Files
codeql/python/ql/test/query-tests/Security/CWE-020-ExternalAPIs/UntrustedDataToExternalAPI.expected
yoff cf28c32fd8 Python: rebless toString churn from shared-CFG migration
The shared CFG library overrides ControlFlowNode.toString() as 'final'
(shared/controlflow/codeql/controlflow/Cfg.qll:1217), so the legacy
'ControlFlowNode for X' prefix is gone — the new toString returns just
'X' for normal nodes and 'After X' for after-nodes. This produces a
large cosmetic diff in test expected files with no semantic change.

Mass-rebless 78 .expected files whose actual output differs from the
checked-in expected only by this rename. Each file was verified to be
identical after normalising 'ControlFlowNode for ' and 'After ' away
from both sides.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-05-28 21:09:49 +00:00

76 lines
6.2 KiB
Plaintext

edges
| test.py:5:26:5:32 | After ImportMember | test.py:5:26:5:32 | request | provenance | |
| test.py:5:26:5:32 | request | test.py:13:16:13:22 | request | provenance | |
| test.py:5:26:5:32 | request | test.py:23:16:23:22 | request | provenance | |
| test.py:5:26:5:32 | request | test.py:34:12:34:18 | request | provenance | |
| test.py:5:26:5:32 | request | test.py:42:12:42:18 | request | provenance | |
| test.py:5:26:5:32 | request | test.py:54:12:54:18 | request | provenance | |
| test.py:13:5:13:12 | data_raw | test.py:14:5:14:8 | data | provenance | Decoding-Base64 |
| test.py:13:16:13:22 | request | test.py:13:16:13:27 | After Attribute | provenance | AdditionalTaintStep |
| test.py:13:16:13:27 | After Attribute | test.py:13:16:13:39 | After Attribute() | provenance | dict.get |
| test.py:13:16:13:39 | After Attribute() | test.py:13:5:13:12 | data_raw | provenance | |
| test.py:14:5:14:8 | data | test.py:15:36:15:39 | data | provenance | |
| test.py:23:5:23:12 | data_raw | test.py:24:5:24:8 | data | provenance | Decoding-Base64 |
| test.py:23:16:23:22 | request | test.py:23:16:23:27 | After Attribute | provenance | AdditionalTaintStep |
| test.py:23:16:23:27 | After Attribute | test.py:23:16:23:39 | After Attribute() | provenance | dict.get |
| test.py:23:16:23:39 | After Attribute() | test.py:23:5:23:12 | data_raw | provenance | |
| test.py:24:5:24:8 | data | test.py:25:44:25:47 | data | provenance | |
| test.py:34:5:34:8 | data | test.py:35:10:35:13 | data | provenance | |
| test.py:34:5:34:8 | data | test.py:36:13:36:16 | data | provenance | |
| test.py:34:12:34:18 | request | test.py:34:12:34:23 | After Attribute | provenance | AdditionalTaintStep |
| test.py:34:12:34:23 | After Attribute | test.py:34:12:34:35 | After Attribute() | provenance | dict.get |
| test.py:34:12:34:35 | After Attribute() | test.py:34:5:34:8 | data | provenance | |
| test.py:42:5:42:8 | data | test.py:43:22:43:25 | data | provenance | |
| test.py:42:5:42:8 | data | test.py:44:25:44:28 | data | provenance | |
| test.py:42:12:42:18 | request | test.py:42:12:42:23 | After Attribute | provenance | AdditionalTaintStep |
| test.py:42:12:42:23 | After Attribute | test.py:42:12:42:35 | After Attribute() | provenance | dict.get |
| test.py:42:12:42:35 | After Attribute() | test.py:42:5:42:8 | data | provenance | |
| test.py:47:17:47:19 | arg | test.py:50:32:50:34 | arg | provenance | |
| test.py:54:5:54:8 | data | test.py:55:17:55:20 | data | provenance | |
| test.py:54:12:54:18 | request | test.py:54:12:54:23 | After Attribute | provenance | AdditionalTaintStep |
| test.py:54:12:54:23 | After Attribute | test.py:54:12:54:35 | After Attribute() | provenance | dict.get |
| test.py:54:12:54:35 | After Attribute() | test.py:54:5:54:8 | data | provenance | |
| test.py:55:17:55:20 | data | test.py:47:17:47:19 | arg | provenance | |
nodes
| test.py:5:26:5:32 | After ImportMember | semmle.label | After ImportMember |
| test.py:5:26:5:32 | request | semmle.label | request |
| test.py:13:5:13:12 | data_raw | semmle.label | data_raw |
| test.py:13:16:13:22 | request | semmle.label | request |
| test.py:13:16:13:27 | After Attribute | semmle.label | After Attribute |
| test.py:13:16:13:39 | After Attribute() | semmle.label | After Attribute() |
| test.py:14:5:14:8 | data | semmle.label | data |
| test.py:15:36:15:39 | data | semmle.label | data |
| test.py:23:5:23:12 | data_raw | semmle.label | data_raw |
| test.py:23:16:23:22 | request | semmle.label | request |
| test.py:23:16:23:27 | After Attribute | semmle.label | After Attribute |
| test.py:23:16:23:39 | After Attribute() | semmle.label | After Attribute() |
| test.py:24:5:24:8 | data | semmle.label | data |
| test.py:25:44:25:47 | data | semmle.label | data |
| test.py:34:5:34:8 | data | semmle.label | data |
| test.py:34:12:34:18 | request | semmle.label | request |
| test.py:34:12:34:23 | After Attribute | semmle.label | After Attribute |
| test.py:34:12:34:35 | After Attribute() | semmle.label | After Attribute() |
| test.py:35:10:35:13 | data | semmle.label | data |
| test.py:36:13:36:16 | data | semmle.label | data |
| test.py:42:5:42:8 | data | semmle.label | data |
| test.py:42:12:42:18 | request | semmle.label | request |
| test.py:42:12:42:23 | After Attribute | semmle.label | After Attribute |
| test.py:42:12:42:35 | After Attribute() | semmle.label | After Attribute() |
| test.py:43:22:43:25 | data | semmle.label | data |
| test.py:44:25:44:28 | data | semmle.label | data |
| test.py:47:17:47:19 | arg | semmle.label | arg |
| test.py:50:32:50:34 | arg | semmle.label | arg |
| test.py:54:5:54:8 | data | semmle.label | data |
| test.py:54:12:54:18 | request | semmle.label | request |
| test.py:54:12:54:23 | After Attribute | semmle.label | After Attribute |
| test.py:54:12:54:35 | After Attribute() | semmle.label | After Attribute() |
| test.py:55:17:55:20 | data | semmle.label | data |
subpaths
#select
| test.py:15:36:15:39 | data | test.py:5:26:5:32 | After ImportMember | test.py:15:36:15:39 | data | Call to hmac.new [position 1] with untrusted data from $@. | test.py:5:26:5:32 | After ImportMember | After ImportMember |
| test.py:25:44:25:47 | data | test.py:5:26:5:32 | After ImportMember | test.py:25:44:25:47 | data | Call to hmac.new [keyword msg] with untrusted data from $@. | test.py:5:26:5:32 | After ImportMember | After ImportMember |
| test.py:35:10:35:13 | data | test.py:5:26:5:32 | After ImportMember | test.py:35:10:35:13 | data | Call to unknown.lib.func [position 0] with untrusted data from $@. | test.py:5:26:5:32 | After ImportMember | After ImportMember |
| test.py:36:13:36:16 | data | test.py:5:26:5:32 | After ImportMember | test.py:36:13:36:16 | data | Call to unknown.lib.func [keyword kw] with untrusted data from $@. | test.py:5:26:5:32 | After ImportMember | After ImportMember |
| test.py:43:22:43:25 | data | test.py:5:26:5:32 | After ImportMember | test.py:43:22:43:25 | data | Call to unknown.lib.func [position 0] with untrusted data from $@. | test.py:5:26:5:32 | After ImportMember | After ImportMember |
| test.py:44:25:44:28 | data | test.py:5:26:5:32 | After ImportMember | test.py:44:25:44:28 | data | Call to unknown.lib.func [keyword kw] with untrusted data from $@. | test.py:5:26:5:32 | After ImportMember | After ImportMember |