[xcode27.0] [tests] Misc CodeQL fixes/ignores. (#26526)

Backport of #26506.

---------

Co-authored-by: Rolf Bjarne Kvinge <rokvin@microsoft.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

Author: rolfbjarne

tests/linker/link sdk/CryptoTest.cs

@@ -105,7 +105,7 @@ public void TLS1_ServerNameExtension ()
 					sne_validation_callback++;
 					return true;
 				};
-				ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls;
+				ServicePointManager.SecurityProtocol = SecurityProtocolType.Tls; // CodeQL [SM02212] this test is testing Tls1, so this is expected.
 				WebClient wc = new WebClient ();
 				Assert.That (wc.DownloadString (NetworkResources.StatsUrl), Is.Not.Null);
 			} catch (WebException we) {

tests/monotouch-test/System.Net.Http/HttpbinTestServer.cs

@@ -60,7 +60,7 @@ static string Start ()
 								try {
 									context.Response.StatusCode = 500;
 									var body = Encoding.UTF8.GetBytes (ex.ToString ());
-									context.Response.OutputStream.Write (body, 0, body.Length);
+									context.Response.OutputStream.Write (body, 0, body.Length); // CodeQL [SM00430] This is a test server that only listens on localhost.
 								} catch {
 									// nothing we can do
 								}

tests/xharness/Jenkins/TestServer.cs

@@ -50,7 +50,7 @@ public Task RunAsync (Jenkins jenkins, HtmlReportWriter htmlReportWriter)
 				var newPort = port != 0 ? port : r.Next (49152, 65535); // The suggested range for dynamic ports is 49152-65535 (IANA)
 				server = new HttpListener ();
 				server.Prefixes.Clear ();
-				server.Prefixes.Add ("http://*:" + newPort + "/");
+				server.Prefixes.Add ("http://localhost:" + newPort + "/");
 				try {
 					server.Start ();
 					port = newPort;
@@ -339,9 +339,9 @@ IEnumerable<TestTask> find_tasks (StreamWriter writer, string ids)
 								}
 							}
 							var path = serveFile;
-							if (File.Exists (path)) {
+							if (File.Exists (path)) { // CodeQL [SM00414] This is an http server only used during testing, and it also only listens on localhost
 								var buffer = new byte [4096];
-								using (var fs = new FileStream (path, FileMode.Open, FileAccess.Read, FileShare.ReadWrite)) {
+								using (var fs = new FileStream (path, FileMode.Open, FileAccess.Read, FileShare.ReadWrite)) { // CodeQL [SM00414] This is an http server only used during testing, and it also only listens on localhost
 									int read;
 									response.ContentLength64 = fs.Length;
 									switch (Path.GetExtension (path).ToLowerInvariant ()) {
@@ -362,7 +362,7 @@ IEnumerable<TestTask> find_tasks (StreamWriter writer, string ids)
 										break;
 									}
 									while ((read = fs.Read (buffer, 0, buffer.Length)) > 0)
-										response.OutputStream.Write (buffer, 0, read);
+										response.OutputStream.Write (buffer, 0, read); // CodeQL [SM00430] This is an http server only used during testing, and it also only listens on localhost
 								}
 							} else {
 								Console.WriteLine ($"404: {localPath}");