Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit 67e64f2

Browse files
hvitvedhvitved
committed
C#: Fix whitespaces
1 parent b38effd commit 67e64f2

23 files changed

Lines changed: 78 additions & 80 deletions

File tree

‎csharp/fix-whitespaces.sh‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ cat > "$BASEDIR/reformat.vim" <<"EOF"
88
:wq
99
EOF
1010

11-
find "$BASEDIR" \( -name "*.ql" -or -name "*.qll" -or -name "*.csv" \) -exec vim -u /dev/null -s reformat.vim {} \;
11+
find "$BASEDIR" \( -name "*.ql" -or -name "*.qll" -or -name "*.csv" -or -name "*.config" \) -exec vim -u /dev/null -s reformat.vim {} \;
1212

1313
cat > reformat.vim <<"EOF"
1414
:set ff=unix ts=4 et

‎csharp/ql/src/Configuration/EmptyPasswordInConfigurationFile.config‎

Lines changed: 21 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -6,36 +6,35 @@
66

77
<appSettings>
88
<add key="service-dir" value="/opt/deki/bin" />
9-
<add key="root-uri" value="http://localhost/@api" />
9+
<add key="root-uri" value="http://localhost/@api" />
1010
<add key="apikey" value="12345" />
1111
<add key="script" value="/opt/deki/bin/mindtouch.deki.startup.xml" />
1212
</appSettings>
13-
13+
1414
<connectionStrings>
15-
<add name="connectionstring" providerName="System.Data.SqlClient"
16-
connectionString="Server=(local);Database=admtest;Trusted_Connection=False;uid=sa;pwd= ;" /> <!-- VIOLATION -->
17-
<add name="connectionstring2" providerName="System.Data.SqlClient"
18-
connectionString="Server=(local);Database=admtest;Trusted_Connection=False;uid=sa;password = whatever;" /> <!-- NON-VIOLATION -->
19-
</connectionStrings>
15+
<add name="connectionstring" providerName="System.Data.SqlClient"
16+
connectionString="Server=(local);Database=admtest;Trusted_Connection=False;uid=sa;pwd= ;" /> <!-- VIOLATION -->
17+
<add name="connectionstring2" providerName="System.Data.SqlClient"
18+
connectionString="Server=(local);Database=admtest;Trusted_Connection=False;uid=sa;password = whatever;" /> <!-- NON-VIOLATION -->
19+
</connectionStrings>
2020

2121
<system.web>
2222
<httpHandlers>
23-
<add verb="*" path="*"
24-
type="MindTouch.Dream.Http.HttpHandler, mindtouch.core"/>
23+
<add verb="*" path="*"
24+
type="MindTouch.Dream.Http.HttpHandler, mindtouch.core"/>
2525
</httpHandlers>
26-
<!--<customErrors mode="Off"/>-->
27-
<authentication mode="Windows|Forms|Passport|None">
28-
<forms name="name"
29-
loginUrl="url"
30-
protection="All|None|Encryption|Validation"
31-
timeout="30" path="/" >
32-
<credentials passwordFormat="Clear|SHA1|MD5">
33-
<user name="username" password="" /> <!-- VIOLATION -->
34-
</credentials>
35-
</forms>
36-
<passport redirectUrl="internal"/>
37-
</authentication>
38-
26+
<!--<customErrors mode="Off"/>-->
27+
<authentication mode="Windows|Forms|Passport|None">
28+
<forms name="name"
29+
loginUrl="url"
30+
protection="All|None|Encryption|Validation"
31+
timeout="30" path="/" >
32+
<credentials passwordFormat="Clear|SHA1|MD5">
33+
<user name="username" password="" /> <!-- VIOLATION -->
34+
</credentials>
35+
</forms>
36+
<passport redirectUrl="internal"/>
37+
</authentication>
3938
</system.web>
4039

4140
<system.net>

‎csharp/ql/src/Configuration/PasswordInConfigurationFile.config‎

Lines changed: 21 additions & 22 deletions
Original file line numberDiff line numberDiff line change
@@ -6,36 +6,35 @@
66

77
<appSettings>
88
<add key="service-dir" value="/opt/deki/bin" />
9-
<add key="root-uri" value="http://localhost/@api" />
9+
<add key="root-uri" value="http://localhost/@api" />
1010
<add key="apikey" value="12345" />
1111
<add key="script" value="/opt/deki/bin/mindtouch.deki.startup.xml" />
1212
</appSettings>
13-
13+
1414
<connectionStrings>
15-
<add name="connectionstring" providerName="System.Data.SqlClient"
16-
connectionString="Server=(local);Database=admtest;Trusted_Connection=False;uid=sa;pwd=whatever;" /> <!-- VIOLATION -->
17-
<add name="connectionstring2" providerName="System.Data.SqlClient"
18-
connectionString="Server=(local);Database=admtest;Trusted_Connection=False;uid=sa;password = whatever;" /> <!-- VIOLATION -->
19-
</connectionStrings>
15+
<add name="connectionstring" providerName="System.Data.SqlClient"
16+
connectionString="Server=(local);Database=admtest;Trusted_Connection=False;uid=sa;pwd=whatever;" /> <!-- VIOLATION -->
17+
<add name="connectionstring2" providerName="System.Data.SqlClient"
18+
connectionString="Server=(local);Database=admtest;Trusted_Connection=False;uid=sa;password = whatever;" /> <!-- VIOLATION -->
19+
</connectionStrings>
2020

2121
<system.web>
2222
<httpHandlers>
23-
<add verb="*" path="*"
24-
type="MindTouch.Dream.Http.HttpHandler, mindtouch.core"/>
23+
<add verb="*" path="*"
24+
type="MindTouch.Dream.Http.HttpHandler, mindtouch.core"/>
2525
</httpHandlers>
26-
<!--<customErrors mode="Off"/>-->
27-
<authentication mode="Windows|Forms|Passport|None">
28-
<forms name="name"
29-
loginUrl="url"
30-
protection="All|None|Encryption|Validation"
31-
timeout="30" path="/" >
32-
<credentials passwordFormat="Clear|SHA1|MD5">
33-
<user name="username" password="password" /> <!-- VIOLATION -->
34-
</credentials>
35-
</forms>
36-
<passport redirectUrl="internal"/>
37-
</authentication>
38-
26+
<!--<customErrors mode="Off"/>-->
27+
<authentication mode="Windows|Forms|Passport|None">
28+
<forms name="name"
29+
loginUrl="url"
30+
protection="All|None|Encryption|Validation"
31+
timeout="30" path="/" >
32+
<credentials passwordFormat="Clear|SHA1|MD5">
33+
<user name="username" password="password" /> <!-- VIOLATION -->
34+
</credentials>
35+
</forms>
36+
<passport redirectUrl="internal"/>
37+
</authentication>
3938
</system.web>
4039

4140
<system.net>

‎csharp/ql/src/Security Features/CWE-248/BadWeb.config‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,4 +5,4 @@
55
...
66
</customErrors>
77
</system.web>
8-
</configuration>
8+
</configuration>

‎csharp/ql/src/Security Features/CWE-248/GoodWeb.config‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,4 +5,4 @@
55
...
66
</customErrors>
77
</system.web>
8-
</configuration>
8+
</configuration>

‎csharp/ql/src/Security Features/CWE-451/Web.config‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,4 +9,4 @@
99
</customHeaders>
1010
</httpProtocol>
1111
</system.webServer>
12-
</configuration>
12+
</configuration>

‎csharp/ql/src/Security Features/CWE-614/Web.config‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,7 @@
33
<system.web>
44
<authentication>
55
<forms
6-
requireSSL="true"
6+
requireSSL="true"
77
... />
88
</authentication>
99
<httpCookies

‎csharp/ql/src/semmle/code/csharp/security/dataflow/UrlRedirect.qll‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -174,7 +174,7 @@ module UrlRedirect {
174174
)
175175
}
176176
}
177-
177+
178178
/**
179179
* Anything that is setting "location" header in the response headers.
180180
*/
@@ -201,12 +201,12 @@ module UrlRedirect {
201201
this.getExpr() = add.getArgument(1))
202202
or // HttpResponse.Headers["location"] = <user-provided value>
203203
exists(RefType cl, MicrosoftAspNetCoreHttpHttpResponse resp, IndexerAccess ci, Call cs, PropertyAccess qualifier |
204-
qualifier.getTarget() = resp.getHeadersProperty() and
204+
qualifier.getTarget() = resp.getHeadersProperty() and
205205
ci.getTarget() = cl.getAnIndexer() and
206206
qualifier = ci.getQualifier() and
207207
cs.getTarget() = cl.getAnIndexer().getSetter() and
208208
cs.getArgument(0).getValue().toLowerCase() = "location" and
209-
this.asExpr() = cs.getArgument(1))
209+
this.asExpr() = cs.getArgument(1))
210210
}
211211
}
212212
}

‎csharp/ql/src/semmle/code/csharp/security/dataflow/XSS.qll‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -526,8 +526,8 @@ module XSS {
526526
this.getExpr() = any(WebPageClass h).getWriteLiteralMethod().getACall().getAnArgument()
527527
}
528528

529-
override string explanation() {
530-
result = "System.Web.WebPages.WebPage.WriteLiteral() method"
529+
override string explanation() {
530+
result = "System.Web.WebPages.WebPage.WriteLiteral() method"
531531
}
532532
}
533533

@@ -539,9 +539,9 @@ module XSS {
539539
WebPageWriteLiteralToSink() {
540540
this.getExpr() = any(WebPageClass h).getWriteLiteralToMethod().getACall().getAnArgument()
541541
}
542-
543-
override string explanation() {
544-
result = "System.Web.WebPages.WebPage.WriteLiteralTo() method"
542+
543+
override string explanation() {
544+
result = "System.Web.WebPages.WebPage.WriteLiteralTo() method"
545545
}
546546
}
547547

@@ -555,9 +555,9 @@ module XSS {
555555
MicrosoftAspNetCoreMvcHtmlHelperRawSink() {
556556
this.getExpr() = any(MicrosoftAspNetCoreMvcHtmlHelperClass h).getRawMethod().getACall().getAnArgument()
557557
}
558-
559-
override string explanation() {
560-
result = "Microsoft.AspNetCore.Mvc.ViewFeatures.HtmlHelper.Raw() method"
558+
559+
override string explanation() {
560+
result = "Microsoft.AspNetCore.Mvc.ViewFeatures.HtmlHelper.Raw() method"
561561
}
562562
}
563563

@@ -569,19 +569,19 @@ module XSS {
569569
MicrosoftAspNetRazorPageWriteLiteralSink() {
570570
this.getExpr() = any(MicrosoftAspNetCoreMvcRazorPageBase h).getWriteLiteralMethod().getACall().getAnArgument()
571571
}
572-
573-
override string explanation() {
574-
result = "Microsoft.AspNetCore.Mvc.Razor.RazorPageBase.WriteLiteral() method"
572+
573+
override string explanation() {
574+
result = "Microsoft.AspNetCore.Mvc.Razor.RazorPageBase.WriteLiteral() method"
575575
}
576576
}
577-
577+
578578
/**
579579
* HtmlString that may be rendered as is need to have sanitized value
580580
*/
581581
class MicrosoftAspNetHtmlStringSink extends AspNetCoreSink {
582582
MicrosoftAspNetHtmlStringSink() {
583-
exists (ObjectCreation c, MicrosoftAspNetCoreHttpHtmlString s |
584-
c.getTarget() = s.getAConstructor() and
583+
exists (ObjectCreation c, MicrosoftAspNetCoreHttpHtmlString s |
584+
c.getTarget() = s.getAConstructor() and
585585
this.asExpr() = c.getAnArgument())
586586
}
587587
}

‎csharp/ql/test/query-tests/Security Features/CWE-011/Web.config‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,4 +5,4 @@
55
defaultLanguage="c#"
66
/>
77
</system.web>
8-
</configuration>
8+
</configuration>

0 commit comments

Comments
 (0)