Add tests for MVC cases

Author: joefarebrother

csharp/ql/test/query-tests/Security Features/CWE-285/MissingAccessControl/MVCTests/MissingAccessControl.expected

@@ -0,0 +1 @@
+| ProfileController.cs:7:25:7:31 | Delete1 | This action is missing an authorization check. |

csharp/ql/test/query-tests/Security Features/CWE-285/MissingAccessControl/MissingAccessControl.qlref renamed to csharp/ql/test/query-tests/Security Features/CWE-285/MissingAccessControl/MVCTests/MissingAccessControl.qlref

@@ -0,0 +1,19 @@
+using Microsoft.AspNetCore.Mvc;
+
+public class ProfileController : Controller {
+    private void doThings() { }
+    private bool isAuthorized() { return false; }
+
+    public ActionResult Delete1(int id) {
+        doThings();
+        return View();
+    }
+
+    public ActionResult Delete2(int id) {
+        if (!isAuthorized()) {
+            return null;
+        }
+        doThings();
+        return View();
+    }
+}

csharp/ql/test/query-tests/Security Features/CWE-285/MissingAccessControl/MVCTests/ProfileController.cs

@@ -0,0 +1,3 @@
+semmle-extractor-options: /nostdlib /noconfig
+semmle-extractor-options: --load-sources-from-project:${testdir}/../../../../../resources/stubs/_frameworks/Microsoft.NETCore.App/Microsoft.NETCore.App.csproj
+semmle-extractor-options: --load-sources-from-project:${testdir}/../../../../../resources/stubs/_frameworks/Microsoft.AspNetCore.App/Microsoft.AspNetCore.App.csproj

csharp/ql/test/query-tests/Security Features/CWE-285/MissingAccessControl/MVCTests/options

@@ -0,0 +1 @@
+Security Features/CWE-285/MissingAccessControl.ql