Skip to content

Add test for location extended data #3978

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
IlyasShabi merged 12 commits into from
Feb 10, 2025
Merged

Add test for location extended data #3978

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
12 commits
Select commit Hold shift + click to select a range
761577d
Add test for location extended data
IlyasShabi Feb 4, 2025
0a6e6a5
Merge branch 'main' into extended-iast-location
IlyasShabi Feb 4, 2025
398dc95
Add TestUnvalidatedForward_StackTrace
IlyasShabi Feb 4, 2025
c025272
add context to test code injection
IlyasShabi Feb 4, 2025
9235c34
fix order
IlyasShabi Feb 4, 2025
4d7ec00
Avoid checking vulnerabilities without expected location
IlyasShabi Feb 5, 2025
6edaaad
Merge branch 'main' into extended-iast-location
IlyasShabi Feb 5, 2025
a41b87a
add TestTemplateInjection_ExtendedLocation to yaml files
IlyasShabi Feb 5, 2025
1dee46b
define a default check for all languages
IlyasShabi Feb 5, 2025
d0b5ae1
Merge branch 'main' into extended-iast-location
IlyasShabi Feb 6, 2025
b7b9e57
Merge branch 'main' into extended-iast-location
IlyasShabi Feb 7, 2025
a34997b
fix lint
IlyasShabi Feb 7, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
31 changes: 30 additions & 1 deletion manifests/dotnet.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -31,98 +31,127 @@ tests/:
sink/:
test_code_injection.py:
TestCodeInjection: missing_feature
TestCodeInjection_ExtendedLocation: missing_feature
TestCodeInjection_StackTrace: missing_feature
test_command_injection.py:
TestCommandInjection: v2.28.0
TestCommandInjection_ExtendedLocation: missing_feature
TestCommandInjection_StackTrace: missing_feature
test_email_html_injection.py:
TestEmailHtmlInjection: v3.2.0
TestEmailHtmlInjection_ExtendedLocation: missing_feature
TestEmailHtmlInjection_StackTrace: missing_feature
test_hardcoded_passwords.py:
Test_HardcodedPasswords: missing_feature
Test_HardcodedPasswords_ExtendedLocation: missing_feature
Test_HardcodedPasswords_StackTrace: missing_feature
test_hardcoded_secrets.py:
Test_HardcodedSecrets: missing_feature
Test_HardcodedSecretsExtended: missing_feature
Test_HardcodedSecrets_ExtendedLocation: missing_feature
Test_HardcodedSecrets_StackTrace: missing_feature
test_header_injection.py:
TestHeaderInjection: v2.46.0
TestHeaderInjectionExclusionAccessControlAllow: missing_feature
TestHeaderInjectionExclusionContentEncoding: missing_feature
TestHeaderInjectionExclusionPragma: missing_feature
TestHeaderInjectionExclusionTransferEncoding: missing_feature
TestHeaderInjection_ExtendedLocation: missing_feature
TestHeaderInjection_StackTrace: missing_feature
test_hsts_missing_header.py:
Test_HstsMissingHeader: v2.44.0
Test_HstsMissingHeader_ExtendedLocation: missing_feature
Test_HstsMissingHeader_StackTrace: missing_feature
test_insecure_auth_protocol.py:
Test_InsecureAuthProtocol: v2.49.0
Test_InsecureAuthProtocol_ExtendedLocation: missing_feature
Test_InsecureAuthProtocol_StackTrace: missing_feature
test_insecure_cookie.py:
TestInsecureCookie: v2.39.0
TestInsecureCookieNameFilter: missing_feature
TestInsecureCookie_ExtendedLocation: missing_feature
TestInsecureCookie_StackTrace: missing_feature
test_ldap_injection.py:
TestLDAPInjection: v2.36.0
TestLDAPInjection_ExtendedLocation: missing_feature
TestLDAPInjection_StackTrace: missing_feature
test_no_httponly_cookie.py:
TestNoHttponlyCookie: v2.39.0
TestNoHttponlyCookieNameFilter: missing_feature
TestNoHttponlyCookie_ExtendedLocation: missing_feature
TestNoHttponlyCookie_StackTrace: missing_feature
test_no_samesite_cookie.py:
TestNoSamesiteCookie: v2.39.0
TestNoSamesiteCookieNameFilter: missing_feature
TestNoSamesiteCookie_ExtendedLocation: missing_feature
TestNoSamesiteCookie_StackTrace: missing_feature
test_nosql_mongodb_injection.py:
TestNoSqlMongodbInjection: v2.47.0
TestNoSqlMongodbInjection_ExtendedLocation: missing_feature
TestNoSqlMongodbInjection_StackTrace: missing_feature
test_path_traversal.py:
TestPathTraversal: v2.31.0
TestPathTraversal_ExtendedLocation: missing_feature
TestPathTraversal_StackTrace: missing_feature
test_reflection_injection.py:
TestReflectionInjection: v2.48.0
TestReflectionInjection_ExtendedLocation: missing_feature
TestReflectionInjection_StackTrace: missing_feature
test_sql_injection.py:
TestSqlInjection:
'*': v2.23.0
'*': v2.23.0
TestSqlInjection_ExtendedLocation: missing_feature
TestSqlInjection_StackTrace: missing_feature
test_ssrf.py:
TestSSRF: v2.36.0
TestSSRF_ExtendedLocation: missing_feature
TestSSRF_StackTrace: missing_feature
test_template_injection.py:
TestTemplateInjection: missing_feature
TestTemplateInjection_ExtendedLocation: missing_feature
test_trust_boundary_violation.py:
Test_TrustBoundaryViolation: v2.43.0
Test_TrustBoundaryViolation_ExtendedLocation: missing_feature
Test_TrustBoundaryViolation_StackTrace: missing_feature
test_untrusted_deserialization.py:
TestUntrustedDeserialization: missing_feature
TestUntrustedDeserialization_ExtendedLocation: missing_feature
TestUntrustedDeserialization_StackTrace: missing_feature
test_unvalidated_redirect.py:
TestUnvalidatedHeader: v2.44.0
TestUnvalidatedHeader_ExtendedLocation: missing_feature
TestUnvalidatedHeader_StackTrace: missing_feature
TestUnvalidatedRedirect: v2.44.0
TestUnvalidatedRedirect_ExtendedLocation: missing_feature
TestUnvalidatedRedirect_StackTrace: missing_feature
test_unvalidated_redirect_forward.py:
TestUnvalidatedForward: missing_feature
TestUnvalidatedForward_ExtendedLocation: missing_feature
TestUnvalidatedForward_StackTrace: missing_feature
test_weak_cipher.py:
TestWeakCipher: v2.24.0
TestWeakCipher_ExtendedLocation: missing_feature
TestWeakCipher_StackTrace: missing_feature
test_weak_hash.py:
TestDeduplication: v2.24.0
TestWeakHash: v2.24.0
TestWeakHash_ExtendedLocation: missing_feature
TestWeakHash_StackTrace: missing_feature
test_weak_randomness.py:
TestWeakRandomness: v2.39.0
TestWeakRandomness_ExtendedLocation: missing_feature
TestWeakRandomness_StackTrace: missing_feature
test_xcontent_sniffing.py:
Test_XContentSniffing: missing_feature
Test_XContentSniffing_ExtendedLocation: missing_feature
Test_XContentSniffing_StackTrace: missing_feature
test_xpath_injection.py:
TestXPathInjection: v2.47.0
TestXPathInjection_ExtendedLocation: missing_feature
TestXPathInjection_StackTrace: missing_feature
test_xss.py:
TestXSS: missing_feature
TestXSS_ExtendedLocation: missing_feature
TestXSS_StackTrace: missing_feature
source/:
test_body.py:
Expand Down
29 changes: 29 additions & 0 deletions manifests/golang.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -42,98 +42,127 @@ tests/:
sink/:
test_code_injection.py:
TestCodeInjection: missing_feature
TestCodeInjection_ExtendedLocation: missing_feature
TestCodeInjection_StackTrace: missing_feature
test_command_injection.py:
TestCommandInjection: missing_feature
TestCommandInjection_ExtendedLocation: missing_feature
TestCommandInjection_StackTrace: missing_feature
test_email_html_injection.py:
TestEmailHtmlInjection: missing_feature
TestEmailHtmlInjection_ExtendedLocation: missing_feature
TestEmailHtmlInjection_StackTrace: missing_feature
test_hardcoded_passwords.py:
Test_HardcodedPasswords: missing_feature
Test_HardcodedPasswords_ExtendedLocation: missing_feature
Test_HardcodedPasswords_StackTrace: missing_feature
test_hardcoded_secrets.py:
Test_HardcodedSecrets: missing_feature
Test_HardcodedSecretsExtended: missing_feature
Test_HardcodedSecrets_ExtendedLocation: missing_feature
Test_HardcodedSecrets_StackTrace: missing_feature
test_header_injection.py:
TestHeaderInjection: missing_feature
TestHeaderInjectionExclusionAccessControlAllow: missing_feature
TestHeaderInjectionExclusionContentEncoding: missing_feature
TestHeaderInjectionExclusionPragma: missing_feature
TestHeaderInjectionExclusionTransferEncoding: missing_feature
TestHeaderInjection_ExtendedLocation: missing_feature
TestHeaderInjection_StackTrace: missing_feature
test_hsts_missing_header.py:
Test_HstsMissingHeader: missing_feature
Test_HstsMissingHeader_ExtendedLocation: missing_feature
Test_HstsMissingHeader_StackTrace: missing_feature
test_insecure_auth_protocol.py:
Test_InsecureAuthProtocol: missing_feature
Test_InsecureAuthProtocol_ExtendedLocation: missing_feature
Test_InsecureAuthProtocol_StackTrace: missing_feature
test_insecure_cookie.py:
TestInsecureCookie: missing_feature
TestInsecureCookieNameFilter: missing_feature
TestInsecureCookie_ExtendedLocation: missing_feature
TestInsecureCookie_StackTrace: missing_feature
test_ldap_injection.py:
TestLDAPInjection: missing_feature
TestLDAPInjection_ExtendedLocation: missing_feature
TestLDAPInjection_StackTrace: missing_feature
test_no_httponly_cookie.py:
TestNoHttponlyCookie: missing_feature
TestNoHttponlyCookieNameFilter: missing_feature
TestNoHttponlyCookie_ExtendedLocation: missing_feature
TestNoHttponlyCookie_StackTrace: missing_feature
test_no_samesite_cookie.py:
TestNoSamesiteCookie: missing_feature
TestNoSamesiteCookieNameFilter: missing_feature
TestNoSamesiteCookie_ExtendedLocation: missing_feature
TestNoSamesiteCookie_StackTrace: missing_feature
test_nosql_mongodb_injection.py:
TestNoSqlMongodbInjection: missing_feature
TestNoSqlMongodbInjection_ExtendedLocation: missing_feature
TestNoSqlMongodbInjection_StackTrace: missing_feature
test_path_traversal.py:
TestPathTraversal: missing_feature
TestPathTraversal_ExtendedLocation: missing_feature
TestPathTraversal_StackTrace: missing_feature
test_reflection_injection.py:
TestReflectionInjection: missing_feature
TestReflectionInjection_ExtendedLocation: missing_feature
TestReflectionInjection_StackTrace: missing_feature
test_sql_injection.py:
TestSqlInjection: missing_feature
TestSqlInjection_ExtendedLocation: missing_feature
TestSqlInjection_StackTrace: missing_feature
test_ssrf.py:
TestSSRF: missing_feature
TestSSRF_ExtendedLocation: missing_feature
TestSSRF_StackTrace: missing_feature
test_template_injection.py:
TestTemplateInjection: missing_feature
TestTemplateInjection_ExtendedLocation: missing_feature
test_trust_boundary_violation.py:
Test_TrustBoundaryViolation: missing_feature
Test_TrustBoundaryViolation_ExtendedLocation: missing_feature
Test_TrustBoundaryViolation_StackTrace: missing_feature
test_untrusted_deserialization.py:
TestUntrustedDeserialization: missing_feature
TestUntrustedDeserialization_ExtendedLocation: missing_feature
TestUntrustedDeserialization_StackTrace: missing_feature
test_unvalidated_redirect.py:
TestUnvalidatedHeader: missing_feature
TestUnvalidatedHeader_ExtendedLocation: missing_feature
TestUnvalidatedHeader_StackTrace: missing_feature
TestUnvalidatedRedirect: missing_feature
TestUnvalidatedRedirect_ExtendedLocation: missing_feature
TestUnvalidatedRedirect_StackTrace: missing_feature
test_unvalidated_redirect_forward.py:
TestUnvalidatedForward: missing_feature
TestUnvalidatedForward_ExtendedLocation: missing_feature
TestUnvalidatedForward_StackTrace: missing_feature
test_weak_cipher.py:
TestWeakCipher: missing_feature
TestWeakCipher_ExtendedLocation: missing_feature
TestWeakCipher_StackTrace: missing_feature
test_weak_hash.py:
TestDeduplication: missing_feature
TestWeakHash: missing_feature
TestWeakHash_ExtendedLocation: missing_feature
TestWeakHash_StackTrace: missing_feature
test_weak_randomness.py:
TestWeakRandomness: missing_feature
TestWeakRandomness_ExtendedLocation: missing_feature
TestWeakRandomness_StackTrace: missing_feature
test_xcontent_sniffing.py:
Test_XContentSniffing: missing_feature
Test_XContentSniffing_ExtendedLocation: missing_feature
Test_XContentSniffing_StackTrace: missing_feature
test_xpath_injection.py:
TestXPathInjection: missing_feature
TestXPathInjection_ExtendedLocation: missing_feature
TestXPathInjection_StackTrace: missing_feature
test_xss.py:
TestXSS:
'*': missing_feature
TestXSS_ExtendedLocation: missing_feature
TestXSS_StackTrace: missing_feature
source/:
test_body.py:
Expand Down
Loading
Loading