Files
codeql/python/ql/test/query-tests/Security/CWE-730-RegexInjection/RegexInjection.expected
yoff cf28c32fd8 Python: rebless toString churn from shared-CFG migration
The shared CFG library overrides ControlFlowNode.toString() as 'final'
(shared/controlflow/codeql/controlflow/Cfg.qll:1217), so the legacy
'ControlFlowNode for X' prefix is gone — the new toString returns just
'X' for normal nodes and 'After X' for after-nodes. This produces a
large cosmetic diff in test expected files with no semantic change.

Mass-rebless 78 .expected files whose actual output differs from the
checked-in expected only by this rename. Each file was verified to be
identical after normalising 'ControlFlowNode for ' and 'After ' away
from both sides.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-05-28 21:09:49 +00:00

29 lines
2.6 KiB
Plaintext

edges
| re_bad.py:1:19:1:25 | After ImportMember | re_bad.py:1:19:1:25 | request | provenance | |
| re_bad.py:1:19:1:25 | request | re_bad.py:13:22:13:28 | request | provenance | |
| re_bad.py:1:19:1:25 | request | re_bad.py:24:22:24:28 | request | provenance | |
| re_bad.py:1:19:1:25 | request | re_bad.py:36:22:36:28 | request | provenance | |
| re_bad.py:13:5:13:18 | unsafe_pattern | re_bad.py:14:15:14:28 | unsafe_pattern | provenance | |
| re_bad.py:13:22:13:28 | request | re_bad.py:13:5:13:18 | unsafe_pattern | provenance | AdditionalTaintStep |
| re_bad.py:24:5:24:18 | unsafe_pattern | re_bad.py:25:35:25:48 | unsafe_pattern | provenance | |
| re_bad.py:24:22:24:28 | request | re_bad.py:24:5:24:18 | unsafe_pattern | provenance | AdditionalTaintStep |
| re_bad.py:36:5:36:18 | unsafe_pattern | re_bad.py:37:16:37:29 | unsafe_pattern | provenance | |
| re_bad.py:36:22:36:28 | request | re_bad.py:36:5:36:18 | unsafe_pattern | provenance | AdditionalTaintStep |
nodes
| re_bad.py:1:19:1:25 | After ImportMember | semmle.label | After ImportMember |
| re_bad.py:1:19:1:25 | request | semmle.label | request |
| re_bad.py:13:5:13:18 | unsafe_pattern | semmle.label | unsafe_pattern |
| re_bad.py:13:22:13:28 | request | semmle.label | request |
| re_bad.py:14:15:14:28 | unsafe_pattern | semmle.label | unsafe_pattern |
| re_bad.py:24:5:24:18 | unsafe_pattern | semmle.label | unsafe_pattern |
| re_bad.py:24:22:24:28 | request | semmle.label | request |
| re_bad.py:25:35:25:48 | unsafe_pattern | semmle.label | unsafe_pattern |
| re_bad.py:36:5:36:18 | unsafe_pattern | semmle.label | unsafe_pattern |
| re_bad.py:36:22:36:28 | request | semmle.label | request |
| re_bad.py:37:16:37:29 | unsafe_pattern | semmle.label | unsafe_pattern |
subpaths
#select
| re_bad.py:14:15:14:28 | unsafe_pattern | re_bad.py:1:19:1:25 | After ImportMember | re_bad.py:14:15:14:28 | unsafe_pattern | This regular expression depends on a $@ and is executed by $@. | re_bad.py:1:19:1:25 | After ImportMember | user-provided value | re_bad.py:14:5:14:33 | After Attribute() | re.search |
| re_bad.py:25:35:25:48 | unsafe_pattern | re_bad.py:1:19:1:25 | After ImportMember | re_bad.py:25:35:25:48 | unsafe_pattern | This regular expression depends on a $@ and is executed by $@. | re_bad.py:1:19:1:25 | After ImportMember | user-provided value | re_bad.py:26:5:26:31 | After Attribute() | re.search |
| re_bad.py:37:16:37:29 | unsafe_pattern | re_bad.py:1:19:1:25 | After ImportMember | re_bad.py:37:16:37:29 | unsafe_pattern | This regular expression depends on a $@ and is executed by $@. | re_bad.py:1:19:1:25 | After ImportMember | user-provided value | re_bad.py:37:5:37:41 | After Attribute() | re.search |