File tree 2 files changed +1
-5
lines changed
csharp/ql/test/query-tests/Security Features/CWE-117
2 files changed +1
-5
lines changed Original file line number Diff line number Diff line change 5
5
| LogForging.cs:17:27:17:61 | access to indexer : String | LogForging.cs:20:21:20:43 | ... + ... |
6
6
| LogForging.cs:17:27:17:61 | access to indexer : String | LogForging.cs:26:50:26:72 | ... + ... |
7
7
| LogForgingAsp.cs:8:32:8:39 | username : String | LogForgingAsp.cs:12:21:12:43 | ... + ... |
8
- | LogForgingAsp.cs:15:34:15:37 | date : DateTime | LogForgingAsp.cs:19:21:19:64 | $"..." |
9
8
nodes
10
9
| LogForging.cs:17:27:17:49 | access to property QueryString : NameValueCollection | semmle.label | access to property QueryString : NameValueCollection |
11
10
| LogForging.cs:17:27:17:61 | access to indexer : String | semmle.label | access to indexer : String |
12
11
| LogForging.cs:20:21:20:43 | ... + ... | semmle.label | ... + ... |
13
12
| LogForging.cs:26:50:26:72 | ... + ... | semmle.label | ... + ... |
14
13
| LogForgingAsp.cs:8:32:8:39 | username : String | semmle.label | username : String |
15
14
| LogForgingAsp.cs:12:21:12:43 | ... + ... | semmle.label | ... + ... |
16
- | LogForgingAsp.cs:15:34:15:37 | date : DateTime | semmle.label | date : DateTime |
17
- | LogForgingAsp.cs:19:21:19:64 | $"..." | semmle.label | $"..." |
18
15
subpaths
19
16
#select
20
17
| LogForging.cs:20:21:20:43 | ... + ... | LogForging.cs:17:27:17:49 | access to property QueryString : NameValueCollection | LogForging.cs:20:21:20:43 | ... + ... | $@ flows to log entry. | LogForging.cs:17:27:17:49 | access to property QueryString | User-provided value |
21
18
| LogForging.cs:26:50:26:72 | ... + ... | LogForging.cs:17:27:17:49 | access to property QueryString : NameValueCollection | LogForging.cs:26:50:26:72 | ... + ... | $@ flows to log entry. | LogForging.cs:17:27:17:49 | access to property QueryString | User-provided value |
22
19
| LogForgingAsp.cs:12:21:12:43 | ... + ... | LogForgingAsp.cs:8:32:8:39 | username : String | LogForgingAsp.cs:12:21:12:43 | ... + ... | $@ flows to log entry. | LogForgingAsp.cs:8:32:8:39 | username | User-provided value |
23
- | LogForgingAsp.cs:19:21:19:64 | $"..." | LogForgingAsp.cs:15:34:15:37 | date : DateTime | LogForgingAsp.cs:19:21:19:64 | $"..." | $@ flows to log entry. | LogForgingAsp.cs:15:34:15:37 | date | User-provided value |
Original file line number Diff line number Diff line change @@ -15,7 +15,7 @@ public void Action1(string username)
15
15
public void Action1 ( DateTime date )
16
16
{
17
17
var logger = new ILogger ( ) ;
18
- // GOOD: DateTime is a sanitizer. (FALSE POSITIVE)
18
+ // GOOD: DateTime is a sanitizer.
19
19
logger . Warn ( $ "Warning about the date: { date : yyyy-MM-dd} ") ;
20
20
}
21
21
}
You can’t perform that action at this time.
0 commit comments