Skip to content

Commit 9c5c8c8

Browse files
am0o0hmac
authored andcommitted
fix test file
1 parent 464e2e4 commit 9c5c8c8

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

ruby/ql/test/query-tests/security/cwe-502/unsafe-deserialization/UnsafeDeserialization.rb

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -121,7 +121,7 @@ def route15
121121
def route16
122122
yaml_data = params[:key]
123123
object = Psych.load yaml_data
124-
object = Psych.load_file yaml_data2
124+
object = Psych.load_file yaml_data
125125
end
126126

127127
# GOOD
@@ -135,25 +135,25 @@ def route17
135135
# BAD
136136
def route18
137137
yaml_data = params[:key]
138-
object = Psych.unsafe_load(plist_data)
139-
object = Psych.unsafe_load_file(plist_data)
140-
object = Psych.load_stream(plist_data)
141-
parse_output = Psych.parse_stream(plist_data)
138+
object = Psych.unsafe_load(yaml_data)
139+
object = Psych.unsafe_load_file(yaml_data)
140+
object = Psych.load_stream(yaml_data)
141+
parse_output = Psych.parse_stream(yaml_data)
142142
object = parse_output.to_ruby
143-
object = Psych.parse(plist_data).to_ruby
144-
object = Psych.parse_file(plist_data).to_ruby
145-
parsed_yaml = Psych.parse_stream(plist_data)
143+
object = Psych.parse(yaml_data).to_ruby
144+
object = Psych.parse_file(yaml_data).to_ruby
145+
parsed_yaml = Psych.parse_stream(yaml_data)
146146
parsed_yaml.children.each do |child|
147147
object = child.to_ruby
148148
end
149-
Psych.parse_stream(plist_data) do |document|
149+
Psych.parse_stream(yaml_data) do |document|
150150
object = document.to_ruby
151151
end
152152
object = parsed_yaml.children.first.to_ruby
153153
content = parsed_yaml.children[0].children[0].children
154154
object = parsed_yaml.to_ruby[0]
155155
object = content.to_ruby[0]
156-
object = Psych.parse(plist_data).children[0].to_ruby
156+
object = Psych.parse(yaml_data).children[0].to_ruby
157157
end
158158

159159
# BAD

0 commit comments

Comments
 (0)