added cmdletbinding case to tests

Author: chanel-y

powershell/ql/test/query-tests/security/cwe-078/CommandInjection/CommandInjectionCritical.expected

@@ -0,0 +1 @@
+queries/security/cwe-078/CommandInjectionCritical.ql

powershell/ql/test/query-tests/security/cwe-078/CommandInjection/CommandInjectionCritical.qlref

@@ -147,6 +147,12 @@ function Invoke-ExpandStringInjection2
     $executionContext.SessionState.InvokeCommand.ExpandString($UserInput) # BAD
 }
 
+function Invoke-InvokeExpressionInjectionCmdletBinding
+{
+    [CmdletBinding()]
+    param($UserInput)
+    Invoke-Expression "Get-Process -Name $UserInput" # BAD
+}
 
 
 $input = Read-Host "enter input"
@@ -171,6 +177,7 @@ Invoke-MethodInjection3 -UserInput $input
 Invoke-PropertyInjection -UserInput $input  
 Invoke-ExpandStringInjection1 -UserInput $input  
 Invoke-ExpandStringInjection2 -UserInput $input
+Invoke-InvokeExpressionInjectionCmdletBinding -userInput $input
 
 #typed input
 function Invoke-InvokeExpressionInjectionSafe1