Fix test

Author: ggolawski

java/ql/test/experimental/query-tests/security/CWE-074/XsltInjection.expected

@@ -15,6 +15,7 @@
 import javax.xml.transform.stream.StreamResult;
 import javax.xml.transform.stream.StreamSource;
 
+import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RequestParam;
 import org.xml.sax.InputSource;
 
@@ -33,6 +34,7 @@ public void testStreamSourceReader(Socket socket) throws Exception {
     TransformerFactory.newInstance().newTemplates(source).newTransformer().transform(null, null);
   }
 
+  @RequestMapping
   public void testStreamSourceInjectedParam(@RequestParam String param) throws Exception {
     String xslt = "<xsl:stylesheet [...]" + param + "</xsl:stylesheet>";
     StreamSource source = new StreamSource(new StringReader(xslt));
@@ -95,6 +97,7 @@ public void testSaxon(Socket socket) throws Exception {
     compiler.compile(source).load30().callTemplate(null, null);
   }
 
+  @RequestMapping
   public void testSaxonXsltPackage(@RequestParam String param, Socket socket) throws Exception {
     URI uri = new URI(param);
     StreamSource source = new StreamSource(socket.getInputStream());

java/ql/test/experimental/query-tests/security/CWE-074/XsltInjection.java

@@ -1 +1 @@
-//semmle-extractor-options: --javac-args -cp ${testdir}/../../../stubs/springframework-5.2.3:${testdir}/../../../stubs/Saxon-HE-9.9.1-7
+//semmle-extractor-options: --javac-args -cp ${testdir}/../../../../stubs/springframework-5.2.3:${testdir}/../../../stubs/Saxon-HE-9.9.1-7

java/ql/test/experimental/query-tests/security/CWE-074/options

@@ -0,0 +1,7 @@
+package org.springframework.web.bind.annotation;
+
+import java.lang.annotation.*;
+
+@Target({ElementType.ANNOTATION_TYPE})
+@Retention(RetentionPolicy.RUNTIME)
+public @interface Mapping { }

java/ql/test/experimental/stubs/springframework-5.2.3/org/springframework/web/bind/annotation/RequestParam.java

@@ -0,0 +1,9 @@
+package org.springframework.web.bind.annotation;
+
+import java.lang.annotation.*;
+
+@Target({ElementType.TYPE, ElementType.METHOD})
+@Retention(RetentionPolicy.RUNTIME)
+@Documented
+@Mapping
+public @interface RequestMapping { }