hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-17 01:03:14 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add changed framework coverage reports

Browse Source
This commit is contained in:
github-actions[bot]
2022-02-03 00:10:33 +00:00
parent 6acf49d4da
commit 2a9f98cce0
2 changed files with 114 additions and 113 deletions
Download Patch File Download Diff File Expand all files Collapse all files

223
java/documentation/library-coverage/coverage.csv
View File

@@ -1,111 +1,112 @@
package,sink,source,summary,sink:bean-validation,sink:create-file,sink:groovy,sink:header-splitting,sink:information-leak,sink:intent-start,sink:jexl,sink:jndi-injection,sink:ldap,sink:logging,sink:mvel,sink:ognl-injection,sink:open-url,sink:pending-intent-sent,sink:set-hostname-verifier,sink:sql,sink:url-open-stream,sink:url-redirect,sink:write-file,sink:xpath,sink:xslt,sink:xss,source:contentprovider,source:remote,summary:taint,summary:value
android.app,16,,103,,,,,,7,,,,,,,,9,,,,,,,,,,,18,85
android.content,24,27,96,,,,,,16,,,,,,,,,,8,,,,,,,27,,31,65
android.database,59,,30,,,,,,,,,,,,,,,,59,,,,,,,,,30,
android.net,,,60,,,,,,,,,,,,,,,,,,,,,,,,,45,15
android.os,,,122,,,,,,,,,,,,,,,,,,,,,,,,,41,81
android.util,6,16,,,,,,,,,,,6,,,,,,,,,,,,,,16,,
android.webkit,3,2,,,,,,,,,,,,,,,,,,,,,,,3,,2,,
androidx.slice,2,5,88,,,,,,,,,,,,,,2,,,,,,,,,5,,27,61
cn.hutool.core.codec,,,1,,,,,,,,,,,,,,,,,,,,,,,,,1,
com.esotericsoftware.kryo.io,,,1,,,,,,,,,,,,,,,,,,,,,,,,,1,
com.esotericsoftware.kryo5.io,,,1,,,,,,,,,,,,,,,,,,,,,,,,,1,
com.fasterxml.jackson.core,,,1,,,,,,,,,,,,,,,,,,,,,,,,,1,
com.fasterxml.jackson.databind,,,6,,,,,,,,,,,,,,,,,,,,,,,,,6,
com.google.common.base,,,85,,,,,,,,,,,,,,,,,,,,,,,,,62,23
com.google.common.cache,,,17,,,,,,,,,,,,,,,,,,,,,,,,,,17
com.google.common.collect,,,553,,,,,,,,,,,,,,,,,,,,,,,,,2,551
com.google.common.flogger,29,,,,,,,,,,,,29,,,,,,,,,,,,,,,,
com.google.common.io,6,,73,,,,,,,,,,,,,,,,,6,,,,,,,,72,1
com.opensymphony.xwork2.ognl,3,,,,,,,,,,,,,,3,,,,,,,,,,,,,,
com.unboundid.ldap.sdk,17,,,,,,,,,,,17,,,,,,,,,,,,,,,,,
flexjson,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,1
groovy.lang,26,,,,,26,,,,,,,,,,,,,,,,,,,,,,,
groovy.util,5,,,,,5,,,,,,,,,,,,,,,,,,,,,,,
jakarta.faces.context,2,7,,,,,,,,,,,,,,,,,,,,,,,2,,7,,
jakarta.json,,,123,,,,,,,,,,,,,,,,,,,,,,,,,100,23
jakarta.ws.rs.client,1,,,,,,,,,,,,,,,1,,,,,,,,,,,,,
jakarta.ws.rs.container,,9,,,,,,,,,,,,,,,,,,,,,,,,,9,,
jakarta.ws.rs.core,2,,149,,,,,,,,,,,,,,,,,,2,,,,,,,94,55
java.beans,,,1,,,,,,,,,,,,,,,,,,,,,,,,,1,
java.io,37,,31,,15,,,,,,,,,,,,,,,,,22,,,,,,31,
java.lang,8,,58,,,,,,,,,,8,,,,,,,,,,,,,,,46,12
java.net,10,3,7,,,,,,,,,,,,,10,,,,,,,,,,,3,7,
java.nio,15,,6,,13,,,,,,,,,,,,,,,,,2,,,,,,6,
java.sql,7,,,,,,,,,,,,,,,,,,7,,,,,,,,,,
java.util,34,,438,,,,,,,,,,34,,,,,,,,,,,,,,,24,414
javax.faces.context,2,7,,,,,,,,,,,,,,,,,,,,,,,2,,7,,
javax.json,,,123,,,,,,,,,,,,,,,,,,,,,,,,,100,23
javax.management.remote,2,,,,,,,,,,2,,,,,,,,,,,,,,,,,,
javax.naming,7,,,,,,,,,,6,1,,,,,,,,,,,,,,,,,
javax.net.ssl,2,,,,,,,,,,,,,,,,,2,,,,,,,,,,,
javax.script,1,,,,,,,,,,,,,1,,,,,,,,,,,,,,,
javax.servlet,4,21,2,,,,3,1,,,,,,,,,,,,,,,,,,,21,2,
javax.validation,1,1,,1,,,,,,,,,,,,,,,,,,,,,,,1,,
javax.ws.rs.client,1,,,,,,,,,,,,,,,1,,,,,,,,,,,,,
javax.ws.rs.container,,9,,,,,,,,,,,,,,,,,,,,,,,,,9,,
javax.ws.rs.core,3,,149,,,,1,,,,,,,,,,,,,,2,,,,,,,94,55
javax.xml.transform,1,,6,,,,,,,,,,,,,,,,,,,,,1,,,,6,
javax.xml.xpath,3,,,,,,,,,,,,,,,,,,,,,,3,,,,,,
jodd.json,,,10,,,,,,,,,,,,,,,,,,,,,,,,,,10
net.sf.saxon.s9api,5,,,,,,,,,,,,,,,,,,,,,,,5,,,,,
ognl,6,,,,,,,,,,,,,,6,,,,,,,,,,,,,,
org.apache.commons.codec,,,6,,,,,,,,,,,,,,,,,,,,,,,,,6,
org.apache.commons.collections,,,800,,,,,,,,,,,,,,,,,,,,,,,,,17,783
org.apache.commons.collections4,,,800,,,,,,,,,,,,,,,,,,,,,,,,,17,783
org.apache.commons.io,93,2,565,,78,,,,,,,,,,,15,,,,,,,,,,,2,551,14
org.apache.commons.jexl2,15,,,,,,,,,15,,,,,,,,,,,,,,,,,,,
org.apache.commons.jexl3,15,,,,,,,,,15,,,,,,,,,,,,,,,,,,,
org.apache.commons.lang3,,,424,,,,,,,,,,,,,,,,,,,,,,,,,293,131
org.apache.commons.logging,6,,,,,,,,,,,,6,,,,,,,,,,,,,,,,
org.apache.commons.ognl,6,,,,,,,,,,,,,,6,,,,,,,,,,,,,,
org.apache.commons.text,,,272,,,,,,,,,,,,,,,,,,,,,,,,,220,52
org.apache.directory.ldap.client.api,1,,,,,,,,,,,1,,,,,,,,,,,,,,,,,
org.apache.hc.core5.function,,,1,,,,,,,,,,,,,,,,,,,,,,,,,1,
org.apache.hc.core5.http,1,2,39,,,,,,,,,,,,,,,,,,,,,,1,,2,39,
org.apache.hc.core5.net,,,2,,,,,,,,,,,,,,,,,,,,,,,,,2,
org.apache.hc.core5.util,,,24,,,,,,,,,,,,,,,,,,,,,,,,,18,6
org.apache.http,27,3,70,,,,,,,,,,,,,25,,,,,,,,,2,,3,62,8
org.apache.ibatis.jdbc,6,,,,,,,,,,,,,,,,,,6,,,,,,,,,,
org.apache.log4j,11,,,,,,,,,,,,11,,,,,,,,,,,,,,,,
org.apache.logging.log4j,359,,8,,,,,,,,,,359,,,,,,,,,,,,,,,4,4
org.apache.shiro.codec,,,1,,,,,,,,,,,,,,,,,,,,,,,,,1,
org.apache.shiro.jndi,1,,,,,,,,,,1,,,,,,,,,,,,,,,,,,
org.codehaus.groovy.control,1,,,,,1,,,,,,,,,,,,,,,,,,,,,,,
org.dom4j,20,,,,,,,,,,,,,,,,,,,,,,20,,,,,,
org.hibernate,7,,,,,,,,,,,,,,,,,,7,,,,,,,,,,
org.jboss.logging,324,,,,,,,,,,,,324,,,,,,,,,,,,,,,,
org.jooq,1,,,,,,,,,,,,,,,,,,1,,,,,,,,,,
org.json,,,236,,,,,,,,,,,,,,,,,,,,,,,,,198,38
org.mvel2,16,,,,,,,,,,,,,16,,,,,,,,,,,,,,,
org.scijava.log,13,,,,,,,,,,,,13,,,,,,,,,,,,,,,,
org.slf4j,55,,6,,,,,,,,,,55,,,,,,,,,,,,,,,2,4
org.springframework.beans,,,26,,,,,,,,,,,,,,,,,,,,,,,,,,26
org.springframework.cache,,,13,,,,,,,,,,,,,,,,,,,,,,,,,,13
org.springframework.context,,,3,,,,,,,,,,,,,,,,,,,,,,,,,3,
org.springframework.http,14,,70,,,,,,,,,,,,,14,,,,,,,,,,,,60,10
org.springframework.jdbc.core,10,,,,,,,,,,,,,,,,,,10,,,,,,,,,,
org.springframework.jdbc.object,9,,,,,,,,,,,,,,,,,,9,,,,,,,,,,
org.springframework.jndi,1,,,,,,,,,,1,,,,,,,,,,,,,,,,,,
org.springframework.ldap,47,,,,,,,,,,33,14,,,,,,,,,,,,,,,,,
org.springframework.security.web.savedrequest,,6,,,,,,,,,,,,,,,,,,,,,,,,,6,,
org.springframework.ui,,,32,,,,,,,,,,,,,,,,,,,,,,,,,,32
org.springframework.util,,,139,,,,,,,,,,,,,,,,,,,,,,,,,87,52
org.springframework.validation,,,13,,,,,,,,,,,,,,,,,,,,,,,,,13,
org.springframework.web.client,13,3,,,,,,,,,,,,,,13,,,,,,,,,,,3,,
org.springframework.web.context.request,,8,,,,,,,,,,,,,,,,,,,,,,,,,8,,
org.springframework.web.multipart,,12,13,,,,,,,,,,,,,,,,,,,,,,,,12,13,
org.springframework.web.reactive.function.client,2,,,,,,,,,,,,,,,2,,,,,,,,,,,,,
org.springframework.web.util,,,163,,,,,,,,,,,,,,,,,,,,,,,,,138,25
org.xml.sax,,,1,,,,,,,,,,,,,,,,,,,,,,,,,1,
org.xmlpull.v1,,3,,,,,,,,,,,,,,,,,,,,,,,,,3,,
play.mvc,,4,,,,,,,,,,,,,,,,,,,,,,,,,4,,
ratpack.core.form,,,3,,,,,,,,,,,,,,,,,,,,,,,,,3,
ratpack.core.handling,,6,4,,,,,,,,,,,,,,,,,,,,,,,,6,4,
ratpack.core.http,,10,10,,,,,,,,,,,,,,,,,,,,,,,,10,10,
ratpack.exec,,,48,,,,,,,,,,,,,,,,,,,,,,,,,,48
ratpack.form,,,3,,,,,,,,,,,,,,,,,,,,,,,,,3,
ratpack.func,,,35,,,,,,,,,,,,,,,,,,,,,,,,,,35
ratpack.handling,,6,4,,,,,,,,,,,,,,,,,,,,,,,,6,4,
ratpack.http,,10,10,,,,,,,,,,,,,,,,,,,,,,,,10,10,
ratpack.util,,,35,,,,,,,,,,,,,,,,,,,,,,,,,,35
package,sink,source,summary,sink:bean-validation,sink:create-file,sink:groovy,sink:header-splitting,sink:information-leak,sink:intent-start,sink:jexl,sink:jndi-injection,sink:ldap,sink:logging,sink:mvel,sink:ognl-injection,sink:open-url,sink:pending-intent-sent,sink:set-hostname-verifier,sink:sql,sink:url-open-stream,sink:url-redirect,sink:write-file,sink:xpath,sink:xslt,sink:xss,source:android-widget,source:contentprovider,source:remote,summary:taint,summary:value
android.app,16,,103,,,,,,7,,,,,,,,9,,,,,,,,,,,,18,85
android.content,24,27,100,,,,,,16,,,,,,,,,,8,,,,,,,,27,,31,69
android.database,59,,30,,,,,,,,,,,,,,,,59,,,,,,,,,,30,
android.net,,,60,,,,,,,,,,,,,,,,,,,,,,,,,,45,15
android.os,,,122,,,,,,,,,,,,,,,,,,,,,,,,,,41,81
android.util,6,16,,,,,,,,,,,6,,,,,,,,,,,,,,,16,,
android.webkit,3,2,,,,,,,,,,,,,,,,,,,,,,,3,,,2,,
android.widget,,1,1,,,,,,,,,,,,,,,,,,,,,,,1,,,1,
androidx.slice,2,5,88,,,,,,,,,,,,,,2,,,,,,,,,,5,,27,61
cn.hutool.core.codec,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,1,
com.esotericsoftware.kryo.io,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,1,
com.esotericsoftware.kryo5.io,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,1,
com.fasterxml.jackson.core,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,1,
com.fasterxml.jackson.databind,,,6,,,,,,,,,,,,,,,,,,,,,,,,,,6,
com.google.common.base,,,85,,,,,,,,,,,,,,,,,,,,,,,,,,62,23
com.google.common.cache,,,17,,,,,,,,,,,,,,,,,,,,,,,,,,,17
com.google.common.collect,,,553,,,,,,,,,,,,,,,,,,,,,,,,,,2,551
com.google.common.flogger,29,,,,,,,,,,,,29,,,,,,,,,,,,,,,,,
com.google.common.io,6,,73,,,,,,,,,,,,,,,,,6,,,,,,,,,72,1
com.opensymphony.xwork2.ognl,3,,,,,,,,,,,,,,3,,,,,,,,,,,,,,,
com.unboundid.ldap.sdk,17,,,,,,,,,,,17,,,,,,,,,,,,,,,,,,
flexjson,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,,1
groovy.lang,26,,,,,26,,,,,,,,,,,,,,,,,,,,,,,,
groovy.util,5,,,,,5,,,,,,,,,,,,,,,,,,,,,,,,
jakarta.faces.context,2,7,,,,,,,,,,,,,,,,,,,,,,,2,,,7,,
jakarta.json,,,123,,,,,,,,,,,,,,,,,,,,,,,,,,100,23
jakarta.ws.rs.client,1,,,,,,,,,,,,,,,1,,,,,,,,,,,,,,
jakarta.ws.rs.container,,9,,,,,,,,,,,,,,,,,,,,,,,,,,9,,
jakarta.ws.rs.core,2,,149,,,,,,,,,,,,,,,,,,2,,,,,,,,94,55
java.beans,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,1,
java.io,37,,31,,15,,,,,,,,,,,,,,,,,22,,,,,,,31,
java.lang,8,,58,,,,,,,,,,8,,,,,,,,,,,,,,,,46,12
java.net,10,3,7,,,,,,,,,,,,,10,,,,,,,,,,,,3,7,
java.nio,15,,6,,13,,,,,,,,,,,,,,,,,2,,,,,,,6,
java.sql,7,,,,,,,,,,,,,,,,,,7,,,,,,,,,,,
java.util,34,,438,,,,,,,,,,34,,,,,,,,,,,,,,,,24,414
javax.faces.context,2,7,,,,,,,,,,,,,,,,,,,,,,,2,,,7,,
javax.json,,,123,,,,,,,,,,,,,,,,,,,,,,,,,,100,23
javax.management.remote,2,,,,,,,,,,2,,,,,,,,,,,,,,,,,,,
javax.naming,7,,,,,,,,,,6,1,,,,,,,,,,,,,,,,,,
javax.net.ssl,2,,,,,,,,,,,,,,,,,2,,,,,,,,,,,,
javax.script,1,,,,,,,,,,,,,1,,,,,,,,,,,,,,,,
javax.servlet,4,21,2,,,,3,1,,,,,,,,,,,,,,,,,,,,21,2,
javax.validation,1,1,,1,,,,,,,,,,,,,,,,,,,,,,,,1,,
javax.ws.rs.client,1,,,,,,,,,,,,,,,1,,,,,,,,,,,,,,
javax.ws.rs.container,,9,,,,,,,,,,,,,,,,,,,,,,,,,,9,,
javax.ws.rs.core,3,,149,,,,1,,,,,,,,,,,,,,2,,,,,,,,94,55
javax.xml.transform,1,,6,,,,,,,,,,,,,,,,,,,,,1,,,,,6,
javax.xml.xpath,3,,,,,,,,,,,,,,,,,,,,,,3,,,,,,,
jodd.json,,,10,,,,,,,,,,,,,,,,,,,,,,,,,,,10
net.sf.saxon.s9api,5,,,,,,,,,,,,,,,,,,,,,,,5,,,,,,
ognl,6,,,,,,,,,,,,,,6,,,,,,,,,,,,,,,
org.apache.commons.codec,,,6,,,,,,,,,,,,,,,,,,,,,,,,,,6,
org.apache.commons.collections,,,800,,,,,,,,,,,,,,,,,,,,,,,,,,17,783
org.apache.commons.collections4,,,800,,,,,,,,,,,,,,,,,,,,,,,,,,17,783
org.apache.commons.io,93,2,565,,78,,,,,,,,,,,15,,,,,,,,,,,,2,551,14
org.apache.commons.jexl2,15,,,,,,,,,15,,,,,,,,,,,,,,,,,,,,
org.apache.commons.jexl3,15,,,,,,,,,15,,,,,,,,,,,,,,,,,,,,
org.apache.commons.lang3,,,424,,,,,,,,,,,,,,,,,,,,,,,,,,293,131
org.apache.commons.logging,6,,,,,,,,,,,,6,,,,,,,,,,,,,,,,,
org.apache.commons.ognl,6,,,,,,,,,,,,,,6,,,,,,,,,,,,,,,
org.apache.commons.text,,,272,,,,,,,,,,,,,,,,,,,,,,,,,,220,52
org.apache.directory.ldap.client.api,1,,,,,,,,,,,1,,,,,,,,,,,,,,,,,,
org.apache.hc.core5.function,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,1,
org.apache.hc.core5.http,1,2,39,,,,,,,,,,,,,,,,,,,,,,1,,,2,39,
org.apache.hc.core5.net,,,2,,,,,,,,,,,,,,,,,,,,,,,,,,2,
org.apache.hc.core5.util,,,24,,,,,,,,,,,,,,,,,,,,,,,,,,18,6
org.apache.http,27,3,70,,,,,,,,,,,,,25,,,,,,,,,2,,,3,62,8
org.apache.ibatis.jdbc,6,,,,,,,,,,,,,,,,,,6,,,,,,,,,,,
org.apache.log4j,11,,,,,,,,,,,,11,,,,,,,,,,,,,,,,,
org.apache.logging.log4j,359,,8,,,,,,,,,,359,,,,,,,,,,,,,,,,4,4
org.apache.shiro.codec,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,1,
org.apache.shiro.jndi,1,,,,,,,,,,1,,,,,,,,,,,,,,,,,,,
org.codehaus.groovy.control,1,,,,,1,,,,,,,,,,,,,,,,,,,,,,,,
org.dom4j,20,,,,,,,,,,,,,,,,,,,,,,20,,,,,,,
org.hibernate,7,,,,,,,,,,,,,,,,,,7,,,,,,,,,,,
org.jboss.logging,324,,,,,,,,,,,,324,,,,,,,,,,,,,,,,,
org.jooq,1,,,,,,,,,,,,,,,,,,1,,,,,,,,,,,
org.json,,,236,,,,,,,,,,,,,,,,,,,,,,,,,,198,38
org.mvel2,16,,,,,,,,,,,,,16,,,,,,,,,,,,,,,,
org.scijava.log,13,,,,,,,,,,,,13,,,,,,,,,,,,,,,,,
org.slf4j,55,,6,,,,,,,,,,55,,,,,,,,,,,,,,,,2,4
org.springframework.beans,,,26,,,,,,,,,,,,,,,,,,,,,,,,,,,26
org.springframework.cache,,,13,,,,,,,,,,,,,,,,,,,,,,,,,,,13
org.springframework.context,,,3,,,,,,,,,,,,,,,,,,,,,,,,,,3,
org.springframework.http,14,,70,,,,,,,,,,,,,14,,,,,,,,,,,,,60,10
org.springframework.jdbc.core,10,,,,,,,,,,,,,,,,,,10,,,,,,,,,,,
org.springframework.jdbc.object,9,,,,,,,,,,,,,,,,,,9,,,,,,,,,,,
org.springframework.jndi,1,,,,,,,,,,1,,,,,,,,,,,,,,,,,,,
org.springframework.ldap,47,,,,,,,,,,33,14,,,,,,,,,,,,,,,,,,
org.springframework.security.web.savedrequest,,6,,,,,,,,,,,,,,,,,,,,,,,,,,6,,
org.springframework.ui,,,32,,,,,,,,,,,,,,,,,,,,,,,,,,,32
org.springframework.util,,,139,,,,,,,,,,,,,,,,,,,,,,,,,,87,52
org.springframework.validation,,,13,,,,,,,,,,,,,,,,,,,,,,,,,,13,
org.springframework.web.client,13,3,,,,,,,,,,,,,,13,,,,,,,,,,,,3,,
org.springframework.web.context.request,,8,,,,,,,,,,,,,,,,,,,,,,,,,,8,,
org.springframework.web.multipart,,12,13,,,,,,,,,,,,,,,,,,,,,,,,,12,13,
org.springframework.web.reactive.function.client,2,,,,,,,,,,,,,,,2,,,,,,,,,,,,,,
org.springframework.web.util,,,163,,,,,,,,,,,,,,,,,,,,,,,,,,138,25
org.xml.sax,,,1,,,,,,,,,,,,,,,,,,,,,,,,,,1,
org.xmlpull.v1,,3,,,,,,,,,,,,,,,,,,,,,,,,,,3,,
play.mvc,,4,,,,,,,,,,,,,,,,,,,,,,,,,,4,,
ratpack.core.form,,,3,,,,,,,,,,,,,,,,,,,,,,,,,,3,
ratpack.core.handling,,6,4,,,,,,,,,,,,,,,,,,,,,,,,,6,4,
ratpack.core.http,,10,10,,,,,,,,,,,,,,,,,,,,,,,,,10,10,
ratpack.exec,,,48,,,,,,,,,,,,,,,,,,,,,,,,,,,48
ratpack.form,,,3,,,,,,,,,,,,,,,,,,,,,,,,,,3,
ratpack.func,,,35,,,,,,,,,,,,,,,,,,,,,,,,,,,35
ratpack.handling,,6,4,,,,,,,,,,,,,,,,,,,,,,,,,6,4,
ratpack.http,,10,10,,,,,,,,,,,,,,,,,,,,,,,,,10,10,
ratpack.util,,,35,,,,,,,,,,,,,,,,,,,,,,,,,,,35
1 package sink source summary sink:bean-validation sink:create-file sink:groovy sink:header-splitting sink:information-leak sink:intent-start sink:jexl sink:jndi-injection sink:ldap sink:logging sink:mvel sink:ognl-injection sink:open-url sink:pending-intent-sent sink:set-hostname-verifier sink:sql sink:url-open-stream sink:url-redirect sink:write-file sink:xpath sink:xslt sink:xss source:android-widget source:contentprovider source:remote summary:taint summary:value
2 android.app 16 103 7 9 18 85
3 android.content 24 27 96 100 16 8 27 31 65 69
4 android.database 59 30 59 30
5 android.net 60 45 15
6 android.os 122 41 81
7 android.util 6 16 6 16
8 android.webkit 3 2 3 2
9 androidx.slice android.widget 2 5 1 88 1 2 1 5 27 1 61
10 cn.hutool.core.codec androidx.slice 2 5 1 88 2 5 1 27 61
11 com.esotericsoftware.kryo.io cn.hutool.core.codec 1 1
12 com.esotericsoftware.kryo5.io com.esotericsoftware.kryo.io 1 1
13 com.fasterxml.jackson.core com.esotericsoftware.kryo5.io 1 1
14 com.fasterxml.jackson.databind com.fasterxml.jackson.core 6 1 6 1
15 com.google.common.base com.fasterxml.jackson.databind 85 6 62 6 23
16 com.google.common.cache com.google.common.base 17 85 62 17 23
17 com.google.common.collect com.google.common.cache 553 17 2 551 17
18 com.google.common.flogger com.google.common.collect 29 553 29 2 551
19 com.google.common.io com.google.common.flogger 6 29 73 29 6 72 1
20 com.opensymphony.xwork2.ognl com.google.common.io 3 6 73 3 6 72 1
21 com.unboundid.ldap.sdk com.opensymphony.xwork2.ognl 17 3 17 3
22 flexjson com.unboundid.ldap.sdk 17 1 17 1
23 groovy.lang flexjson 26 1 26 1
24 groovy.util groovy.lang 5 26 5 26
25 jakarta.faces.context groovy.util 2 5 7 5 2 7
26 jakarta.json jakarta.faces.context 2 7 123 2 7 100 23
27 jakarta.ws.rs.client jakarta.json 1 123 1 100 23
28 jakarta.ws.rs.container jakarta.ws.rs.client 1 9 1 9
29 jakarta.ws.rs.core jakarta.ws.rs.container 2 9 149 2 9 94 55
30 java.beans jakarta.ws.rs.core 2 1 149 2 1 94 55
31 java.io java.beans 37 31 1 15 22 31 1
32 java.lang java.io 8 37 58 31 15 8 22 46 31 12
33 java.net java.lang 10 8 3 7 58 8 10 3 7 46 12
34 java.nio java.net 15 10 3 6 7 13 10 2 3 6 7
35 java.sql java.nio 7 15 6 13 7 2 6
36 java.util java.sql 34 7 438 34 7 24 414
37 javax.faces.context java.util 2 34 7 438 34 2 7 24 414
38 javax.json javax.faces.context 2 7 123 2 7 100 23
39 javax.management.remote javax.json 2 123 2 100 23
40 javax.naming javax.management.remote 7 2 6 2 1
41 javax.net.ssl javax.naming 2 7 6 1 2
42 javax.script javax.net.ssl 1 2 1 2
43 javax.servlet javax.script 4 1 21 2 3 1 1 21 2
44 javax.validation javax.servlet 1 4 1 21 2 1 3 1 1 21 2
45 javax.ws.rs.client javax.validation 1 1 1 1 1
46 javax.ws.rs.container javax.ws.rs.client 1 9 1 9
47 javax.ws.rs.core javax.ws.rs.container 3 9 149 1 2 9 94 55
48 javax.xml.transform javax.ws.rs.core 1 3 6 149 1 2 1 6 94 55
49 javax.xml.xpath javax.xml.transform 3 1 6 3 1 6
50 jodd.json javax.xml.xpath 3 10 3 10
51 net.sf.saxon.s9api jodd.json 5 10 5 10
52 ognl net.sf.saxon.s9api 6 5 6 5
53 org.apache.commons.codec ognl 6 6 6 6
54 org.apache.commons.collections org.apache.commons.codec 800 6 17 6 783
55 org.apache.commons.collections4 org.apache.commons.collections 800 17 783
56 org.apache.commons.io org.apache.commons.collections4 93 2 565 800 78 15 2 551 17 14 783
57 org.apache.commons.jexl2 org.apache.commons.io 15 93 2 565 78 15 15 2 551 14
58 org.apache.commons.jexl3 org.apache.commons.jexl2 15 15
59 org.apache.commons.lang3 org.apache.commons.jexl3 15 424 15 293 131
60 org.apache.commons.logging org.apache.commons.lang3 6 424 6 293 131
61 org.apache.commons.ognl org.apache.commons.logging 6 6 6
62 org.apache.commons.text org.apache.commons.ognl 6 272 6 220 52
63 org.apache.directory.ldap.client.api org.apache.commons.text 1 272 1 220 52
64 org.apache.hc.core5.function org.apache.directory.ldap.client.api 1 1 1 1
65 org.apache.hc.core5.http org.apache.hc.core5.function 1 2 39 1 1 2 39 1
66 org.apache.hc.core5.net org.apache.hc.core5.http 1 2 2 39 1 2 2 39
67 org.apache.hc.core5.util org.apache.hc.core5.net 24 2 18 2 6
68 org.apache.http org.apache.hc.core5.util 27 3 70 24 25 2 3 62 18 8 6
69 org.apache.ibatis.jdbc org.apache.http 6 27 3 70 25 6 2 3 62 8
70 org.apache.log4j org.apache.ibatis.jdbc 11 6 11 6
71 org.apache.logging.log4j org.apache.log4j 359 11 8 359 11 4 4
72 org.apache.shiro.codec org.apache.logging.log4j 359 1 8 359 1 4 4
73 org.apache.shiro.jndi org.apache.shiro.codec 1 1 1 1
74 org.codehaus.groovy.control org.apache.shiro.jndi 1 1 1
75 org.dom4j org.codehaus.groovy.control 20 1 1 20
76 org.hibernate org.dom4j 7 20 7 20
77 org.jboss.logging org.hibernate 324 7 324 7
78 org.jooq org.jboss.logging 1 324 324 1
79 org.json org.jooq 1 236 1 198 38
80 org.mvel2 org.json 16 236 16 198 38
81 org.scijava.log org.mvel2 13 16 13 16
82 org.slf4j org.scijava.log 55 13 6 55 13 2 4
83 org.springframework.beans org.slf4j 55 26 6 55 2 26 4
84 org.springframework.cache org.springframework.beans 13 26 13 26
85 org.springframework.context org.springframework.cache 3 13 3 13
86 org.springframework.http org.springframework.context 14 70 3 14 60 3 10
87 org.springframework.jdbc.core org.springframework.http 10 14 70 14 10 60 10
88 org.springframework.jdbc.object org.springframework.jdbc.core 9 10 9 10
89 org.springframework.jndi org.springframework.jdbc.object 1 9 1 9
90 org.springframework.ldap org.springframework.jndi 47 1 33 1 14
91 org.springframework.security.web.savedrequest org.springframework.ldap 47 6 33 14 6
92 org.springframework.ui org.springframework.security.web.savedrequest 6 32 6 32
93 org.springframework.util org.springframework.ui 139 32 87 52 32
94 org.springframework.validation org.springframework.util 13 139 13 87 52
95 org.springframework.web.client org.springframework.validation 13 3 13 13 3 13
96 org.springframework.web.context.request org.springframework.web.client 13 8 3 13 8 3
97 org.springframework.web.multipart org.springframework.web.context.request 12 8 13 12 8 13
98 org.springframework.web.reactive.function.client org.springframework.web.multipart 2 12 13 2 12 13
99 org.springframework.web.util org.springframework.web.reactive.function.client 2 163 2 138 25
100 org.xml.sax org.springframework.web.util 1 163 1 138 25
101 org.xmlpull.v1 org.xml.sax 3 1 3 1
102 play.mvc org.xmlpull.v1 4 3 4 3
103 ratpack.core.form play.mvc 4 3 4 3
104 ratpack.core.handling ratpack.core.form 6 4 3 6 4 3
105 ratpack.core.http ratpack.core.handling 10 6 10 4 10 6 10 4
106 ratpack.exec ratpack.core.http 10 48 10 10 10 48
107 ratpack.form ratpack.exec 3 48 3 48
108 ratpack.func ratpack.form 35 3 3 35
109 ratpack.handling ratpack.func 6 4 35 6 4 35
110 ratpack.http ratpack.handling 10 6 10 4 10 6 10 4
111 ratpack.util ratpack.http 10 35 10 10 10 35
112 ratpack.util 35 35

4
java/documentation/library-coverage/coverage.rst
View File

@@ -7,7 +7,7 @@ Java framework & library support
:widths: auto
Framework / library,Package,Flow sources,Taint & value steps,Sinks (total),`CWE‑022` :sub:`Path injection`,`CWE‑036` :sub:`Path traversal`,`CWE‑079` :sub:`Cross-site scripting`,`CWE‑089` :sub:`SQL injection`,`CWE‑090` :sub:`LDAP injection`,`CWE‑094` :sub:`Code injection`,`CWE‑319` :sub:`Cleartext transmission`
Android,``android.*``,45,411,108,,,3,67,,,
Android,``android.*``,46,416,108,,,3,67,,,
`Apache Commons Collections <https://commons.apache.org/proper/commons-collections/>`_,"``org.apache.commons.collections``, ``org.apache.commons.collections4``",,1600,,,,,,,,
`Apache Commons IO <https://commons.apache.org/proper/commons-io/>`_,``org.apache.commons.io``,2,565,93,78,,,,,,15
`Apache Commons Lang <https://commons.apache.org/proper/commons-lang/>`_,``org.apache.commons.lang3``,,424,,,,,,,,
@@ -19,5 +19,5 @@ Java framework & library support
Java extensions,"``javax.*``, ``jakarta.*``",54,552,32,,,4,,1,1,2
`Spring <https://spring.io/>`_,``org.springframework.*``,29,472,96,,,,19,14,,29
Others,"``androidx.slice``, ``cn.hutool.core.codec``, ``com.esotericsoftware.kryo.io``, ``com.esotericsoftware.kryo5.io``, ``com.fasterxml.jackson.core``, ``com.fasterxml.jackson.databind``, ``com.opensymphony.xwork2.ognl``, ``com.unboundid.ldap.sdk``, ``flexjson``, ``groovy.lang``, ``groovy.util``, ``jodd.json``, ``net.sf.saxon.s9api``, ``ognl``, ``org.apache.commons.codec``, ``org.apache.commons.jexl2``, ``org.apache.commons.jexl3``, ``org.apache.commons.logging``, ``org.apache.commons.ognl``, ``org.apache.directory.ldap.client.api``, ``org.apache.ibatis.jdbc``, ``org.apache.log4j``, ``org.apache.logging.log4j``, ``org.apache.shiro.codec``, ``org.apache.shiro.jndi``, ``org.codehaus.groovy.control``, ``org.dom4j``, ``org.hibernate``, ``org.jboss.logging``, ``org.jooq``, ``org.mvel2``, ``org.scijava.log``, ``org.slf4j``, ``org.xml.sax``, ``org.xmlpull.v1``, ``play.mvc``, ``ratpack.core.form``, ``ratpack.core.handling``, ``ratpack.core.http``, ``ratpack.exec``, ``ratpack.form``, ``ratpack.func``, ``ratpack.handling``, ``ratpack.http``, ``ratpack.util``",44,283,921,,,,14,18,,
Totals,,182,6220,1424,106,6,10,107,33,1,81
Totals,,183,6225,1424,106,6,10,107,33,1,81