Thanks to visit codestin.com
Credit goes to github.com

Skip to content

Commit c752777

Browse files
committed
Accept test changes
1 parent c011e01 commit c752777

3 files changed

Lines changed: 891 additions & 20 deletions

File tree

go/ql/test/library-tests/semmle/go/frameworks/Beego/ReflectedXss.expected

Lines changed: 2 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,6 @@
11
edges
2-
| file://:0:0:0:0 | parameter 0 of GetDisplayString | file://:0:0:0:0 | [summary] to write: return (return[0]) in GetDisplayString |
32
| file://:0:0:0:0 | parameter 0 of HTML2str | file://:0:0:0:0 | [summary] to write: return (return[0]) in HTML2str |
43
| file://:0:0:0:0 | parameter 0 of Htmlunquote | file://:0:0:0:0 | [summary] to write: return (return[0]) in Htmlunquote |
5-
| file://:0:0:0:0 | parameter 0 of MapGet | file://:0:0:0:0 | [summary] to write: return (return[0]) in MapGet |
64
| file://:0:0:0:0 | parameter 0 of ParseForm | file://:0:0:0:0 | [summary] to write: argument 1 in ParseForm |
75
| file://:0:0:0:0 | parameter 0 of ReadAll | file://:0:0:0:0 | [summary] to write: return (return[0]) in ReadAll |
86
| file://:0:0:0:0 | parameter 0 of SliceChunk | file://:0:0:0:0 | [summary] to write: return (return[0]) in SliceChunk |
@@ -44,7 +42,7 @@ edges
4442
| test.go:137:23:137:42 | call to Data | test.go:137:23:137:62 | type assertion |
4543
| test.go:193:15:193:26 | call to Data | test.go:194:36:194:53 | type assertion |
4644
| test.go:193:15:193:26 | call to Data | test.go:195:39:195:56 | type assertion |
47-
| test.go:193:15:193:26 | call to Data | test.go:196:28:196:56 | type assertion |
45+
| test.go:193:15:193:26 | call to Data | test.go:197:14:197:28 | type assertion |
4846
| test.go:193:15:193:26 | call to Data | test.go:198:36:198:53 | type assertion |
4947
| test.go:193:15:193:26 | call to Data | test.go:199:34:199:51 | type assertion |
5048
| test.go:194:21:194:54 | call to HTML2str | test.go:194:14:194:55 | type conversion |
@@ -53,9 +51,6 @@ edges
5351
| test.go:195:21:195:57 | call to Htmlunquote | test.go:195:14:195:58 | type conversion |
5452
| test.go:195:39:195:56 | type assertion | file://:0:0:0:0 | parameter 0 of Htmlunquote |
5553
| test.go:195:39:195:56 | type assertion | test.go:195:21:195:57 | call to Htmlunquote |
56-
| test.go:196:2:196:68 | ... := ...[0] | test.go:197:14:197:28 | type assertion |
57-
| test.go:196:28:196:56 | type assertion | file://:0:0:0:0 | parameter 0 of MapGet |
58-
| test.go:196:28:196:56 | type assertion | test.go:196:2:196:68 | ... := ...[0] |
5954
| test.go:198:21:198:54 | call to Str2html | test.go:198:14:198:55 | type conversion |
6055
| test.go:198:36:198:53 | type assertion | file://:0:0:0:0 | parameter 0 of Str2html |
6156
| test.go:198:36:198:53 | type assertion | test.go:198:21:198:54 | call to Str2html |
@@ -78,7 +73,7 @@ edges
7873
| test.go:240:15:240:36 | call to GetString | test.go:243:21:243:29 | untrusted |
7974
| test.go:253:23:253:44 | call to GetCookie | test.go:253:16:253:45 | type conversion |
8075
| test.go:264:62:264:83 | call to GetCookie | test.go:264:55:264:84 | type conversion |
81-
| test.go:269:2:269:40 | ... := ...[0] | test.go:277:44:277:60 | selection of Filename |
76+
| test.go:269:2:269:40 | ... := ...[0] | test.go:277:21:277:61 | call to GetDisplayString |
8277
| test.go:269:2:269:40 | ... := ...[0] | test.go:278:38:278:49 | genericFiles |
8378
| test.go:269:2:269:40 | ... := ...[0] | test.go:279:37:279:48 | genericFiles |
8479
| test.go:269:2:269:40 | ... := ...[0] | test.go:285:4:285:15 | genericFiles |
@@ -92,8 +87,6 @@ edges
9287
| test.go:269:2:269:40 | ... := ...[0] | test.go:295:39:295:50 | genericFiles |
9388
| test.go:269:2:269:40 | ... := ...[0] | test.go:296:40:296:51 | genericFiles |
9489
| test.go:269:2:269:40 | ... := ...[0] | test.go:297:39:297:50 | genericFiles |
95-
| test.go:277:44:277:60 | selection of Filename | file://:0:0:0:0 | parameter 0 of GetDisplayString |
96-
| test.go:277:44:277:60 | selection of Filename | test.go:277:21:277:61 | call to GetDisplayString |
9790
| test.go:278:21:278:53 | call to SliceChunk | test.go:278:21:278:92 | selection of Filename |
9891
| test.go:278:38:278:49 | genericFiles | file://:0:0:0:0 | parameter 0 of SliceChunk |
9992
| test.go:278:38:278:49 | genericFiles | test.go:278:21:278:53 | call to SliceChunk |
@@ -148,11 +141,9 @@ nodes
148141
| file://:0:0:0:0 | [summary] to write: argument 1 in ParseForm | semmle.label | [summary] to write: argument 1 in ParseForm |
149142
| file://:0:0:0:0 | [summary] to write: argument -1 in Set | semmle.label | [summary] to write: argument -1 in Set |
150143
| file://:0:0:0:0 | [summary] to write: return (return[0]) in Get | semmle.label | [summary] to write: return (return[0]) in Get |
151-
| file://:0:0:0:0 | [summary] to write: return (return[0]) in GetDisplayString | semmle.label | [summary] to write: return (return[0]) in GetDisplayString |
152144
| file://:0:0:0:0 | [summary] to write: return (return[0]) in HTML2str | semmle.label | [summary] to write: return (return[0]) in HTML2str |
153145
| file://:0:0:0:0 | [summary] to write: return (return[0]) in Htmlunquote | semmle.label | [summary] to write: return (return[0]) in Htmlunquote |
154146
| file://:0:0:0:0 | [summary] to write: return (return[0]) in Items | semmle.label | [summary] to write: return (return[0]) in Items |
155-
| file://:0:0:0:0 | [summary] to write: return (return[0]) in MapGet | semmle.label | [summary] to write: return (return[0]) in MapGet |
156147
| file://:0:0:0:0 | [summary] to write: return (return[0]) in ReadAll | semmle.label | [summary] to write: return (return[0]) in ReadAll |
157148
| file://:0:0:0:0 | [summary] to write: return (return[0]) in SliceChunk | semmle.label | [summary] to write: return (return[0]) in SliceChunk |
158149
| file://:0:0:0:0 | [summary] to write: return (return[0]) in SliceDiff | semmle.label | [summary] to write: return (return[0]) in SliceDiff |
@@ -169,10 +160,8 @@ nodes
169160
| file://:0:0:0:0 | [summary] to write: return (return[0]) in SliceUnique | semmle.label | [summary] to write: return (return[0]) in SliceUnique |
170161
| file://:0:0:0:0 | [summary] to write: return (return[0]) in Str2html | semmle.label | [summary] to write: return (return[0]) in Str2html |
171162
| file://:0:0:0:0 | [summary] to write: return (return[0]) in Substr | semmle.label | [summary] to write: return (return[0]) in Substr |
172-
| file://:0:0:0:0 | parameter 0 of GetDisplayString | semmle.label | parameter 0 of GetDisplayString |
173163
| file://:0:0:0:0 | parameter 0 of HTML2str | semmle.label | parameter 0 of HTML2str |
174164
| file://:0:0:0:0 | parameter 0 of Htmlunquote | semmle.label | parameter 0 of Htmlunquote |
175-
| file://:0:0:0:0 | parameter 0 of MapGet | semmle.label | parameter 0 of MapGet |
176165
| file://:0:0:0:0 | parameter 0 of ParseForm | semmle.label | parameter 0 of ParseForm |
177166
| file://:0:0:0:0 | parameter 0 of ReadAll | semmle.label | parameter 0 of ReadAll |
178167
| file://:0:0:0:0 | parameter 0 of SliceChunk | semmle.label | parameter 0 of SliceChunk |
@@ -236,8 +225,6 @@ nodes
236225
| test.go:195:14:195:58 | type conversion | semmle.label | type conversion |
237226
| test.go:195:21:195:57 | call to Htmlunquote | semmle.label | call to Htmlunquote |
238227
| test.go:195:39:195:56 | type assertion | semmle.label | type assertion |
239-
| test.go:196:2:196:68 | ... := ...[0] | semmle.label | ... := ...[0] |
240-
| test.go:196:28:196:56 | type assertion | semmle.label | type assertion |
241228
| test.go:197:14:197:28 | type assertion | semmle.label | type assertion |
242229
| test.go:198:14:198:55 | type conversion | semmle.label | type conversion |
243230
| test.go:198:21:198:54 | call to Str2html | semmle.label | call to Str2html |
@@ -274,7 +261,6 @@ nodes
274261
| test.go:264:62:264:83 | call to GetCookie | semmle.label | call to GetCookie |
275262
| test.go:269:2:269:40 | ... := ...[0] | semmle.label | ... := ...[0] |
276263
| test.go:277:21:277:61 | call to GetDisplayString | semmle.label | call to GetDisplayString |
277-
| test.go:277:44:277:60 | selection of Filename | semmle.label | selection of Filename |
278264
| test.go:278:21:278:53 | call to SliceChunk | semmle.label | call to SliceChunk |
279265
| test.go:278:21:278:92 | selection of Filename | semmle.label | selection of Filename |
280266
| test.go:278:38:278:49 | genericFiles | semmle.label | genericFiles |
@@ -326,12 +312,10 @@ nodes
326312
subpaths
327313
| test.go:194:36:194:53 | type assertion | file://:0:0:0:0 | parameter 0 of HTML2str | file://:0:0:0:0 | [summary] to write: return (return[0]) in HTML2str | test.go:194:21:194:54 | call to HTML2str |
328314
| test.go:195:39:195:56 | type assertion | file://:0:0:0:0 | parameter 0 of Htmlunquote | file://:0:0:0:0 | [summary] to write: return (return[0]) in Htmlunquote | test.go:195:21:195:57 | call to Htmlunquote |
329-
| test.go:196:28:196:56 | type assertion | file://:0:0:0:0 | parameter 0 of MapGet | file://:0:0:0:0 | [summary] to write: return (return[0]) in MapGet | test.go:196:2:196:68 | ... := ...[0] |
330315
| test.go:198:36:198:53 | type assertion | file://:0:0:0:0 | parameter 0 of Str2html | file://:0:0:0:0 | [summary] to write: return (return[0]) in Str2html | test.go:198:21:198:54 | call to Str2html |
331316
| test.go:199:34:199:51 | type assertion | file://:0:0:0:0 | parameter 0 of Substr | file://:0:0:0:0 | [summary] to write: return (return[0]) in Substr | test.go:199:21:199:58 | call to Substr |
332317
| test.go:202:18:202:33 | selection of Form | file://:0:0:0:0 | parameter 0 of ParseForm | file://:0:0:0:0 | [summary] to write: argument 1 in ParseForm | test.go:201:6:201:6 | definition of s |
333318
| test.go:219:31:219:31 | f | file://:0:0:0:0 | parameter 0 of ReadAll | file://:0:0:0:0 | [summary] to write: return (return[0]) in ReadAll | test.go:219:2:219:32 | ... := ...[0] |
334-
| test.go:277:44:277:60 | selection of Filename | file://:0:0:0:0 | parameter 0 of GetDisplayString | file://:0:0:0:0 | [summary] to write: return (return[0]) in GetDisplayString | test.go:277:21:277:61 | call to GetDisplayString |
335319
| test.go:278:38:278:49 | genericFiles | file://:0:0:0:0 | parameter 0 of SliceChunk | file://:0:0:0:0 | [summary] to write: return (return[0]) in SliceChunk | test.go:278:21:278:53 | call to SliceChunk |
336320
| test.go:279:37:279:48 | genericFiles | file://:0:0:0:0 | parameter 0 of SliceDiff | file://:0:0:0:0 | [summary] to write: return (return[0]) in SliceDiff | test.go:279:21:279:60 | call to SliceDiff |
337321
| test.go:285:4:285:15 | genericFiles | file://:0:0:0:0 | parameter 0 of SliceFilter | file://:0:0:0:0 | [summary] to write: return (return[0]) in SliceFilter | test.go:284:3:286:44 | call to SliceFilter |

go/ql/test/library-tests/semmle/go/frameworks/Revel/ReflectedXss.expected

Lines changed: 22 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,21 +1,41 @@
11
edges
2-
| EndToEnd.go:36:18:36:25 | selection of Params | EndToEnd.go:37:24:37:26 | buf |
3-
| EndToEnd.go:69:22:69:29 | selection of Params | EndToEnd.go:69:22:69:51 | call to Get |
2+
| EndToEnd.go:35:2:35:4 | definition of buf | EndToEnd.go:37:24:37:26 | buf |
3+
| EndToEnd.go:36:18:36:25 | selection of Params | EndToEnd.go:36:18:36:30 | selection of Form |
4+
| EndToEnd.go:36:18:36:30 | selection of Form | EndToEnd.go:36:18:36:47 | call to Get |
5+
| EndToEnd.go:36:18:36:30 | selection of Form | file://:0:0:0:0 | parameter -1 of Get |
6+
| EndToEnd.go:36:18:36:47 | call to Get | EndToEnd.go:35:2:35:4 | definition of buf |
7+
| EndToEnd.go:36:18:36:47 | call to Get | file://:0:0:0:0 | parameter 0 of WriteString |
8+
| EndToEnd.go:69:22:69:29 | selection of Params | EndToEnd.go:69:22:69:34 | selection of Form |
9+
| EndToEnd.go:69:22:69:34 | selection of Form | EndToEnd.go:69:22:69:51 | call to Get |
10+
| EndToEnd.go:69:22:69:34 | selection of Form | file://:0:0:0:0 | parameter -1 of Get |
411
| Revel.go:70:22:70:29 | selection of Params | Revel.go:70:22:70:35 | selection of Query |
512
| examples/booking/app/init.go:36:44:36:48 | selection of URL | examples/booking/app/init.go:36:44:36:53 | selection of Path |
613
| examples/booking/app/init.go:40:49:40:53 | selection of URL | examples/booking/app/init.go:40:49:40:58 | selection of Path |
14+
| file://:0:0:0:0 | parameter 0 of WriteString | file://:0:0:0:0 | [summary] to write: argument -1 in WriteString |
15+
| file://:0:0:0:0 | parameter -1 of Get | file://:0:0:0:0 | [summary] to write: return (return[0]) in Get |
716
nodes
17+
| EndToEnd.go:35:2:35:4 | definition of buf | semmle.label | definition of buf |
818
| EndToEnd.go:36:18:36:25 | selection of Params | semmle.label | selection of Params |
19+
| EndToEnd.go:36:18:36:30 | selection of Form | semmle.label | selection of Form |
20+
| EndToEnd.go:36:18:36:47 | call to Get | semmle.label | call to Get |
921
| EndToEnd.go:37:24:37:26 | buf | semmle.label | buf |
1022
| EndToEnd.go:69:22:69:29 | selection of Params | semmle.label | selection of Params |
23+
| EndToEnd.go:69:22:69:34 | selection of Form | semmle.label | selection of Form |
1124
| EndToEnd.go:69:22:69:51 | call to Get | semmle.label | call to Get |
1225
| Revel.go:70:22:70:29 | selection of Params | semmle.label | selection of Params |
1326
| Revel.go:70:22:70:35 | selection of Query | semmle.label | selection of Query |
1427
| examples/booking/app/init.go:36:44:36:48 | selection of URL | semmle.label | selection of URL |
1528
| examples/booking/app/init.go:36:44:36:53 | selection of Path | semmle.label | selection of Path |
1629
| examples/booking/app/init.go:40:49:40:53 | selection of URL | semmle.label | selection of URL |
1730
| examples/booking/app/init.go:40:49:40:58 | selection of Path | semmle.label | selection of Path |
31+
| file://:0:0:0:0 | [summary] to write: argument -1 in WriteString | semmle.label | [summary] to write: argument -1 in WriteString |
32+
| file://:0:0:0:0 | [summary] to write: return (return[0]) in Get | semmle.label | [summary] to write: return (return[0]) in Get |
33+
| file://:0:0:0:0 | parameter 0 of WriteString | semmle.label | parameter 0 of WriteString |
34+
| file://:0:0:0:0 | parameter -1 of Get | semmle.label | parameter -1 of Get |
1835
subpaths
36+
| EndToEnd.go:36:18:36:30 | selection of Form | file://:0:0:0:0 | parameter -1 of Get | file://:0:0:0:0 | [summary] to write: return (return[0]) in Get | EndToEnd.go:36:18:36:47 | call to Get |
37+
| EndToEnd.go:36:18:36:47 | call to Get | file://:0:0:0:0 | parameter 0 of WriteString | file://:0:0:0:0 | [summary] to write: argument -1 in WriteString | EndToEnd.go:35:2:35:4 | definition of buf |
38+
| EndToEnd.go:69:22:69:34 | selection of Form | file://:0:0:0:0 | parameter -1 of Get | file://:0:0:0:0 | [summary] to write: return (return[0]) in Get | EndToEnd.go:69:22:69:51 | call to Get |
1939
#select
2040
| EndToEnd.go:37:24:37:26 | buf | EndToEnd.go:36:18:36:25 | selection of Params | EndToEnd.go:37:24:37:26 | buf | Cross-site scripting vulnerability due to $@. | EndToEnd.go:36:18:36:25 | selection of Params | user-provided value | EndToEnd.go:0:0:0:0 | EndToEnd.go | |
2141
| EndToEnd.go:69:22:69:51 | call to Get | EndToEnd.go:69:22:69:29 | selection of Params | EndToEnd.go:69:22:69:51 | call to Get | Cross-site scripting vulnerability due to $@. | EndToEnd.go:69:22:69:29 | selection of Params | user-provided value | EndToEnd.go:0:0:0:0 | EndToEnd.go | |

0 commit comments

Comments
 (0)