Skip to content

Commit 93c8529

Browse files
jorgectfjorgectf
committed
Add .expected 
1 parent 1dd77f1 commit 93c8529

1 file changed

Lines changed: 83 additions & 0 deletions

File tree

  • python/ql/test/experimental/query-tests/Security/CWE-611

‎python/ql/test/experimental/query-tests/Security/CWE-611/XXE.expected‎

Lines changed: 83 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,83 @@
1+
edges
2+
| general.py:18:19:18:25 | ControlFlowNode for request | general.py:18:19:18:30 | ControlFlowNode for Attribute |
3+
| general.py:18:19:18:30 | ControlFlowNode for Attribute | general.py:18:19:18:45 | ControlFlowNode for Subscript |
4+
| general.py:18:19:18:45 | ControlFlowNode for Subscript | general.py:20:34:20:44 | ControlFlowNode for xml_content |
5+
| general.py:25:19:25:25 | ControlFlowNode for request | general.py:25:19:25:30 | ControlFlowNode for Attribute |
6+
| general.py:25:19:25:30 | ControlFlowNode for Attribute | general.py:25:19:25:45 | ControlFlowNode for Subscript |
7+
| general.py:25:19:25:45 | ControlFlowNode for Subscript | general.py:27:27:27:37 | ControlFlowNode for xml_content |
8+
| general.py:32:19:32:25 | ControlFlowNode for request | general.py:32:19:32:30 | ControlFlowNode for Attribute |
9+
| general.py:32:19:32:30 | ControlFlowNode for Attribute | general.py:32:19:32:45 | ControlFlowNode for Subscript |
10+
| general.py:32:19:32:45 | ControlFlowNode for Subscript | general.py:34:29:34:49 | ControlFlowNode for StringIO() |
11+
| general.py:39:19:39:25 | ControlFlowNode for request | general.py:39:19:39:30 | ControlFlowNode for Attribute |
12+
| general.py:39:19:39:30 | ControlFlowNode for Attribute | general.py:39:19:39:45 | ControlFlowNode for Subscript |
13+
| general.py:39:19:39:45 | ControlFlowNode for Subscript | general.py:41:28:41:38 | ControlFlowNode for xml_content |
14+
| general.py:46:19:46:25 | ControlFlowNode for request | general.py:46:19:46:30 | ControlFlowNode for Attribute |
15+
| general.py:46:19:46:30 | ControlFlowNode for Attribute | general.py:46:19:46:45 | ControlFlowNode for Subscript |
16+
| general.py:46:19:46:45 | ControlFlowNode for Subscript | general.py:49:34:49:44 | ControlFlowNode for xml_content |
17+
| general.py:54:19:54:25 | ControlFlowNode for request | general.py:54:19:54:30 | ControlFlowNode for Attribute |
18+
| general.py:54:19:54:30 | ControlFlowNode for Attribute | general.py:54:19:54:45 | ControlFlowNode for Subscript |
19+
| general.py:54:19:54:45 | ControlFlowNode for Subscript | general.py:57:34:57:44 | ControlFlowNode for xml_content |
20+
| general.py:62:19:62:25 | ControlFlowNode for request | general.py:62:19:62:30 | ControlFlowNode for Attribute |
21+
| general.py:62:19:62:30 | ControlFlowNode for Attribute | general.py:62:19:62:45 | ControlFlowNode for Subscript |
22+
| general.py:62:19:62:45 | ControlFlowNode for Subscript | general.py:65:45:65:55 | ControlFlowNode for xml_content |
23+
| general.py:70:19:70:25 | ControlFlowNode for request | general.py:70:19:70:30 | ControlFlowNode for Attribute |
24+
| general.py:70:19:70:30 | ControlFlowNode for Attribute | general.py:70:19:70:45 | ControlFlowNode for Subscript |
25+
| general.py:70:19:70:45 | ControlFlowNode for Subscript | general.py:73:40:73:60 | ControlFlowNode for StringIO() |
26+
| xml_sax_make_parser.py:59:19:59:25 | ControlFlowNode for request | xml_sax_make_parser.py:59:19:59:30 | ControlFlowNode for Attribute |
27+
| xml_sax_make_parser.py:59:19:59:30 | ControlFlowNode for Attribute | xml_sax_make_parser.py:59:19:59:45 | ControlFlowNode for Subscript |
28+
| xml_sax_make_parser.py:59:19:59:45 | ControlFlowNode for Subscript | xml_sax_make_parser.py:65:18:65:38 | ControlFlowNode for StringIO() |
29+
| xml_sax_make_parser.py:71:19:71:25 | ControlFlowNode for request | xml_sax_make_parser.py:71:19:71:30 | ControlFlowNode for Attribute |
30+
| xml_sax_make_parser.py:71:19:71:30 | ControlFlowNode for Attribute | xml_sax_make_parser.py:71:19:71:45 | ControlFlowNode for Subscript |
31+
| xml_sax_make_parser.py:71:19:71:45 | ControlFlowNode for Subscript | xml_sax_make_parser.py:75:34:75:54 | ControlFlowNode for StringIO() |
32+
nodes
33+
| general.py:18:19:18:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
34+
| general.py:18:19:18:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
35+
| general.py:18:19:18:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
36+
| general.py:20:34:20:44 | ControlFlowNode for xml_content | semmle.label | ControlFlowNode for xml_content |
37+
| general.py:25:19:25:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
38+
| general.py:25:19:25:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
39+
| general.py:25:19:25:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
40+
| general.py:27:27:27:37 | ControlFlowNode for xml_content | semmle.label | ControlFlowNode for xml_content |
41+
| general.py:32:19:32:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
42+
| general.py:32:19:32:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
43+
| general.py:32:19:32:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
44+
| general.py:34:29:34:49 | ControlFlowNode for StringIO() | semmle.label | ControlFlowNode for StringIO() |
45+
| general.py:39:19:39:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
46+
| general.py:39:19:39:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
47+
| general.py:39:19:39:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
48+
| general.py:41:28:41:38 | ControlFlowNode for xml_content | semmle.label | ControlFlowNode for xml_content |
49+
| general.py:46:19:46:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
50+
| general.py:46:19:46:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
51+
| general.py:46:19:46:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
52+
| general.py:49:34:49:44 | ControlFlowNode for xml_content | semmle.label | ControlFlowNode for xml_content |
53+
| general.py:54:19:54:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
54+
| general.py:54:19:54:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
55+
| general.py:54:19:54:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
56+
| general.py:57:34:57:44 | ControlFlowNode for xml_content | semmle.label | ControlFlowNode for xml_content |
57+
| general.py:62:19:62:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
58+
| general.py:62:19:62:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
59+
| general.py:62:19:62:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
60+
| general.py:65:45:65:55 | ControlFlowNode for xml_content | semmle.label | ControlFlowNode for xml_content |
61+
| general.py:70:19:70:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
62+
| general.py:70:19:70:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
63+
| general.py:70:19:70:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
64+
| general.py:73:40:73:60 | ControlFlowNode for StringIO() | semmle.label | ControlFlowNode for StringIO() |
65+
| xml_sax_make_parser.py:59:19:59:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
66+
| xml_sax_make_parser.py:59:19:59:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
67+
| xml_sax_make_parser.py:59:19:59:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
68+
| xml_sax_make_parser.py:65:18:65:38 | ControlFlowNode for StringIO() | semmle.label | ControlFlowNode for StringIO() |
69+
| xml_sax_make_parser.py:71:19:71:25 | ControlFlowNode for request | semmle.label | ControlFlowNode for request |
70+
| xml_sax_make_parser.py:71:19:71:30 | ControlFlowNode for Attribute | semmle.label | ControlFlowNode for Attribute |
71+
| xml_sax_make_parser.py:71:19:71:45 | ControlFlowNode for Subscript | semmle.label | ControlFlowNode for Subscript |
72+
| xml_sax_make_parser.py:75:34:75:54 | ControlFlowNode for StringIO() | semmle.label | ControlFlowNode for StringIO() |
73+
#select
74+
| general.py:20:34:20:44 | ControlFlowNode for xml_content | general.py:18:19:18:25 | ControlFlowNode for request | general.py:20:34:20:44 | ControlFlowNode for xml_content | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | general.py:20:34:20:44 | ControlFlowNode for xml_content | This | general.py:18:19:18:25 | ControlFlowNode for request | user-provided value |
75+
| general.py:27:27:27:37 | ControlFlowNode for xml_content | general.py:25:19:25:25 | ControlFlowNode for request | general.py:27:27:27:37 | ControlFlowNode for xml_content | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | general.py:27:27:27:37 | ControlFlowNode for xml_content | This | general.py:25:19:25:25 | ControlFlowNode for request | user-provided value |
76+
| general.py:34:29:34:49 | ControlFlowNode for StringIO() | general.py:32:19:32:25 | ControlFlowNode for request | general.py:34:29:34:49 | ControlFlowNode for StringIO() | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | general.py:34:29:34:49 | ControlFlowNode for StringIO() | This | general.py:32:19:32:25 | ControlFlowNode for request | user-provided value |
77+
| general.py:41:28:41:38 | ControlFlowNode for xml_content | general.py:39:19:39:25 | ControlFlowNode for request | general.py:41:28:41:38 | ControlFlowNode for xml_content | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | general.py:41:28:41:38 | ControlFlowNode for xml_content | This | general.py:39:19:39:25 | ControlFlowNode for request | user-provided value |
78+
| general.py:49:34:49:44 | ControlFlowNode for xml_content | general.py:46:19:46:25 | ControlFlowNode for request | general.py:49:34:49:44 | ControlFlowNode for xml_content | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | general.py:49:34:49:44 | ControlFlowNode for xml_content | This | general.py:46:19:46:25 | ControlFlowNode for request | user-provided value |
79+
| general.py:57:34:57:44 | ControlFlowNode for xml_content | general.py:54:19:54:25 | ControlFlowNode for request | general.py:57:34:57:44 | ControlFlowNode for xml_content | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | general.py:57:34:57:44 | ControlFlowNode for xml_content | This | general.py:54:19:54:25 | ControlFlowNode for request | user-provided value |
80+
| general.py:65:45:65:55 | ControlFlowNode for xml_content | general.py:62:19:62:25 | ControlFlowNode for request | general.py:65:45:65:55 | ControlFlowNode for xml_content | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | general.py:65:45:65:55 | ControlFlowNode for xml_content | This | general.py:62:19:62:25 | ControlFlowNode for request | user-provided value |
81+
| general.py:73:40:73:60 | ControlFlowNode for StringIO() | general.py:70:19:70:25 | ControlFlowNode for request | general.py:73:40:73:60 | ControlFlowNode for StringIO() | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | general.py:73:40:73:60 | ControlFlowNode for StringIO() | This | general.py:70:19:70:25 | ControlFlowNode for request | user-provided value |
82+
| xml_sax_make_parser.py:65:18:65:38 | ControlFlowNode for StringIO() | xml_sax_make_parser.py:59:19:59:25 | ControlFlowNode for request | xml_sax_make_parser.py:65:18:65:38 | ControlFlowNode for StringIO() | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | xml_sax_make_parser.py:65:18:65:38 | ControlFlowNode for StringIO() | This | xml_sax_make_parser.py:59:19:59:25 | ControlFlowNode for request | user-provided value |
83+
| xml_sax_make_parser.py:75:34:75:54 | ControlFlowNode for StringIO() | xml_sax_make_parser.py:71:19:71:25 | ControlFlowNode for request | xml_sax_make_parser.py:75:34:75:54 | ControlFlowNode for StringIO() | $@ XML input is constructed from a $@ and isn't secured against XML External Entities abuse | xml_sax_make_parser.py:75:34:75:54 | ControlFlowNode for StringIO() | This | xml_sax_make_parser.py:71:19:71:25 | ControlFlowNode for request | user-provided value |

0 commit comments

Comments
 (0)