Tamas Vajk
|
f7f8b47f12
|
Java: Add initial version of empty method query
|
2025-03-14 11:36:03 +01:00 |
|
Owen Mansel-Chan
|
6ca9a1ff9a
|
Add change note
|
2025-03-13 15:05:32 +00:00 |
|
Owen Mansel-Chan
|
a8e993c942
|
Fix FP for always-locked fields
|
2025-03-13 15:03:32 +00:00 |
|
Jami
|
ea9b0462bf
|
Merge pull request #18793 from jcogs33/jcogs33/java/spring-boot-actuators-promo
Java: Promote Spring Boot Actuators query from experimental
|
2025-03-11 14:42:14 -04:00 |
|
Jami
|
ad63dd946c
|
Apply suggestions from docs review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2025-03-10 09:01:04 -04:00 |
|
Lukas Abfalterer
|
32e1589745
|
Update java/ql/src/change-notes/2025-03-03-fix-improper-intent-verification-query.md
Co-authored-by: Edward Minnix III <egregius313@github.com>
|
2025-03-06 09:57:16 +01:00 |
|
Jami Cogswell
|
0eec951218
|
Java: update change note to mention removal from Community Packs
|
2025-03-05 08:55:51 -05:00 |
|
Lukas Abfalterer
|
b4c75d832c
|
Merge branch 'main' into cwe-925
|
2025-03-05 14:15:07 +01:00 |
|
Lukas Abfalterer
|
c9b75afc2a
|
Fix QLL and add change notes with tests
|
2025-03-05 10:23:35 +01:00 |
|
Jami Cogswell
|
746f022cfa
|
Java: add 'Spring' prefix to public class names
|
2025-03-04 10:34:16 -05:00 |
|
REDMOND\brodes
|
8865d89fe9
|
Removing old ReusedNonce query.
|
2025-03-03 16:51:30 -05:00 |
|
REDMOND\brodes
|
2ee1681126
|
Adding a proof-of-concept PossibleReusedNonce query.
|
2025-03-03 15:09:27 -05:00 |
|
REDMOND\brodes
|
14cb2bb12f
|
Updates to insecure or unknown nonce at operation.
|
2025-03-03 14:42:50 -05:00 |
|
REDMOND\brodes
|
076f53147d
|
Proof-of-concept query for InsecureOrUnknownNonceAtOperation
|
2025-03-03 13:53:16 -05:00 |
|
github-actions[bot]
|
58f355ae5a
|
Post-release preparation for codeql-cli-2.20.6
|
2025-03-03 18:18:15 +00:00 |
|
github-actions[bot]
|
fa850cccb1
|
Release preparation for version 2.20.6
|
2025-03-03 17:13:19 +00:00 |
|
Lukas Abfalterer
|
a3749530d6
|
The query should only report cases when the method is not empty.
|
2025-03-03 10:20:46 +01:00 |
|
Jami Cogswell
|
b0b95965f6
|
Java: add change note
|
2025-03-02 17:13:37 -05:00 |
|
Jami Cogswell
|
fbf7513f37
|
Java: handle lock state check stored in variable
|
2025-03-02 17:01:18 -05:00 |
|
Nicolas Will
|
04f4683399
|
Rewrite handling of known unknowns and data-flow
|
2025-02-27 05:42:02 +01:00 |
|
Nicolas Will
|
f55f27b0d9
|
Expand handling of generic artifact sources
|
2025-02-25 18:22:38 +01:00 |
|
Owen Mansel-Chan
|
74a249597a
|
Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer
Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values
|
2025-02-24 23:39:18 +00:00 |
|
Jami Cogswell
|
c2e859c756
|
Java: add change note
|
2025-02-24 18:33:45 -05:00 |
|
Jami Cogswell
|
26e396732a
|
Java: edit qhelp
|
2025-02-24 18:33:43 -05:00 |
|
Jami Cogswell
|
53cb30dcd0
|
Java: update metadata, move from CWE-016 to CWE-200
|
2025-02-24 18:33:41 -05:00 |
|
Jami Cogswell
|
8dfb920e05
|
Java: refactor QL, move code to libraries
|
2025-02-24 18:24:48 -05:00 |
|
Jami Cogswell
|
8064e8f1f9
|
Java: convert tests to inline expectations
|
2025-02-24 18:24:26 -05:00 |
|
Jami Cogswell
|
5e5bc2afe9
|
Java: remove experimental files
|
2025-02-24 18:24:19 -05:00 |
|
Jami Cogswell
|
978834bd9c
|
Java: remove deprecations
|
2025-02-24 18:24:14 -05:00 |
|
Jami Cogswell
|
2ce5920c5e
|
Java: copy out of experimental
|
2025-02-24 18:24:12 -05:00 |
|
Nicolas Will
|
2b0b927b0b
|
Add Nonce association to Operation, update graph
|
2025-02-24 17:37:41 +01:00 |
|
Jami
|
485ee5c5ed
|
Merge pull request #18692 from jcogs33/jcogs33/spring-csrf-qhelp-update
Java: update `java/spring-disabled-csrf-protection` QHelp
|
2025-02-19 11:39:11 -05:00 |
|
Remco Vermeulen
|
2d991fc387
|
Updata Java CCR suite
|
2025-02-18 20:25:22 +00:00 |
|
github-actions[bot]
|
ad24f94a77
|
Post-release preparation for codeql-cli-2.20.5
|
2025-02-17 17:58:24 +00:00 |
|
github-actions[bot]
|
6f4562f3bd
|
Release preparation for version 2.20.5
|
2025-02-17 16:55:54 +00:00 |
|
Nicolas Will
|
df01fa7a9c
|
Expand model and JCA modeling
|
2025-02-17 00:16:08 +01:00 |
|
Nicolas Will
|
b777a22d35
|
Expand model and specialize newtype relations
|
2025-02-14 23:43:07 +01:00 |
|
Owen Mansel-Chan
|
dd102c4cea
|
Merge pull request #18645 from fabienpe/main
Added missing "GOOD" and "BAD" to some examples
|
2025-02-13 10:37:39 +00:00 |
|
Nicolas Will
|
874e3b5e06
|
Modify model to use newtypes, expand modeling
|
2025-02-12 17:58:15 +01:00 |
|
Jami
|
2a8cc00284
|
Merge pull request #18288 from jcogs33/jcogs33/csrf-unprotected-request-type
Java: add CSRF query
|
2025-02-11 15:32:56 -05:00 |
|
Nicolas Will
|
4d44755945
|
Refactor Model and CBOM print queries
|
2025-02-11 15:37:15 +01:00 |
|
Tom Hvitved
|
75137a0f4c
|
Java: Adopt shared SSA library
|
2025-02-11 10:06:43 +01:00 |
|
Tom Hvitved
|
614b3cea66
|
Merge pull request #18697 from hvitved/rust/telemetry
Rust: Implement database quality telemetry query
|
2025-02-07 17:43:23 +01:00 |
|
Tom Hvitved
|
89502d63e5
|
Rust: Implement database quality telemetry query
|
2025-02-06 10:46:48 +01:00 |
|
Kristen Newbury
|
efcf7eab0c
|
Add broken crypto query
|
2025-02-05 17:24:25 -05:00 |
|
Kristen Newbury
|
86e51dad8a
|
Improve JCA aes alg model, add test
|
2025-02-05 13:39:48 -05:00 |
|
Jami Cogswell
|
dce89c5419
|
Java: update qhelp to align with other csrf queries
|
2025-02-05 10:57:47 -05:00 |
|
Jami Cogswell
|
c6a71cd3fd
|
Java: minor qhelp updates
|
2025-02-05 10:20:57 -05:00 |
|
Remco Vermeulen
|
9894e9ef9f
|
Add CCR suites
|
2025-02-05 01:58:34 +00:00 |
|
Jami Cogswell
|
0367846333
|
Java: remove token section from qhelp overview
discussing tokens is not directly relevant to this query's recommendation and examples
|
2025-02-04 13:36:15 -05:00 |
|