hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-06-20 04:11:07 +02:00
Code Issues Packages Projects Releases Wiki Activity

Fix order of comments in test

Browse Source
This commit is contained in:
Owen Mansel-Chan
2026-06-19 13:23:52 +01:00
parent 451fc2e4e7
commit c9d45217d2
3 changed files with 7 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
python/ql/test/experimental/query-tests/Security/CWE-091-XsltInjection/XsltInjection.expected
View File

@@ -129,10 +129,3 @@ nodes
| xsltInjection.py:46:38:46:48 | ControlFlowNode for xsltStrings [List element] | semmle.label | ControlFlowNode for xsltStrings [List element] |
| xsltInjection.py:50:24:50:32 | ControlFlowNode for xslt_root | semmle.label | ControlFlowNode for xslt_root |
subpaths
testFailures
| xslt.py:14:29:14:37 | ControlFlowNode for xslt_root | Unexpected result: Alert |
| xsltInjection.py:12:28:12:36 | ControlFlowNode for xslt_root | Unexpected result: Alert |
| xsltInjection.py:21:29:21:37 | ControlFlowNode for xslt_root | Unexpected result: Alert |
| xsltInjection.py:31:24:31:32 | ControlFlowNode for xslt_root | Unexpected result: Alert |
| xsltInjection.py:40:24:40:32 | ControlFlowNode for xslt_root | Unexpected result: Alert |
| xsltInjection.py:50:24:50:32 | ControlFlowNode for xslt_root | Unexpected result: Alert |

2
python/ql/test/experimental/query-tests/Security/CWE-091-XsltInjection/xslt.py
View File

@@ -11,4 +11,4 @@ def bad():
xslt_root = etree.XML(xsltQuery)
f = StringIO('<foo><bar></bar></foo>')
tree = etree.parse(f)
result_tree = tree.xslt(xslt_root) # Not OK # $ Alert
result_tree = tree.xslt(xslt_root) # $ Alert # Not OK

12
python/ql/test/experimental/query-tests/Security/CWE-091-XsltInjection/xsltInjection.py
View File

@@ -9,7 +9,7 @@ app = Flask(__name__)
def a():
xsltQuery = request.args.get('xml', '')
xslt_root = etree.XML(xsltQuery)
transform = etree.XSLT(xslt_root) # Not OK # $ Alert
transform = etree.XSLT(xslt_root) # $ Alert # Not OK
@app.route("/xslt2")
@@ -18,7 +18,7 @@ def b():
xslt_root = etree.XML(xsltQuery)
f = StringIO('<foo><bar></bar></foo>')
tree = etree.parse(f)
result_tree = tree.xslt(xslt_root) # Not OK # $ Alert
result_tree = tree.xslt(xslt_root) # $ Alert # Not OK
@app.route("/xslt3")
@@ -28,7 +28,7 @@ def c():
f = StringIO('<foo><bar></bar></foo>')
tree = etree.parse(f)
result = tree.xslt(xslt_root, a="'A'") # Not OK # $ Alert
result = tree.xslt(xslt_root, a="'A'") # $ Alert # Not OK
@app.route("/xslt4")
def d():
@@ -37,7 +37,7 @@ def d():
f = StringIO('<foo><bar></bar></foo>')
tree = etree.parse(f)
result = tree.xslt(xslt_root, a="'A'") # Not OK # $ Alert
result = tree.xslt(xslt_root, a="'A'") # $ Alert # Not OK
@app.route("/xslt5")
def e():
@@ -47,7 +47,7 @@ def e():
f = StringIO('<foo><bar></bar></foo>')
tree = etree.parse(f)
result = tree.xslt(xslt_root, a="'A'") # Not OK # $ Alert
result = tree.xslt(xslt_root, a="'A'") # $ Alert # Not OK
@app.route("/xslt6")
@@ -76,4 +76,4 @@ def h():
f = StringIO('<foo><bar></bar></foo>')
tree = etree.parse(f)
result = tree.xslt(xslt_root, a="'A'") # OK
result = tree.xslt(xslt_root, a="'A'") # OK