ast-grep-essentials/tests/csharp/sqlconnectionstringbuilder-hardcoded-secret-csharp-test.yml at main · coderabbitai/ast-grep-essentials · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
id: sqlconnectionstringbuilder-hardcoded-secret-csharp
valid:
  - |
    builder.Password = args[1];
invalid:
  - |
    private SqlConnectionStringBuilder GetConnection(args)
    {
      SqlConnectionStringBuilder builder = new SqlConnectionStringBuilder();
      builder.Password = "reee!";
    }
  - |
    private SqlConnectionStringBuilder GetConnection(args)
    {
      SqlConnectionStringBuilder builder = new SqlConnectionStringBuilder();
      builder["Password"] = "reee!";
    }
  - |
    private SqlConnectionStringBuilder GetConnection(args)
    {
      string password = "aaaa";
      var cb = new SqlConnectionStringBuilder();
      cb["Password"] = password;
    }
  - |
    private SqlConnectionStringBuilder GetConnection(args)
    {
      var cb = new SqlConnectionStringBuilder();
      cb.Password = "reee!";
    }