Rust: Add tests for spurious actix-web connection_info sink models

Author: johncarmack1984

rust/ql/test/query-tests/security/CWE-117/Cargo.lock

@@ -150,3 +150,23 @@ mod axum_tests {
             .route("/{a}", get(my_axum_handler_1)); // $ Source=post_handler
     }
 }
+
+mod actix_tests {
+    use actix_web::dev::{ConnectionInfo, Payload};
+    use actix_web::{web, App, FromRequest, HttpRequest};
+
+    async fn connection_info_handler(req: HttpRequest) -> &'static str {
+        // reading the connection info does not log anything
+        let _ = req.connection_info(); // $ SPURIOUS: Alert[rust/log-injection]=actix
+        let _ = req.full_url(); // $ SPURIOUS: Alert[rust/log-injection]=actix
+        let _ = req.url_for("index", ["a"]); // $ SPURIOUS: Alert[rust/log-injection]=actix
+        let _ = req.url_for_static("index"); // $ SPURIOUS: Alert[rust/log-injection]=actix
+        let _ = req.resource_map().url_for(&req, "index", ["a"]); // $ SPURIOUS: Alert[rust/log-injection]=actix
+        let _ = ConnectionInfo::from_request(&req, &mut Payload::None); // $ SPURIOUS: Alert[rust/log-injection]=actix
+        ""
+    }
+
+    fn test_actix() {
+        let _ = App::new().route("/", web::get().to(connection_info_handler)); // $ Source=actix
+    }
+}

rust/ql/test/query-tests/security/CWE-117/LogInjection.expected

@@ -4,3 +4,4 @@ qltest_dependencies:
     - env_logger = "0.10"
     - reqwest = { version = "0.12.9", features = ["blocking"] }
     - axum = { version = "0.8.7" }
+    - actix-web = { version = "4", default-features = false }