5 Commits

Author	SHA1	Message	Date
Rasmus Wriedt Larsen	a9ce067e15	Python: Add examples of Path Injection FPs seen ... Not quite sure how to deal with these cases of safe if UNIX-only, otherwise not safe. If/when we actually try to deal with these, we also need to figure that out. We _could_ split this queyr into 3: (1) for path injection on any platform, (2) path injection on windows, (3) path injection on UNIX. Then UNIX-only projects could disable the path-injection on windows query. -- that's my best idea, if you have better ideas, DO tell 👍	2020-12-03 13:41:55 +01:00
Rasmus Wriedt Larsen	e8f63311ac	Python: Model abspath and realpath (for Path Injection)	2020-12-03 13:41:54 +01:00
Rasmus Wriedt Larsen	4d9f24a24c	Python: Rewrite path injection tests ... To match how you would normally structure your application code. In itself not that important, but makes it easier to add more tests :)	2020-12-03 13:41:26 +01:00
Rasmus Lerchedahl Petersen	0710963fc3	Python: update test expectations ... EssaNode -> ControlFlowNode	2020-11-10 23:58:55 +01:00
Taus Brock-Nannestad	b620b9b7c6	Python: Fixup CWE-022 tests ... This was a bit of a mess, since there was crosstalk between the TarSlip and PathInjection queries. (Also one of these needs the `options` file to be in one way, and the other not). To fix this, I split these out into separate directories.	2020-11-02 11:46:28 +01:00