return sr.DeserializeObject(textBox.Text);
}
}