Skip to content

Commit aaefa0f

Browse files
egregius313egregius313
committed
Add remote flow source test
1 parent 6ae7ede commit aaefa0f

File tree

6 files changed

+39
-0
lines changed

6 files changed

+39
-0
lines changed

‎csharp/ql/integration-tests/all-platforms/blazor/remoteFlowSource.expected

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
| BlazorTest/Components/Pages/TestPage.razor:10:29:10:36 | access to property UrlParam | ASP.NET Core component route parameter |
2+
| BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | ASP.NET Core component route parameter |
3+
| BlazorTest/Components/Pages/TestPage.razor:19:38:19:47 | access to property QueryParam | ASP.NET Core component query string |
4+
| BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | ASP.NET Core component query string |
5+
| BlazorTest/Components/Pages/TestPage.razor:27:29:27:39 | access to property InputValue1 | ASP.NET Core `InputBase<>.Value`-bound property read |
6+
| BlazorTest/Components/Pages/TestPage.razor:80:29:80:39 | access to property InputValue6 | ASP.NET Core `InputBase<>.Value`-bound property read |

‎csharp/ql/integration-tests/all-platforms/blazor/remoteFlowSource.ql

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
import semmle.code.csharp.security.dataflow.flowsources.Remote
2+
3+
from RemoteFlowSource source, File f
4+
where
5+
source.getLocation().getFile() = f and
6+
(f.fromSource() or f.getExtension() = "razor")
7+
select source, source.getSourceType()

‎csharp/ql/integration-tests/all-platforms/blazor_build_mode_none/remoteFlowSource.expected

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
| BlazorTest/Components/Pages/TestPage.razor:10:29:10:36 | access to property UrlParam | ASP.NET Core component route parameter |
2+
| BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | ASP.NET Core component route parameter |
3+
| BlazorTest/Components/Pages/TestPage.razor:19:38:19:47 | access to property QueryParam | ASP.NET Core component query string |
4+
| BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | ASP.NET Core component query string |
5+
| BlazorTest/Components/Pages/TestPage.razor:27:29:27:39 | access to property InputValue1 | ASP.NET Core `InputBase<>.Value`-bound property read |
6+
| BlazorTest/Components/Pages/TestPage.razor:80:29:80:39 | access to property InputValue6 | ASP.NET Core `InputBase<>.Value`-bound property read |

‎csharp/ql/integration-tests/all-platforms/blazor_build_mode_none/remoteFlowSource.ql

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
import semmle.code.csharp.security.dataflow.flowsources.Remote
2+
3+
from RemoteFlowSource source, File f
4+
where
5+
source.getLocation().getFile() = f and
6+
(f.fromSource() or f.getExtension() = "razor")
7+
select source, source.getSourceType()

‎csharp/ql/integration-tests/all-platforms/blazor_net_8/remoteFlowSource.expected

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
| BlazorTest/Components/Pages/TestPage.razor:10:29:10:36 | access to property UrlParam | ASP.NET Core component route parameter |
2+
| BlazorTest/Components/Pages/TestPage.razor:11:48:11:55 | access to property UrlParam | ASP.NET Core component route parameter |
3+
| BlazorTest/Components/Pages/TestPage.razor:19:38:19:47 | access to property QueryParam | ASP.NET Core component query string |
4+
| BlazorTest/Components/Pages/TestPage.razor:20:60:20:69 | access to property QueryParam | ASP.NET Core component query string |
5+
| BlazorTest/Components/Pages/TestPage.razor:27:29:27:39 | access to property InputValue1 | ASP.NET Core `InputBase<>.Value`-bound property read |
6+
| BlazorTest/Components/Pages/TestPage.razor:80:29:80:39 | access to property InputValue6 | ASP.NET Core `InputBase<>.Value`-bound property read |

‎csharp/ql/integration-tests/all-platforms/blazor_net_8/remoteFlowSource.ql

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
import semmle.code.csharp.security.dataflow.flowsources.Remote
2+
3+
from RemoteFlowSource source, File f
4+
where
5+
source.getLocation().getFile() = f and
6+
(f.fromSource() or f.getExtension() = "razor")
7+
select source, source.getSourceType()

0 commit comments

Comments
 (0)