Tony Torralba
602eb43109
Update partial flow test expectations
2023-07-26 09:32:13 +02:00
Tony Torralba
d3b3af8ae6
Re-adds jump step
...
Note that this causes FP flow in the call context test cases
2023-07-24 08:49:37 +02:00
Tony Torralba
cc5a404149
Add more test cases
2023-07-24 08:49:36 +02:00
Tony Torralba
226103b246
Add local class test
2023-07-24 08:49:36 +02:00
Tony Torralba
0156fcc381
Apply suggestions from code review
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2023-07-24 08:49:36 +02:00
Tony Torralba
00e0e5a61a
Java: Add taint step for InputStream wrappers
2023-07-24 08:48:04 +02:00
Ian Lynagh
c21797dd3c
Kotlin: Add a test for file classes
2023-07-11 13:21:56 +01:00
Jeroen Ketema
9c774ac97f
Merge pull request #13426 from jketema/inline-3
...
Update inline flow tests to use parameterized module
2023-06-19 17:39:29 +02:00
Jeroen Ketema
742eb8dd12
Java: Rewrite InlineFlowTest as a parameterized module
2023-06-15 10:52:10 +02:00
Tony Torralba
5e3d9d8136
Java: Model the Stapler framework
2023-06-14 12:34:52 +02:00
Tony Torralba
182513a981
Merge pull request #13235 from atorralba/atorralba/java/hudson-models
...
Java: Add Hudson models
2023-06-14 12:33:18 +02:00
Anders Schack-Mulligen
1a4fca334f
Merge pull request #13273 from aschackmull/dataflow/summarynode-refactor
...
Dataflow: Refactor FlowSummaryImpl to synthesize nodes independently from DataFlow::Node.
2023-06-14 09:38:36 +02:00
Jeroen Ketema
c3ba206b6a
Merge pull request #13346 from jketema/inline-2
...
Update inline expectation tests to use parameterized module
2023-06-13 10:10:55 +02:00
Anders Schack-Mulligen
eec012d308
Java: Fix test
2023-06-12 13:18:13 +02:00
Jeroen Ketema
49993b023e
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
Anders Schack-Mulligen
95afd551ff
Java: Fix qltest
2023-06-09 08:37:36 +02:00
Tony Torralba
4608481d7b
Java: Fix more problems in the Gson models
...
Found during type strengthening work by @aschackmull
2023-06-08 14:53:09 +02:00
Anders Schack-Mulligen
cc45db7c76
Merge pull request #13394 from atorralba/atorralba/java/fix-gson-jsonarray-models
...
Java: Fix Gson's JsonArray.add models
2023-06-08 11:05:40 +02:00
Tony Torralba
c0135673fa
Fix JsonArray.addAll model
...
Properly test JsonArray.add(String) and JsonArray.addAll(JsonArray) as well
2023-06-07 16:18:32 +02:00
Tony Torralba
35b4c438ff
Fix Gson's JsonArray.add models
...
When the type of the argument isn't JsonElement, the summary must be taint flow instead of value flow
2023-06-07 14:12:20 +02:00
yoff
911835c30e
Merge pull request #13392 from yoff/java/test-type-tracking-through-flow-summaries
...
java: test type tracking through flow summaries
2023-06-07 14:10:23 +02:00
Rasmus Lerchedahl Petersen
aec1e4a713
java: address ql alert
2023-06-07 11:40:50 +02:00
Rasmus Lerchedahl Petersen
76e1c6f76f
java: test type tracking through flow summaries
2023-06-07 11:18:53 +02:00
Tony Torralba
ad2f558002
Add Hudson models
...
Includes models-as-data rows, flow sources, and XSS sanitizers.
Tests for models-as-data rows not included.
2023-06-02 11:06:24 +02:00
Jami
617107de35
Merge pull request #12916 from jcogs33/jcogs33/revamp-java-sink-kinds
...
Java: revamp MaD sink kinds
2023-06-01 12:48:30 -04:00
Jami
10bab71c60
Merge pull request #12249 from jcogs33/jcogs33/add-heuristic-neutral-models
...
Java: add some neutral models discovered with heuristics
2023-06-01 07:51:55 -04:00
Jami Cogswell
82f208ca7a
Java: add isNeutralSink test case
2023-05-31 17:47:36 -04:00
Jami Cogswell
5dbb698481
Java: update open/jdbc-url sink kinds to request-forgery
2023-05-31 15:50:31 -04:00
Tony Torralba
482bb94ad9
Merge pull request #13179 from pwntester/java_gson
...
[Java] Add basic support for Google's Gson library
2023-05-31 11:16:19 +02:00
Tony Torralba
6f302a43ea
Merge pull request #13297 from atorralba/atorralba/java/playmvc-models
...
Java: Add models for the Play Framework
2023-05-31 09:02:17 +02:00
Tony Torralba
d3d67f0fb0
Add tests & stubs
2023-05-30 17:52:00 +02:00
Andrew Eisenberg
2d81e30d81
Fix addsTo.pack references
...
This change is a prerequisite for a CLI change where there will be
strict testing of the `addsTo.pack` values. It must resolve to a pack
reference that is a transitive dependency of the current query's pack.
2023-05-29 13:45:41 -07:00
Jami Cogswell
24fc4ba2d4
Java: add tests
2023-05-26 18:55:13 -04:00
Tony Torralba
8e16a0d144
Add tests and stubs for the summaries
2023-05-26 12:43:58 +02:00
Tony Torralba
903fdb0cb8
Java: Add models for the Play Framework
2023-05-26 10:23:43 +02:00
Ed Minnix
5c10d42915
More test cases for io.jsonwebtoken.SigningKeyResolverAdapter
2023-05-04 16:52:40 -04:00
Ed Minnix
a4fa1ec768
Test case for modeling io.jsonwebtoken.SigningKeyResolverAdapter
2023-05-04 16:52:40 -04:00
Kasper Svendsen
081085e128
Java: Make implicit this receivers explicit
2023-05-03 13:37:35 +02:00
Anders Schack-Mulligen
246d904712
Merge pull request #12948 from aschackmull/dataflow/pathnode-type-tostring
...
Dataflow: Add type to PathNode.toString.
2023-04-27 14:14:10 +02:00
Anders Schack-Mulligen
8e6038577d
Java: Update expected output.
2023-04-26 14:45:40 +02:00
Tony Torralba
2c4246f29a
Fix test comments
2023-04-26 10:08:18 +02:00
Tony Torralba
389e8c4fe8
Add review suggestions
2023-04-26 10:08:16 +02:00
Tony Torralba
0650c016f6
Add models for StringJoiner constructor
2023-04-26 10:07:59 +02:00
Tony Torralba
311498841e
Add fluent models
...
Add tests
2023-04-26 10:07:27 +02:00
Edward Minnix III
e50f56cc56
Merge pull request #12917 from egregius313/egregius313/java/dataflow/refactor-inline-flow-test
...
Java: Refactor `InlineFlowTest` to remove usage of `DataFlow::Configuration` API
2023-04-25 16:18:56 -04:00
Ed Minnix
d98723c35a
Fix naming of OkHttpFlowConfig in test
2023-04-25 10:31:27 -04:00
Ed Minnix
59e59125d6
Refactor tests
2023-04-24 17:10:32 -04:00
Tony Torralba
e3d93c3581
Fix FileCopyUtils models
2023-04-24 15:07:19 +02:00
Ed Minnix
49521f6de8
Refactor tests which extends Configuration
2023-04-17 23:48:06 -04:00
Ed Minnix
93bd2a9409
Refactor PathSanitizer test
2023-04-17 23:48:06 -04:00