add some test cases for checking against spurious flow into ERB templates

alexrford · alexrford · commit 48f3d48a11a4 · 2021-10-12T10:37:22.000+01:00
diff --git a/ql/test/query-tests/security/cwe-079/app/views/foo/bars/show_unused.html.erb b/ql/test/query-tests/security/cwe-079/app/views/foo/bars/show_unused.html.erb
@@ -0,0 +1,5 @@
+<%# This file is not rendered. There should be no flow into it. %>
+
+<%= display_text.html_safe %>
+<%= local_assigns[:display_text].html_safe %>
+<%= @instance_text.html_safe %>
diff --git a/ql/test/query-tests/security/cwe-079/app/views/foo/stores/show_unused.html.erb b/ql/test/query-tests/security/cwe-079/app/views/foo/stores/show_unused.html.erb
@@ -0,0 +1,5 @@
+<%# This file is not rendered. There should be no flow into it. %>
+
+<%= display_text.html_safe %>
+<%= local_assigns[:display_text].html_safe %>
+<%= @instance_text.html_safe %>
