Skip to content

Commit fe138dc

Browse files
committed
Add explicitly safe test cases
1 parent 0c6957e commit fe138dc

File tree

1 file changed

+16
-0
lines changed

1 file changed

+16
-0
lines changed

swift/ql/test/query-tests/Security/CWE-611/testXXE.swift

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -50,9 +50,25 @@ func testDataSafe() {
5050
let _ = XMLParser(data: remoteData) // NO XXE: parser doesn't enable external entities
5151
}
5252

53+
func testDataSafeExplicit() {
54+
let remoteString = String(contentsOf: URL(string: "http://example.com/")!)
55+
let remoteData = Data(remoteString)
56+
let parser = XMLParser(data: remoteData) // NO XXE: parser disables external entities
57+
parser.shouldResolveExternalEntities = false
58+
59+
}
60+
5361
func testInputStreamSafe() {
5462
let remoteString = String(contentsOf: URL(string: "http://example.com/")!)
5563
let remoteData = Data(remoteString)
5664
let remoteStream = InputStream(data: remoteData)
5765
let _ = XMLParser(stream: remoteStream) // NO XXE: parser doesn't enable external entities
66+
}
67+
68+
func testInputStreamSafeExplicit() {
69+
let remoteString = String(contentsOf: URL(string: "http://example.com/")!)
70+
let remoteData = Data(remoteString)
71+
let remoteStream = InputStream(data: remoteData)
72+
let parser = XMLParser(stream: remoteStream) // NO XXE: parser disables external entities
73+
parser.shouldResolveExternalEntities = false
5874
}

0 commit comments

Comments
 (0)