update tests for password patterns

Author: esbena

javascript/ql/test/library-tests/SensitiveActions/tests.expected

@@ -12,10 +12,11 @@ cleartextPasswordExpr
 dummyPasswords
 |  | true |
 | XXXXXXXX | true |
-| abcdefgh | false |
+| abcdefgh | true |
 | admin | true |
 | change_me | true |
 | example_password | true |
+| hgfedcba | false |
 | insert-auth-from-gui | true |
 | root | true |
 | sOKY6ccizpmvF*32so%Q | false |

javascript/ql/test/library-tests/SensitiveActions/tests.ql

@@ -6,8 +6,8 @@ query predicate cleartextPasswordExpr(CleartextPasswordExpr e) { any() }
 string getASamplePassword() {
   result =
     [
-      "abcdefgh", "sOKY6ccizpmvF*32so%Q", "XXXXXXXX", "example_password", "change_me", "",
-      "insert-auth-from-gui", "admin", "root"
+      "hgfedcba", "abcdefgh", "sOKY6ccizpmvF*32so%Q", "XXXXXXXX", "example_password", "change_me",
+      "", "insert-auth-from-gui", "admin", "root"
     ]
 }
 

javascript/ql/test/query-tests/Security/CWE-313/PasswordInConfigurationFile.expected

@@ -1,3 +1,3 @@
-| mysql-config.json:4:16:4:25 | "abcdefgh" | Hard-coded password 'abcdefgh' in configuration file. |
+| mysql-config.json:4:16:4:25 | "hgfedcba" | Hard-coded password 'hgfedcba' in configuration file. |
 | tst4.json:2:10:2:38 | "script ... ecret'" | Hard-coded password ''secret'' in configuration file. |
 | tst7.yml:2:9:2:6 | \| | Hard-coded password 'abc' in configuration file. |

javascript/ql/test/query-tests/Security/CWE-313/mysql-config.json

@@ -1,6 +1,6 @@
 {
   "host"     : "localhost",
   "user"     : "me",
-  "password" : "abcdefgh",
+  "password" : "hgfedcba",
   "database" : "my_db"
 }