Skip to content

Commit de652e1

Browse files
author
retanoj
committed
expected
1 parent fb8559f commit de652e1

File tree

1 file changed

+29
-14
lines changed

1 file changed

+29
-14
lines changed

‎java/ql/test/experimental/query-tests/security/CWE-089/src/main/MyBatisAnnotationSqlInjection.expected

Lines changed: 29 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,30 +1,45 @@
11
edges
22
| MybatisSqlInjection.java:62:19:62:43 | name : String | MybatisSqlInjection.java:63:35:63:38 | name : String |
33
| MybatisSqlInjection.java:63:35:63:38 | name : String | MybatisSqlInjectionService.java:48:19:48:29 | name : String |
4-
| MybatisSqlInjection.java:94:20:94:44 | name : String | MybatisSqlInjection.java:95:36:95:39 | name : String |
5-
| MybatisSqlInjection.java:95:36:95:39 | name : String | MybatisSqlInjectionService.java:76:20:76:30 | name : String |
6-
| MybatisSqlInjection.java:99:20:99:43 | age : String | MybatisSqlInjection.java:100:36:100:38 | age : String |
7-
| MybatisSqlInjection.java:100:36:100:38 | age : String | MybatisSqlInjectionService.java:80:20:80:29 | age : String |
4+
| MybatisSqlInjection.java:67:46:67:70 | name : String | MybatisSqlInjection.java:68:40:68:43 | name : String |
5+
| MybatisSqlInjection.java:68:40:68:43 | name : String | MybatisSqlInjectionService.java:54:32:54:42 | name : String |
6+
| MybatisSqlInjection.java:99:20:99:44 | name : String | MybatisSqlInjection.java:100:36:100:39 | name : String |
7+
| MybatisSqlInjection.java:100:36:100:39 | name : String | MybatisSqlInjectionService.java:80:20:80:30 | name : String |
8+
| MybatisSqlInjection.java:104:20:104:43 | age : String | MybatisSqlInjection.java:105:36:105:38 | age : String |
9+
| MybatisSqlInjection.java:105:36:105:38 | age : String | MybatisSqlInjectionService.java:84:20:84:29 | age : String |
10+
| MybatisSqlInjection.java:109:46:109:70 | name : String | MybatisSqlInjection.java:110:40:110:43 | name : String |
11+
| MybatisSqlInjection.java:110:40:110:43 | name : String | MybatisSqlInjectionService.java:88:32:88:42 | name : String |
812
| MybatisSqlInjectionService.java:48:19:48:29 | name : String | MybatisSqlInjectionService.java:50:23:50:26 | name : String |
913
| MybatisSqlInjectionService.java:50:3:50:9 | hashMap [post update] [<map.value>] : String | MybatisSqlInjectionService.java:51:27:51:33 | hashMap |
1014
| MybatisSqlInjectionService.java:50:23:50:26 | name : String | MybatisSqlInjectionService.java:50:3:50:9 | hashMap [post update] [<map.value>] : String |
11-
| MybatisSqlInjectionService.java:76:20:76:30 | name : String | MybatisSqlInjectionService.java:77:28:77:31 | name |
12-
| MybatisSqlInjectionService.java:80:20:80:29 | age : String | MybatisSqlInjectionService.java:81:28:81:30 | age |
15+
| MybatisSqlInjectionService.java:54:32:54:42 | name : String | MybatisSqlInjectionService.java:55:32:55:35 | name |
16+
| MybatisSqlInjectionService.java:80:20:80:30 | name : String | MybatisSqlInjectionService.java:81:28:81:31 | name |
17+
| MybatisSqlInjectionService.java:84:20:84:29 | age : String | MybatisSqlInjectionService.java:85:28:85:30 | age |
18+
| MybatisSqlInjectionService.java:88:32:88:42 | name : String | MybatisSqlInjectionService.java:89:32:89:35 | name |
1319
nodes
1420
| MybatisSqlInjection.java:62:19:62:43 | name : String | semmle.label | name : String |
1521
| MybatisSqlInjection.java:63:35:63:38 | name : String | semmle.label | name : String |
16-
| MybatisSqlInjection.java:94:20:94:44 | name : String | semmle.label | name : String |
17-
| MybatisSqlInjection.java:95:36:95:39 | name : String | semmle.label | name : String |
18-
| MybatisSqlInjection.java:99:20:99:43 | age : String | semmle.label | age : String |
19-
| MybatisSqlInjection.java:100:36:100:38 | age : String | semmle.label | age : String |
22+
| MybatisSqlInjection.java:67:46:67:70 | name : String | semmle.label | name : String |
23+
| MybatisSqlInjection.java:68:40:68:43 | name : String | semmle.label | name : String |
24+
| MybatisSqlInjection.java:99:20:99:44 | name : String | semmle.label | name : String |
25+
| MybatisSqlInjection.java:100:36:100:39 | name : String | semmle.label | name : String |
26+
| MybatisSqlInjection.java:104:20:104:43 | age : String | semmle.label | age : String |
27+
| MybatisSqlInjection.java:105:36:105:38 | age : String | semmle.label | age : String |
28+
| MybatisSqlInjection.java:109:46:109:70 | name : String | semmle.label | name : String |
29+
| MybatisSqlInjection.java:110:40:110:43 | name : String | semmle.label | name : String |
2030
| MybatisSqlInjectionService.java:48:19:48:29 | name : String | semmle.label | name : String |
2131
| MybatisSqlInjectionService.java:50:3:50:9 | hashMap [post update] [<map.value>] : String | semmle.label | hashMap [post update] [<map.value>] : String |
2232
| MybatisSqlInjectionService.java:50:23:50:26 | name : String | semmle.label | name : String |
2333
| MybatisSqlInjectionService.java:51:27:51:33 | hashMap | semmle.label | hashMap |
24-
| MybatisSqlInjectionService.java:76:20:76:30 | name : String | semmle.label | name : String |
25-
| MybatisSqlInjectionService.java:77:28:77:31 | name | semmle.label | name |
26-
| MybatisSqlInjectionService.java:80:20:80:29 | age : String | semmle.label | age : String |
27-
| MybatisSqlInjectionService.java:81:28:81:30 | age | semmle.label | age |
34+
| MybatisSqlInjectionService.java:54:32:54:42 | name : String | semmle.label | name : String |
35+
| MybatisSqlInjectionService.java:55:32:55:35 | name | semmle.label | name |
36+
| MybatisSqlInjectionService.java:80:20:80:30 | name : String | semmle.label | name : String |
37+
| MybatisSqlInjectionService.java:81:28:81:31 | name | semmle.label | name |
38+
| MybatisSqlInjectionService.java:84:20:84:29 | age : String | semmle.label | age : String |
39+
| MybatisSqlInjectionService.java:85:28:85:30 | age | semmle.label | age |
40+
| MybatisSqlInjectionService.java:88:32:88:42 | name : String | semmle.label | name : String |
41+
| MybatisSqlInjectionService.java:89:32:89:35 | name | semmle.label | name |
2842
subpaths
2943
#select
3044
| MybatisSqlInjectionService.java:51:27:51:33 | hashMap | MybatisSqlInjection.java:62:19:62:43 | name : String | MybatisSqlInjectionService.java:51:27:51:33 | hashMap | MyBatis annotation SQL injection might include code from $@ to $@. | MybatisSqlInjection.java:62:19:62:43 | name | this user input | SqlInjectionMapper.java:33:2:33:54 | Select | this SQL operation |
45+
| MybatisSqlInjectionService.java:55:32:55:35 | name | MybatisSqlInjection.java:67:46:67:70 | name : String | MybatisSqlInjectionService.java:55:32:55:35 | name | MyBatis annotation SQL injection might include code from $@ to $@. | MybatisSqlInjection.java:67:46:67:70 | name | this user input | SqlInjectionMapper.java:36:2:36:70 | Select | this SQL operation |

0 commit comments

Comments
 (0)