Add remoteflowsoucre test

Author: sylwia-budzynska

python/ql/test/experimental/meta/RemoteFlowSourceTest.qll

@@ -0,0 +1,20 @@
+import python
+import semmle.python.dataflow.new.RemoteFlowSources
+import TestUtilities.InlineExpectationsTest
+private import semmle.python.dataflow.new.internal.PrintNode
+
+module SourceTest implements TestSig {
+  string getARelevantTag() { result = "source" }
+
+  predicate hasActualResult(Location location, string element, string tag, string value) {
+    exists(location.getFile().getRelativePath()) and
+    exists(RemoteFlowSource rfs |
+      location = rfs.getLocation() and
+      element = rfs.toString() and
+      value = prettyNode(rfs) and
+      tag = "source"
+    )
+  }
+}
+
+import MakeTest<SourceTest>

python/ql/test/library-tests/frameworks/streamlit/rfs-test.ql

@@ -1,20 +1,2 @@
 import python
-import semmle.python.dataflow.new.RemoteFlowSources
-import TestUtilities.InlineExpectationsTest
-private import semmle.python.dataflow.new.internal.PrintNode
-
-module SourceTest implements TestSig {
-  string getARelevantTag() { result = "source" }
-
-  predicate hasActualResult(Location location, string element, string tag, string value) {
-    exists(location.getFile().getRelativePath()) and
-    exists(RemoteFlowSource rfs |
-      location = rfs.getLocation() and
-      element = rfs.toString() and
-      value = prettyNode(rfs) and
-      tag = "source"
-    )
-  }
-}
-
-import MakeTest<SourceTest>
+import experimental.meta.RemoteFlowSourceTest

python/ql/test/library-tests/frameworks/streamlit/test.py

@@ -15,3 +15,13 @@
 c = conn.connect()
 
 c.execute("other sql")  # $ getSql="other sql"
+
+# SQL Alchemy session
+s = conn.session
+
+s.execute("yet another sql")  # $ getSql="yet another sql"
+
+# SQL Alchemy engine
+e = st.connection("postgresql", type="sql")
+
+e.engine.connect().execute("yet yet another sql")  # $ getSql="yet yet another sql"