Add additional test case for httponly cookies set to true

Author: joefarebrother

…SystemWeb/CookieWithoutHttpOnly.expected …kiesFalse/CookieWithoutHttpOnly.expectedcsharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/CookieWithoutHttpOnly.expected renamed to csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/HttpOnlyCookiesFalse/CookieWithoutHttpOnly.expected csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/CookieWithoutHttpOnly.expected renamed to csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/HttpOnlyCookiesFalse/CookieWithoutHttpOnly.expected

@@ -0,0 +1,2 @@
+query: Security Features/CWE-1004/CookieWithoutHttpOnly.ql
+postprocess: utils/test/InlineExpectationsTestQuery.ql

…ie/SystemWeb/CookieWithoutHttpOnly.qlref …CookiesFalse/CookieWithoutHttpOnly.qlrefcsharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/CookieWithoutHttpOnly.qlref renamed to csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/HttpOnlyCookiesFalse/CookieWithoutHttpOnly.qlref csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/CookieWithoutHttpOnly.qlref renamed to csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/HttpOnlyCookiesFalse/CookieWithoutHttpOnly.qlref

@@ -0,0 +1,7 @@
+class Program
+{
+    void CookieDefault()
+    {
+        var cookie = new System.Web.HttpCookie("auth"); // GOOD: httpOnlyCookies is set to true in config
+    }
+}

…1004/HttpOnlyCookie/SystemWeb/Program.cs …ystemWeb/HttpOnlyCookiesFalse/Program.cscsharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/Program.cs renamed to csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/HttpOnlyCookiesFalse/Program.cs csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/Program.cs renamed to csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/HttpOnlyCookiesFalse/Program.cs

@@ -0,0 +1,6 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<configuration>
+  <system.web>
+    <httpCookies httpOnlyCookies="true"/>
+  </system.web>
+</configuration>

…1004/HttpOnlyCookie/SystemWeb/Web.config …ystemWeb/HttpOnlyCookiesFalse/Web.configcsharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/Web.config renamed to csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/HttpOnlyCookiesFalse/Web.config csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/Web.config renamed to csharp/ql/test/query-tests/Security Features/CWE-1004/HttpOnlyCookie/SystemWeb/HttpOnlyCookiesFalse/Web.config

@@ -1,3 +1,3 @@
 semmle-extractor-options: /nostdlib /noconfig
-semmle-extractor-options: --load-sources-from-project:${testdir}/../../../../../resources/stubs/_frameworks/Microsoft.NETCore.App/Microsoft.NETCore.App.csproj
-semmle-extractor-options: ${testdir}/../../../../../resources/stubs/System.Web.cs
+semmle-extractor-options: --load-sources-from-project:${testdir}/../../../../../../resources/stubs/_frameworks/Microsoft.NETCore.App/Microsoft.NETCore.App.csproj
+semmle-extractor-options: ${testdir}/../../../../../../resources/stubs/System.Web.cs