Owen Mansel-Chan
a6cb511ed7
Convert XPath injection sinks to MaD
2024-07-25 12:56:06 +01:00
Owen Mansel-Chan
f3069c8fbb
Improve XPath injection test (incl extra sinks)
...
Currently the extra sinks are not detected. This will be fixed in the
next commit.
2024-07-25 12:55:05 +01:00
Owen Mansel-Chan
cb0589dfb7
Tests: accept model numbering changes
2024-07-18 11:35:52 +01:00
Owen Mansel-Chan
d109b1e20d
Accept model numbering changes in tests
2024-07-17 12:37:23 +01:00
Owen Mansel-Chan
f67026f2ad
Accept model numbering changes in tests
2024-07-17 11:02:28 +01:00
Owen Mansel-Chan
fc6b17ad64
Test: accept model numbers changing
2024-07-16 21:36:12 +01:00
Owen Mansel-Chan
cafb1181a0
Tests: Accept model numbering changes
2024-07-16 12:14:09 +01:00
Owen Mansel-Chan
3efbee0d81
Accept provenance numbering changes
2024-07-14 16:06:29 +01:00
Owen Mansel-Chan
3417605b6d
Tests: update provenance numbering
2024-07-11 06:42:58 +01:00
Owen Mansel-Chan
801edda9b2
Accept MaD edge provenance label changes/additions
2024-07-01 16:13:41 +01:00
Owen Mansel-Chan
2ae7fa4897
Tests: accept expected changes
2024-06-11 16:20:06 +01:00
Owen Mansel-Chan
6fd2ab7cef
Tests: Accept model renumbering in edge provenance
2024-06-11 16:18:18 +01:00
Anders Schack-Mulligen
9b1e4d7895
Go: Fix test failure.
2024-06-07 13:16:20 +02:00
Anders Schack-Mulligen
a26c01d7c7
Go: Add support for pretty-printed provenace in tests. Convert one test.
2024-06-07 11:47:45 +02:00
Owen Mansel-Chan
44a56c420f
Merge pull request #16558 from owen-mc/go/sync-external-flow
...
Go: sync ExternalFlow.qll
2024-06-05 11:31:34 +01:00
Owen Mansel-Chan
60970ff015
Merge pull request #16571 from owen-mc/go/remove-step-duplication-in-config
...
Go: remove flow step duplication in configs
2024-06-04 12:57:26 +01:00
Owen Mansel-Chan
c964fc2dca
Update expected results (only empty predicate names added)
2024-06-04 11:46:00 +01:00
Owen Mansel-Chan
0870946e05
Add model validation to more tests
2024-06-04 11:45:58 +01:00
Owen Mansel-Chan
ffc25add70
Accept test changes
2024-05-30 21:01:06 +01:00
Owen Mansel-Chan
b2deea4606
Avoid duplicate additional flow steps in configs
...
`localTaintStep` includes a lot of steps which are already part of value
flow. Instead use `defaultAdditionalTaintStep`, which is just the extra
steps that are added for taint tracking.
2024-05-23 11:13:35 +01:00
Anders Schack-Mulligen
f931c8d836
Go: Accept qltest .expected file changes.
2024-05-22 15:39:47 +02:00
Anders Schack-Mulligen
8db9187698
Go: Accept qltest .expected file changes (interesting).
2024-05-22 15:38:01 +02:00
erik-krogh
384649b336
changes based on review, and improve the new command-injection test
2024-05-17 08:38:54 +02:00
erik-krogh
2848ccf0e2
fix frontend errors that Go complained about
2024-05-16 20:06:26 +02:00
erik-krogh
08c0d8ec60
autoformat go files
2024-05-16 19:59:40 +02:00
erik-krogh
ea2b73bda2
add a sanitizer that checks that the string does not start with "--"
2024-05-16 09:25:19 +02:00
erik-krogh
b9a7f6a8f7
add regexp check as a sanitizer for command-injection
2024-05-16 08:55:03 +02:00
erik-krogh
761f9cac97
make a new go/command-injection qhelp
2024-05-16 08:54:55 +02:00
Owen Mansel-Chan
827d15aaa0
Test changes due to model renumbering
2024-05-14 14:40:57 +01:00
Owen Mansel-Chan
f7e6bf7ef5
Two tests have different paths but same results
2024-05-10 23:41:00 +01:00
Owen Mansel-Chan
76946184de
Accept MaD renumbering for edge provenance
2024-05-10 23:40:58 +01:00
Owen Mansel-Chan
674e65e134
Fix test expectations
2024-05-09 16:26:30 +01:00
Owen Mansel-Chan
57ff30c5f3
Update tests: built-in models now work
2024-05-08 16:07:02 +01:00
Owen Mansel-Chan
4140942479
Update tests
2024-04-24 14:19:33 +01:00
Owen Mansel-Chan
8962307291
Add second good go file to tests
2024-04-24 14:19:29 +01:00
Owen Mansel-Chan
80c3993ddc
Remove redundant test
...
It was introduced in https://github.com/github/codeql-go/pull/718 in
response to https://github.com/github/codeql-go/issues/717 , to check
that we don't have type assertions as sinks. We now have other tests
covering type assertions.
2024-04-17 16:32:41 +01:00
Owen Mansel-Chan
3ad2d90014
Make type switches tranform flow state
2024-04-17 16:32:36 +01:00
Owen Mansel-Chan
611f98bca4
Make type assertions transform the flow state
2024-04-17 16:32:30 +01:00
Owen Mansel-Chan
f08a598821
Add tests for FPs: type switches, type assertions
2024-04-17 16:32:13 +01:00
Anders Schack-Mulligen
20e91f9cac
Go: Update expected output (uninteresting).
2024-04-12 09:20:23 +02:00
Owen Mansel-Chan
c3fefa8f69
Add extra sanitizer Part.FileName()
2024-04-11 07:35:45 +01:00
Owen Mansel-Chan
dc3ea6c418
Merge pull request #11703 from Kwstubbs/go-taintedpath-additions
...
Go: Add and Modify Sanitizers For TaintedPath
2024-04-10 15:13:13 +01:00
Max Schaefer
d7258f76d3
Go: Improve QHelp for go/unvalidated-url-redirection.
...
The example showed a different (and better) fix from what the help claimed, but the suggestion also had a subtle bug that I fixed at the same time.
2024-03-26 10:57:36 +00:00
Tony Torralba
87b2dcc892
Adjust test expectations
2024-03-14 10:25:04 +01:00
Kevin Stubbings
30fe4168e3
Removed filepath.base sanitizer
2024-03-11 15:08:10 -07:00
Kevin Stubbings
c9b49d3760
resolve feedback
2024-03-11 14:54:28 -07:00
Kevin Stubbings
530c76ca8b
Add New Sanitizers and Modify Old Ones
2024-03-11 14:53:29 -07:00
Tony Torralba
7d74125508
Go: Promote go/uncontrolled-allocation-size
2024-03-07 15:17:49 +01:00
Tony Torralba
1704bfe2bf
Merge pull request #15585 from atorralba/atorralba/go/promote-jwt-unsafe-verification
...
Go: Promote `go/missing-jwt-signature-check` from experimental
2024-02-19 15:35:44 +01:00
Tony Torralba
2a30898af6
Go: Promote go/missing-jwt-signature-check from experimental
2024-02-14 17:25:03 +01:00
