4084 Commits

Author	SHA1	Message	Date
Owen Mansel-Chan	e1c5517de7	Keep COMPLIANT and NON_COMPLIANT comments in test	2025-04-10 12:21:05 +01:00
Owen Mansel-Chan	04ec1d7830	Update test expectations	2025-04-10 12:21:03 +01:00
Owen Mansel-Chan	042fe07494	Adjust alert message	2025-04-10 11:47:19 +01:00
Owen Mansel-Chan	b5b252b10f	Convert test to inline expectations	2025-04-10 11:47:15 +01:00
Owen Mansel-Chan	041adcd63a	Java: Add initial version of string replaceAll with no regex query	2025-04-10 11:46:59 +01:00
Chris Smowton	e865d07a70	Merge pull request #19187 from smowton/smowton/feature/jakarta-persistence ... Java: generalise `javax.persistence` models to also recognise `jakarta.persistence`.	2025-04-02 15:56:29 +01:00
Chris Smowton	3c555fce11	Add basic test for SQL injection vs Jakarta Persistence	2025-04-01 17:13:23 +01:00
Anders Schack-Mulligen	56c46d74f9	Java/Rust/Swift: Accept qltest changes.	2025-03-31 11:44:37 +02:00
Anders Schack-Mulligen	0c74f21107	Merge pull request #19044 from aschackmull/ssa/useuse-trim ... Ssa: Trim the use-use relation to skip irrelevant nodes	2025-03-28 11:55:34 +01:00
Tamás Vajk	b21968c495	Merge pull request #18947 from tamasvajk/tamasvajk/java_empty_method ... Java: Add new quality query to detect empty methods	2025-03-26 09:33:47 +01:00
Anders Schack-Mulligen	f27e8199a1	Java: Accept test changes.	2025-03-25 12:31:04 +01:00
Nick Rolfe	361fbba39b	Java: fix comma splice in alert message	2025-03-21 14:23:32 +00:00
mc	1f76793863	Merge branch 'main' into tamasvajk/java_empty_method	2025-03-21 10:01:10 +00:00
Tamas Vajk	9bdec217e4	Clean test files and add new test cases	2025-03-20 09:32:27 +01:00
Jami	2750d1d889	Merge pull request #18646 from jcogs33/jcogs33/java/directory-chars-path-sanitizer ... Java: path sanitizer for `replace`, `replaceAll`, and `matches`	2025-03-18 13:26:01 -04:00
Jami Cogswell	0d2e9ae469	Java: fix 'matches' false branch	2025-03-17 18:48:44 -04:00
Jami Cogswell	49d37c517d	Java: fix replacement char check and add tests	2025-03-17 16:02:13 -04:00
Jami Cogswell	2f6696e8a8	Java: add test	2025-03-17 15:13:33 -04:00
Tamas Vajk	d4955a0747	Fix failing test and add new test case	2025-03-14 13:07:56 +01:00
Owen Mansel-Chan	5c7588822d	Fix test output	2025-03-14 11:44:00 +00:00
Tamas Vajk	2538ba82cc	Revert message	2025-03-14 11:36:13 +01:00
Tamas Vajk	17aa3fc428	Add compliant/non-compliant comments back to the test file	2025-03-14 11:36:11 +01:00
Tamas Vajk	3d4fcefe70	Do not accept empty default methods	2025-03-14 11:36:09 +01:00
Tamas Vajk	6512ed9429	Adjust alert message	2025-03-14 11:36:07 +01:00
Tamas Vajk	349f48982a	Make query more accepting	2025-03-14 11:36:06 +01:00
Tamas Vajk	4bf26afca0	Add more test cases	2025-03-14 11:36:05 +01:00
Tamas Vajk	614bee9e20	Use inline test expectations	2025-03-14 11:36:04 +01:00
Tamas Vajk	f7f8b47f12	Java: Add initial version of empty method query	2025-03-14 11:36:03 +01:00
Owen Mansel-Chan	a8e993c942	Fix FP for always-locked fields	2025-03-13 15:03:32 +00:00
Owen Mansel-Chan	dc2cbf7402	Add tests for always-locked fields	2025-03-13 15:02:26 +00:00
Owen Mansel-Chan	aed51644ba	Convert to inline expectations test	2025-03-13 12:55:02 +00:00
Jami Cogswell	e17486a9d8	Java: rename springframework stubs directory from 5.3.8 to 5.8.x	2025-03-11 15:20:58 -04:00
Jami	ea9b0462bf	Merge pull request #18793 from jcogs33/jcogs33/java/spring-boot-actuators-promo ... Java: Promote Spring Boot Actuators query from experimental	2025-03-11 14:42:14 -04:00
Jami Cogswell	76433a31f7	Java: generalize sanitizer and add tests	2025-03-10 18:56:01 -04:00
Jami Cogswell	94080a6e47	Java: initial tests	2025-03-10 18:55:54 -04:00
Owen Mansel-Chan	f2947f7066	Fix indentation	2025-03-05 14:13:53 +00:00
Lukas Abfalterer	b4c75d832c	Merge branch 'main' into cwe-925	2025-03-05 14:15:07 +01:00
Lukas Abfalterer	41e9a837e5	Fix naming ... Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>	2025-03-05 12:50:54 +01:00
Lukas Abfalterer	c9b75afc2a	Fix QLL and add change notes with tests	2025-03-05 10:23:35 +01:00
Jami Cogswell	82062e2847	Java: update test	2025-03-04 11:15:00 -05:00
Jami Cogswell	fbf7513f37	Java: handle lock state check stored in variable	2025-03-02 17:01:18 -05:00
Chris Smowton	1577b40b45	Accept test changes	2025-02-28 11:23:07 +00:00
Jonas Jensen	2edc9af1e0	Merge pull request #18848 from jbj/StaticInitializationVector-postprocess ... Java: StaticInitializationVector with postprocess	2025-02-25 12:44:16 +01:00
Owen Mansel-Chan	74a249597a	Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer ... Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values	2025-02-24 23:39:18 +00:00
Jami Cogswell	26e396732a	Java: edit qhelp	2025-02-24 18:33:43 -05:00
Jami Cogswell	53cb30dcd0	Java: update metadata, move from CWE-016 to CWE-200	2025-02-24 18:33:41 -05:00
Jami Cogswell	f65a5b9a66	Java: add test for qhelp good example	2025-02-24 18:27:45 -05:00
Jami Cogswell	9e51b014d2	Java: handle example in Spring docs	2025-02-24 18:27:43 -05:00
Jami Cogswell	b2469ff8ba	Java: add APIs and tests for more recent Spring versions: authorizeHttpRequests, AuthorizeHttpRequestsConfigurer, securityMatcher(s)	2025-02-24 18:26:02 -05:00
Jami Cogswell	8dfb920e05	Java: refactor QL, move code to libraries	2025-02-24 18:24:48 -05:00