hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-29 18:55:14 +02:00
Code Issues Packages Projects Releases Wiki Activity

Add Java coverage report files

Browse Source
This commit is contained in:
Tamas Vajk
2021-05-18 14:05:32 +02:00
parent f09352620f
commit 3db22ba482
3 changed files with 57 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
java/documentation/library-coverage/flow-model-coverage.csv Normal file
View File

@@ -0,0 +1,37 @@
package,sink,source,summary,sink:bean-validation,sink:create-file,sink:header-splitting,sink:ldap,sink:open-url,sink:set-hostname-verifier,sink:url-open-stream,sink:xss,source:remote,summary:taint,summary:value
android.util,,16,,,,,,,,,,16,,
android.webkit,3,2,,,,,,,,,3,2,,
com.esotericsoftware.kryo.io,,,1,,,,,,,,,,1,
com.google.common.base,,,27,,,,,,,,,,22,5
com.google.common.io,6,,69,,,,,,,6,,,68,1
com.unboundid.ldap.sdk,17,,,,,,17,,,,,,,
java.beans,,,1,,,,,,,,,,1,
java.io,3,,20,,3,,,,,,,,20,
java.lang,,,1,,,,,,,,,,1,
java.net,2,3,4,,,,,2,,,,3,4,
java.nio,10,,2,,10,,,,,,,,2,
java.util,,,13,,,,,,,,,,13,
javax.naming.directory,1,,,,,,1,,,,,,,
javax.net.ssl,2,,,,,,,,2,,,,,
javax.servlet,4,21,2,,,3,,,,,1,21,2,
javax.validation,1,1,,1,,,,,,,,1,,
javax.ws.rs.core,1,,,,,1,,,,,,,,
javax.xml.transform.sax,,,4,,,,,,,,,,4,
javax.xml.transform.stream,,,2,,,,,,,,,,2,
org.apache.commons.codec,,,2,,,,,,,,,,2,
org.apache.commons.io,,,22,,,,,,,,,,22,
org.apache.commons.lang3,,,313,,,,,,,,,,299,14
org.apache.commons.text,,,203,,,,,,,,,,203,
org.apache.directory.ldap.client.api,1,,,,,,1,,,,,,,
org.apache.hc.core5.function,,,1,,,,,,,,,,1,
org.apache.hc.core5.http,1,2,39,,,,,,,,1,2,39,
org.apache.hc.core5.net,,,2,,,,,,,,,,2,
org.apache.hc.core5.util,,,22,,,,,,,,,,18,4
org.apache.http,2,3,66,,,,,,,,2,3,59,7
org.springframework.ldap.core,14,,,,,,14,,,,,,,
org.springframework.web.client,,3,,,,,,,,,,3,,
org.springframework.web.context.request,,8,,,,,,,,,,8,,
org.springframework.web.multipart,,12,,,,,,,,,,12,,
org.xml.sax,,,1,,,,,,,,,,1,
org.xmlpull.v1,,3,,,,,,,,,,3,,
play.mvc,,4,,,,,,,,,,4,,
1 package sink source summary sink:bean-validation sink:create-file sink:header-splitting sink:ldap sink:open-url sink:set-hostname-verifier sink:url-open-stream sink:xss source:remote summary:taint summary:value
2 android.util 16 16
3 android.webkit 3 2 3 2
4 com.esotericsoftware.kryo.io 1 1
5 com.google.common.base 27 22 5
6 com.google.common.io 6 69 6 68 1
7 com.unboundid.ldap.sdk 17 17
8 java.beans 1 1
9 java.io 3 20 3 20
10 java.lang 1 1
11 java.net 2 3 4 2 3 4
12 java.nio 10 2 10 2
13 java.util 13 13
14 javax.naming.directory 1 1
15 javax.net.ssl 2 2
16 javax.servlet 4 21 2 3 1 21 2
17 javax.validation 1 1 1 1
18 javax.ws.rs.core 1 1
19 javax.xml.transform.sax 4 4
20 javax.xml.transform.stream 2 2
21 org.apache.commons.codec 2 2
22 org.apache.commons.io 22 22
23 org.apache.commons.lang3 313 299 14
24 org.apache.commons.text 203 203
25 org.apache.directory.ldap.client.api 1 1
26 org.apache.hc.core5.function 1 1
27 org.apache.hc.core5.http 1 2 39 1 2 39
28 org.apache.hc.core5.net 2 2
29 org.apache.hc.core5.util 22 18 4
30 org.apache.http 2 3 66 2 3 59 7
31 org.springframework.ldap.core 14 14
32 org.springframework.web.client 3 3
33 org.springframework.web.context.request 8 8
34 org.springframework.web.multipart 12 12
35 org.xml.sax 1 1
36 org.xmlpull.v1 3 3
37 play.mvc 4 4

19
java/documentation/library-coverage/flow-model-coverage.rst Normal file
View File

@@ -0,0 +1,19 @@
Java framework & library support
================================
.. csv-table::
:header-rows: 1
:class: fullWidthTable
:widths: auto
Framework / library,Package,Remote flow sources,Taint & value steps,Sinks (total),`CWE‑022` :sub:`Path injection`,`CWE‑036` :sub:`Path traversal`,`CWE‑079` :sub:`Cross-site scripting`,`CWE‑089` :sub:`SQL injection`,`CWE‑090` :sub:`LDAP injection`,`CWE‑094` :sub:`Code injection`,`CWE‑319` :sub:`Cleartext transmission`
Android,``android.*``,18,,3,,,3,,,,
Apache,``org.apache.*``,5,648,4,,,3,,1,,
`Apache Commons IO <https://commons.apache.org/proper/commons-io/>`_,``org.apache.commons.io``,,22,,,,,,,,
Google,``com.google.common.*``,,96,6,,6,,,,,
Java Standard Library,``java.*``,3,41,15,13,,,,,,2
Java extensions,``javax.*``,22,8,9,,,1,,1,1,
`Spring <https://spring.io/>`_,``org.springframework.*``,23,,14,,,,,14,,
Others,"``com.esotericsoftware.kryo.io``, ``com.unboundid.ldap.sdk``, ``org.xml.sax``, ``org.xmlpull.v1``, ``play.mvc``",7,2,17,,,,,17,,
Totals,,78,817,68,13,6,7,,33,1,2