Chris Smowton
9f84653283
Merge pull request #15613 from smowton/smowton/fix/golang-map-range-read-dataflow
...
Golang: fix flow from a map value via a range statement
2024-02-27 15:42:43 +00:00
Chris Smowton
a6480a4ca1
Autoformat again / tabify
2024-02-27 13:55:26 +00:00
Chris Smowton
74448c092a
Autoformat / uglify
2024-02-27 13:49:12 +00:00
Chris Smowton
e62a0805db
Add test for map literal
2024-02-27 13:44:52 +00:00
Chris Smowton
12213a0a08
Add test
2024-02-23 18:39:16 +00:00
Michael B. Gale
ea676469bb
Merge pull request #15202 from github/mbg/go/1.22
...
Go: Update workflows and expected test results for Go 1.22
2024-02-20 12:32:57 +00:00
Tony Torralba
1704bfe2bf
Merge pull request #15585 from atorralba/atorralba/go/promote-jwt-unsafe-verification
...
Go: Promote `go/missing-jwt-signature-check` from experimental
2024-02-19 15:35:44 +01:00
Michael B. Gale
25f0692e2c
Go: Update expected results for TypeParamType
2024-02-16 17:33:30 +00:00
Tony Torralba
2a30898af6
Go: Promote go/missing-jwt-signature-check from experimental
2024-02-14 17:25:03 +01:00
Tony Torralba
1202b5b429
Go: Use less confusing name for hardcoded credentials tests
...
We don't want name-based heuristics to pick these variable names, but also using something like 'safeName' may mislead readers into believing the test cases are intended to be GOOD cases (i.e. safe)
2024-02-14 17:06:05 +01:00
Tony Torralba
5ce35e47b9
Adjust a test case so that the key isn't considered dummy
...
(len < 4)
2024-02-14 13:06:31 +01:00
Tony Torralba
750c8085cb
Remove duplicated main from tests
2024-02-14 12:15:19 +01:00
Tony Torralba
ba1faea630
Go: Promote go/hardcoded-key from experimental
2024-02-14 12:15:14 +01:00
Anders Schack-Mulligen
3b8af1e52a
Go: Add empty provenance column to expected files.
2024-02-09 11:32:07 +01:00
Tony Torralba
3b7d6a4806
Go: Add AwsLambda to the global context
2024-01-24 11:33:26 +01:00
Tony Torralba
9a0fb39382
Model StartWithContext
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-01-19 09:25:35 +01:00
Tony Torralba
1d7dbec719
Go: Add flow sources for AWS Lambda function handlers
2024-01-18 15:17:21 +01:00
Michael B. Gale
08c4dc1ea5
Go: Exclude all FlowSummaryNodes from test results
2024-01-16 15:51:40 +00:00
Owen Mansel-Chan
057ee85cd0
Merge pull request #14123 from am0o0/amammad-go-fastHttp
...
Go: fasthttp
2024-01-14 20:12:31 +00:00
Tony Torralba
05b487e3a6
Go: Recognize unsafe candidate selection in go/insecure-randomness
2024-01-11 11:58:12 +01:00
Tony Torralba
5e8c63c3aa
Use arg position instead of arg as class field to reduce number of instances
2024-01-10 14:12:29 +01:00
Tony Torralba
78c0cdfa2c
Apply suggestions from code review
...
co-authored-by: Owen Mansel-Chan <owen-mc@github.com >
2024-01-10 13:33:41 +01:00
Tony Torralba
3534f692dc
Fix test expectations
...
Barrier-in addition removes an overlapping path
2024-01-10 13:33:41 +01:00
Tony Torralba
46df5857ec
Update test expectations
2024-01-10 12:31:02 +01:00
Tony Torralba
a0f6b5ea10
Update test expectations
2024-01-09 17:00:20 +01:00
Owen Mansel-Chan
697aa609f4
Merge pull request #15211 from owen-mc/go/redefine-successfully-extracted-files
...
Go: report any extracted file as successfully extracted
2024-01-03 16:07:09 +00:00
Owen Mansel-Chan
14cffc3170
Merge pull request #15128 from owen-mc/go/fix-fp-incorrect-integer-conversion-signedness
...
Go: fix FP in incorrect integer conversion query relating to strict comparisons with MaxInt and MaxUint
2024-01-03 14:57:34 +00:00
Owen Mansel-Chan
13b00bae17
Update test expectation
2024-01-02 22:38:30 +00:00
Chad Bentz
730f6ed5b0
Merge branch 'main' into go-xxe-libxml2
2023-12-22 11:57:43 -05:00
Chad Bentz
7c93a2c825
Add const XMLParseNoEnt to stub
2023-12-21 00:49:14 +00:00
Chad Bentz
667861f575
depstubber with latest change
...
- still failing with ./tst.go:195:25: undefined: parser.XMLParseNoEnt
2023-12-21 00:42:37 +00:00
Chad Bentz
6f3867d804
stub the type Parser + the function New
...
(it will automatically make stubs for all the methods on that type)
Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com >
2023-12-20 19:25:48 -05:00
Owen Mansel-Chan
e45e92eaa7
Fix MaxIntOrMaxUint.isBoundFor
...
It was wrong for strictnessOffset = 1 before.
2023-12-17 06:16:33 +00:00
Owen Mansel-Chan
36c4f5d1b2
Add failing test
...
The cause of the test failure is confusion about
whether the architecture is 32 bit or 64 bit.
2023-12-17 04:43:14 +00:00
Chad Bentz
b02bac5190
Test run
2023-12-15 22:55:10 +00:00
amammad
4d9aad92a1
remove a duplicate test
2023-12-14 17:08:18 +01:00
amammad
d84333dad8
added *ReadBody* Methods as UntrustedFlowSource
2023-12-14 15:31:09 +01:00
Mathew Payne
7a48152ea9
Add Go Stubs for LibXML2
2023-12-12 15:10:08 +00:00
Chad Bentz
2d33f86d41
Initial Push
...
- Sample test (test not compiling)
- Stubs not generating
2023-12-12 15:00:00 +00:00
amammad
bfa0fb6d74
remove a duplicate test
2023-12-10 22:08:12 +01:00
amammad
cc5416406f
added more sinks related to io.Writer of BodyWriter
2023-12-10 22:06:27 +01:00
Owen Mansel-Chan
ab68c4e341
Update test
2023-12-08 23:29:44 +00:00
amammad
a3fbc3c20c
fix ResponseBody Class issues
2023-12-07 19:36:27 +01:00
amammad
20a3211d06
move sanitizers from sharedxss::sanitizer to EscapeFunction::Range, added proper inline tests
2023-12-06 16:19:34 +01:00
amammad
3e0ed0090f
added BodyWriter Sink, added proper content-type header in tests to comply new changed xss strategy
2023-12-06 16:00:36 +01:00
amammad
d3099ff482
fix tests, move from SharedXss::Sink to Http::* classes
2023-12-06 15:52:50 +01:00
Owen Mansel-Chan
aad847497b
Merge pull request #14962 from owen-mc/go/improve-tests-incorrect-integer-conversion
...
Go: Improve tests for Incorrect Integer Conversion
2023-12-06 07:40:00 +00:00
Owen Mansel-Chan
d52b23db8e
Improve tests for Incorrect Integer Conversion
...
We changed the test query when the query was changed so that the
comments in the test file would stay the same.
I've reverted the test query and updated the comments in the test file.
This avoids problems in the branch switching to use-use flow.
2023-11-30 11:58:10 +00:00
Owen Mansel-Chan
e958a75223
Add comments indicating whether results are expected at new calls
2023-11-30 11:48:10 +00:00
Owen Mansel-Chan
de87dd5dee
Test no result if deferred function returns error
2023-11-28 14:23:37 +00:00
