Skip to content

Commit a179fa0

Browse files
Fixing Test cases
1 parent b95b275 commit a179fa0

File tree

4 files changed

+8
-20
lines changed

4 files changed

+8
-20
lines changed

csharp/ql/test/query-tests/Security Features/CWE-327/InsecureSQLConnection/InsecureSQLConnection.cs

Lines changed: 4 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,3 @@
1-
using System;
21
using System.Data.SqlClient;
32

43
namespace InsecureSQLConnection
@@ -35,21 +34,21 @@ public void StringInBuilderProperty()
3534
public void StringInInitializer()
3635
{
3736
string connectString = "Server=1.2.3.4;Database=Anything;UID=ab;Pwd=cd;Encrypt=false";
38-
SqlConnectionStringBuilder conBuilder = new SqlConnectionStringBuilder(connectString) { Encrypt = true}; // False Positive
37+
SqlConnectionStringBuilder conBuilder = new SqlConnectionStringBuilder(connectString) { Encrypt = true };
3938
}
40-
39+
4140

4241
public void TriggerThis()
4342
{
44-
// BAD, Encrypt not specified (version dependent)
43+
// BAD, Encrypt not specified
4544
SqlConnection conn = new SqlConnection("Server=myServerName\\myInstanceName;Database=myDataBase;User Id=myUsername;");
4645
}
4746

4847
void Test4()
4948
{
5049
string connectString =
5150
"Server=1.2.3.4;Database=Anything;UID=ab;Pwd=cd";
52-
// BAD, Encrypt not specified (version dependent)
51+
// BAD, Encrypt not specified
5352
SqlConnectionStringBuilder builder = new SqlConnectionStringBuilder(connectString);
5453
var conn = new SqlConnection(builder.ConnectionString);
5554
}
@@ -62,20 +61,5 @@ void Test5()
6261
SqlConnectionStringBuilder builder = new SqlConnectionStringBuilder(connectString);
6362
var conn = new SqlConnection(builder.ConnectionString);
6463
}
65-
66-
void Test6()
67-
{
68-
var conn = new SqlConnectionStringBuilder(SetToTrueConnStr) { Encrypt = false }; // Bug - cs/insecure-sql-connection-initializer
69-
}
70-
71-
void Test72ndPhase(bool encrypt)
72-
{
73-
var conn = new SqlConnectionStringBuilder(SetToTrueConnStr) { Encrypt = encrypt }; // Bug - cs/insecure-sql-connection-initializer (sink)
74-
}
75-
76-
void Test7()
77-
{
78-
Test72ndPhase(false); // Bug - cs/insecure-sql-connection-initializer (source)
79-
}
8064
}
8165
}

csharp/ql/test/query-tests/Security Features/CWE-327/InsecureSQLConnectionInitializer/InsecureSQLConnection.cs

Whitespace-only changes.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,4 @@
1+
edges
2+
nodes
3+
subpaths
4+
#select

0 commit comments

Comments
 (0)