JS: use test-local data extensions

Author: asgerf

javascript/ql/test/library-tests/DataExtensions/Test.expected

@@ -0,0 +1,2 @@
+| connection.example.ts:4:20:4:20 | q |
+| connection.example.ts:9:18:9:18 | q |

javascript/ql/test/library-tests/DataExtensions/Test.ql

@@ -0,0 +1,4 @@
+import javascript
+private import semmle.javascript.security.dataflow.SqlInjectionCustomizations
+
+query predicate sqlInjectionSinks(DataFlow::Node node) { node instanceof SqlInjection::Sink }

javascript/ql/test/library-tests/DataExtensions/connection.expected

@@ -0,0 +1 @@
+| execa.example.js:2:7:2:9 | cmd |

javascript/ql/test/library-tests/DataExtensions/connection.model.yml renamed to javascript/ql/test/library-tests/DataExtensions/connection.ext.yml

@@ -0,0 +1,6 @@
+extensions:
+  - addsTo:
+      pack: codeql/javascript-all
+      extensible: sinkModel
+    data:
+      - ["@example/execa", "Member[shell].Argument[0]", "command-injection"]

javascript/ql/test/library-tests/DataExtensions/connection.ql

@@ -0,0 +1,6 @@
+import javascript
+private import semmle.javascript.security.dataflow.CommandInjectionCustomizations
+
+query predicate commandInjectionSinks(DataFlow::Node node) {
+  node instanceof CommandInjection::Sink
+}

javascript/ql/test/library-tests/DataExtensions/execa.expected

@@ -0,0 +1,2 @@
+| message.example.js:1:46:1:50 | event |
+| message.example.js:2:16:2:25 | event.data |