Files
codeql/python/ql/test/query-tests/Security/CWE-611-Xxe/Xxe.expected
yoff cf28c32fd8 Python: rebless toString churn from shared-CFG migration
The shared CFG library overrides ControlFlowNode.toString() as 'final'
(shared/controlflow/codeql/controlflow/Cfg.qll:1217), so the legacy
'ControlFlowNode for X' prefix is gone — the new toString returns just
'X' for normal nodes and 'After X' for after-nodes. This produces a
large cosmetic diff in test expected files with no semantic change.

Mass-rebless 78 .expected files whose actual output differs from the
checked-in expected only by this rename. Each file was verified to be
identical after normalising 'ControlFlowNode for ' and 'After ' away
from both sides.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-05-28 21:09:49 +00:00

22 lines
1.7 KiB
Plaintext

edges
| test.py:1:26:1:32 | After ImportMember | test.py:1:26:1:32 | request | provenance | |
| test.py:1:26:1:32 | request | test.py:9:19:9:25 | request | provenance | |
| test.py:1:26:1:32 | request | test.py:20:19:20:25 | request | provenance | |
| test.py:9:5:9:15 | xml_content | test.py:10:34:10:44 | xml_content | provenance | |
| test.py:9:19:9:25 | request | test.py:9:5:9:15 | xml_content | provenance | AdditionalTaintStep |
| test.py:20:5:20:15 | xml_content | test.py:31:34:31:44 | xml_content | provenance | |
| test.py:20:19:20:25 | request | test.py:20:5:20:15 | xml_content | provenance | AdditionalTaintStep |
nodes
| test.py:1:26:1:32 | After ImportMember | semmle.label | After ImportMember |
| test.py:1:26:1:32 | request | semmle.label | request |
| test.py:9:5:9:15 | xml_content | semmle.label | xml_content |
| test.py:9:19:9:25 | request | semmle.label | request |
| test.py:10:34:10:44 | xml_content | semmle.label | xml_content |
| test.py:20:5:20:15 | xml_content | semmle.label | xml_content |
| test.py:20:19:20:25 | request | semmle.label | request |
| test.py:31:34:31:44 | xml_content | semmle.label | xml_content |
subpaths
#select
| test.py:10:34:10:44 | xml_content | test.py:1:26:1:32 | After ImportMember | test.py:10:34:10:44 | xml_content | XML parsing depends on a $@ without guarding against external entity expansion. | test.py:1:26:1:32 | After ImportMember | user-provided value |
| test.py:31:34:31:44 | xml_content | test.py:1:26:1:32 | After ImportMember | test.py:31:34:31:44 | xml_content | XML parsing depends on a $@ without guarding against external entity expansion. | test.py:1:26:1:32 | After ImportMember | user-provided value |