693 Commits

Author	SHA1	Message	Date
Michael Nebel	884f3f1505	C#: Add string interpolation expression sanitizer to url redirect and update expected test output.	2024-01-22 11:21:19 +01:00
Michael Nebel	e33d5b5fb6	C#: Add some test examples for UrlRedirect using string interpolation and string.Format.	2024-01-22 09:42:23 +01:00
Joe Farebrother	4de19b3ec9	Merge pull request #15039 from joefarebrother/csharp-razor-flow-page-models ... C#: Add flow steps from a PageModel to cshtml page.	2024-01-19 10:07:25 +00:00
Michael Nebel	337ab611c9	C#: Update expected test output.	2024-01-18 12:53:48 +01:00
Michael Nebel	559842071a	C#: Add example of log forging alert for simple nullable types and updated expected test output.	2024-01-18 12:50:40 +01:00
Tamas Vajk	e67035f891	Fix comment in test file	2024-01-08 10:00:39 +01:00
Tamas Vajk	91637d49d4	Fix null dereference false positive	2024-01-08 10:00:39 +01:00
Tamas Vajk	a354ca3264	Add null dereference test case with false positive	2024-01-08 10:00:39 +01:00
Joe Farebrother	e8c0fceb81	Use post-update nodes for this access in void handler	2024-01-04 14:25:39 +00:00
Joe Farebrother	7d11e4486e	Adress reveiw comments - update tests to path-problem and support all this qualifiers	2024-01-04 14:25:39 +00:00
Joe Farebrother	b9754df390	Add case for void-returning handler methods	2024-01-04 14:25:39 +00:00
Joe Farebrother	00892e127f	Add unit test + fix flow step	2024-01-04 14:25:38 +00:00
Michael Nebel	9763c00f99	C#: Update expected test output.	2024-01-03 11:09:35 +01:00
Michael Nebel	0c4e1fca1b	C#: Add testcase with false positive for CWE-117 (overload of String.Relace not correctly recognized as a sanitizer).	2024-01-03 10:56:56 +01:00
Michael Nebel	3ead21fb13	C#: Update options files.	2023-12-15 10:02:02 +01:00
Michael Nebel	588fe2792c	C#: Update/Add some hand-written stubs for CWE-079 and CWE-611.	2023-12-15 10:02:02 +01:00
Michael Nebel	8218f80154	C#: Base all telemetry tests on stubs.	2023-12-13 11:57:44 +01:00
Tamas Vajk	eeabb81973	Adjust expected test files	2023-12-06 16:00:43 +01:00
Michael Nebel	e6a5c50ebc	Merge pull request #14953 from rpmrmartin/issue/14952 ... C#: Fix a URL redirection from remote source false positive	2023-12-05 13:02:56 +01:00
Michael Nebel	8dcdda6d21	C#: Address review comments.	2023-12-05 10:08:06 +01:00
Tom Hvitved	84cba21a6c	C#: Add a few more is (not) null tests	2023-12-04 12:22:47 +01:00
Michael Nebel	b9833fc97e	C#: Updated expected test output.	2023-12-04 12:02:51 +01:00
Michael Nebel	6807fd1569	C#: Add some stubs, a testcase and update the expected output without based on main.	2023-12-04 11:53:09 +01:00
Joe Farebrother	9af44ed0a2	Convert flow steps to value steps	2023-11-23 10:56:44 +00:00
Joe Farebrother	052166f17e	Fix issue in genfiles.py + add help text	2023-11-23 10:56:44 +00:00
Joe Farebrother	96bddde7c1	Review suggestions - Remove unneeded import in tests, rename RazorPage to RazorPageClass	2023-11-23 10:56:44 +00:00
Joe Farebrother	826111dc08	Separate area view discovery list for increased precision	2023-11-23 10:56:42 +00:00
Joe Farebrother	f2c3d83d9e	Add tests for area cases	2023-11-23 10:56:42 +00:00
Joe Farebrother	7bd7cc5dbe	Fix tests	2023-11-23 10:56:42 +00:00
Joe Farebrother	7194113a64	Add areas	2023-11-23 10:56:42 +00:00
Joe Farebrother	7691cbce87	Add additional test cases	2023-11-23 10:56:42 +00:00
Joe Farebrother	4f5ecb899b	Add unit tests + fix issue in stubs	2023-11-23 10:56:41 +00:00
Joe Farebrother	ac3f642b45	Unit tests - Write script to aid generating necessary code from .cshtml files.	2023-11-23 10:56:41 +00:00
Tom Hvitved	57ec0948cf	C#: Update expected test output	2023-11-10 08:46:15 +01:00
Michael Nebel	4e99266b65	C#: Sunset the QL based stub generator.	2023-10-23 15:09:38 +02:00
Joe Farebrother	915352861d	Check for generic base types in Missing Function Level Access Control and Insecure Direct Object Reference.	2023-10-13 14:22:45 +01:00
Michael Nebel	577ea50ec9	C#: Base ConstantComparison and PossibleLossOfPrecision tests on stubs.	2023-09-27 09:35:57 +02:00
Michael Nebel	68fd25cd9c	C#: Base DeadStoreOfLocal test on stubs.	2023-09-27 09:35:57 +02:00
Joe Farebrother	7c230d61a8	Merge pull request #13882 from joefarebrother/csharp-insecure-direct-object-ref ... C#: Add query for Insecure Direct Object Reference	2023-09-25 20:29:54 +01:00
Tom Hvitved	58f45ea198	C#: Regenerate Newtonsoft.Json stubs	2023-09-21 12:56:04 +02:00
Joe Farebrother	4497e22195	Add an additional example and additional test cases for authorize attribute cases	2023-09-20 04:13:34 +01:00
Joe Farebrother	eb2f5898bd	Fix typos	2023-09-15 16:39:51 +01:00
Joe Farebrother	6a95ed64ff	Add test cases for authorization from attributes	2023-09-15 10:25:27 +01:00
Joe Farebrother	86abd338e5	Update test options	2023-09-15 10:25:26 +01:00
Joe Farebrother	f8b1b38438	Update alert message and make user checks more precise	2023-09-15 10:25:26 +01:00
Joe Farebrother	009a7bfc87	Add MVC tests	2023-09-15 10:25:26 +01:00
Joe Farebrother	20d42dfd7d	Add tests for webforms case	2023-09-15 10:25:26 +01:00
Michael Nebel	e226c564b6	C#: Base WriteOnlyContainer test on stubs.	2023-08-29 16:24:01 +02:00
Michael Nebel	35a1dd8ba9	C#: Base Useless Code tests on stubs.	2023-08-29 16:20:59 +02:00
Michael Nebel	e9b3f1282a	C#: Base UseBraces tests on stubs.	2023-08-29 16:05:15 +02:00