Ben Rodes 9f8ed710e2 Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_path_validation.py ...

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

2026-02-10 11:09:25 -05:00

..

full_partial_test.py

Added support for new URIValidator in AntiSSRF library. Updated test caes to use postprocessing results. Currently results for partial ssrf still need work, it is flagging cases where the URL is fully controlled, but is sanitized. I'm not sure if this should be flagged yet.

2026-02-06 11:20:11 -05:00

FullServerSideRequestForgery.expected

Added support for new URIValidator in AntiSSRF library. Updated test caes to use postprocessing results. Currently results for partial ssrf still need work, it is flagging cases where the URL is fully controlled, but is sanitized. I'm not sure if this should be flagged yet.

2026-02-06 11:20:11 -05:00

FullServerSideRequestForgery.qlref

Added support for new URIValidator in AntiSSRF library. Updated test caes to use postprocessing results. Currently results for partial ssrf still need work, it is flagging cases where the URL is fully controlled, but is sanitized. I'm not sure if this should be flagged yet.

2026-02-06 11:20:11 -05:00

options

Python: Add SSRF queries

2021-12-16 01:48:34 +01:00

PartialServerSideRequestForgery.expected

Updating test case expected alerts.

2026-02-06 11:20:13 -05:00

PartialServerSideRequestForgery.qlref

Added support for new URIValidator in AntiSSRF library. Updated test caes to use postprocessing results. Currently results for partial ssrf still need work, it is flagging cases where the URL is fully controlled, but is sanitized. I'm not sure if this should be flagged yet.

2026-02-06 11:20:11 -05:00

test_azure_client.py

Removing commented out test cases.

2026-02-06 11:28:48 -05:00

test_http_client.py

Added support for new URIValidator in AntiSSRF library. Updated test caes to use postprocessing results. Currently results for partial ssrf still need work, it is flagging cases where the URL is fully controlled, but is sanitized. I'm not sure if this should be flagged yet.

2026-02-06 11:20:11 -05:00

test_path_validation.py

Update python/ql/test/query-tests/Security/CWE-918-ServerSideRequestForgery/test_path_validation.py

2026-02-10 11:09:25 -05:00

test_requests.py

Added support for new URIValidator in AntiSSRF library. Updated test caes to use postprocessing results. Currently results for partial ssrf still need work, it is flagging cases where the URL is fully controlled, but is sanitized. I'm not sure if this should be flagged yet.

2026-02-06 11:20:11 -05:00