Stephan Brandauer
44a9cf93e0
Merge branch 'main' into kaeluka/add-provenance-to-metadata
2023-08-16 09:31:03 +02:00
Stephan Brandauer
808dc3e8d3
Java: Automodel framework mode: track exact ai- provenance in alreadyAiModeled meta data property
2023-08-16 09:25:03 +02:00
Stephan Brandauer
20254c3d0a
Merge pull request #13886 from github/kaeluka/java-automodel-variadic-args
...
Java: automodel application mode: use endpoint class like in framework mode
2023-08-16 08:49:01 +02:00
Michael Nebel
a95aad51bd
Merge pull request #13546 from michaelnebel/java/withoutelement
...
Java: Support for With[out]Element for MaD.
2023-08-15 10:03:03 +02:00
Geoffrey White
657642a122
Java: Expose parts of the vquery message in the test.
2023-08-14 14:12:07 +01:00
Stephan Brandauer
551b34e3be
Java: Automodel application mode: include candidates that are useful for regression testing
2023-08-14 11:46:40 +02:00
Stephan Brandauer
1a95a34441
Java: automodel: use the call for call context, rather than the argument
2023-08-14 09:54:44 +02:00
Stephan Brandauer
4107758c8a
Java: automodel extraction: add strings to query selection
2023-08-14 09:49:50 +02:00
Michael Nebel
0ed724eb13
Java: Make a flow summary for Set.clear using WithoutElement and introduce appropriate tests.
2023-08-08 11:10:08 +02:00
Stephan Brandauer
3433437034
Java: automodel application mode: only extract the first argument corresponding to a varargs array
2023-08-07 14:15:17 +02:00
Stephan Brandauer
e1a5eba61b
Java: automodel application mode: refactor varargs endpoint class to rely on normal argument node for nicer extracted examples
2023-08-07 12:18:52 +02:00
Stephan Brandauer
0781cb78e8
Java: automodel application mode: add isVarargsArray metadata value
2023-08-07 12:18:51 +02:00
Stephan Brandauer
5abf7769a7
Java: automodel application mode: use endpoint class like in framework mode
2023-08-07 12:18:51 +02:00
Tony Torralba
fb0102b763
Java: New models for JAX-RS
2023-08-07 11:52:23 +02:00
Anders Starcke Henriksen
e2abd3ff13
Create separate automodel pack.
2023-08-03 13:55:15 +02:00
Michael Nebel
e97a4a1aea
Java: Update telemetry test expected output.
2023-08-01 12:03:44 +02:00
Stephan Brandauer
bc3e78f034
Java: add automodel framework mode test case for newly supported interface-method parameter extraction
2023-08-01 09:18:58 +02:00
Stephan Brandauer
5ad984f22f
Java: update text expectations after merging #13823
2023-08-01 09:18:58 +02:00
Stephan Brandauer
da87d82d08
Java: fix a comment
2023-08-01 09:18:58 +02:00
Stephan Brandauer
be629b27ed
Java: Automodel package private test case
2023-08-01 09:18:57 +02:00
Stephan Brandauer
f5c4155d63
Java: Automodel tests: update after merging #13818
2023-08-01 09:18:57 +02:00
Stephan Brandauer
44b8ec642e
Java: merge framework mode tests into one
2023-08-01 09:18:57 +02:00
Stephan Brandauer
8cc367c45e
Java: merge application mode tests into one
2023-08-01 09:18:57 +02:00
Stephan Brandauer
37b6b46dbf
Java: update extraction query tests after merging PR #13747
2023-08-01 09:18:57 +02:00
Stephan Brandauer
50603102d1
Java: tests for automodel application mode, test that local calls are not candidates
2023-08-01 09:18:57 +02:00
Stephan Brandauer
457604e37e
Java: tests for automodel framework mode negative example extraction
2023-08-01 09:18:57 +02:00
Stephan Brandauer
938a7a788f
Java: tests for automodel application mode negative example extraction
2023-08-01 09:18:57 +02:00
Stephan Brandauer
abed936556
Java: tests for automodel framework mode positive example extraction
2023-08-01 09:18:57 +02:00
Stephan Brandauer
1bc222ec40
Java: tests for automodel application mode positive example extraction
2023-08-01 09:18:57 +02:00
Stephan Brandauer
2e89a11949
Java: tests for automodel application mode candidate extraction
2023-08-01 09:18:56 +02:00
Stephan Brandauer
18fe587e75
Java: tests for automodel framework mode candidate extraction
2023-08-01 09:18:56 +02:00
Tony Torralba
2cbb7ed296
Java: Add XXE sinks for MDHT
2023-07-31 11:13:17 +02:00
Geoffrey White
369f88beda
Java: Fix for multiple parse mode flags.
2023-07-20 11:49:54 +01:00
Geoffrey White
32c10885d4
Java: Add test case.
2023-07-20 11:43:11 +01:00
Anders Schack-Mulligen
ae24d68b5d
C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.
2023-07-19 11:41:15 +02:00
Tony Torralba
16529cdd18
Add failing test
2023-07-10 17:40:15 +02:00
Koen Vlaswinkel
51af03d2bc
Java: Add tests for names of nested classes
2023-06-28 09:52:25 +02:00
Tony Torralba
a7c2a25cac
Merge pull request #12879 from atorralba/atorralba/java/command-injection-mad-sinks
...
Java: Convert all command injection sinks to MaD format
2023-06-27 14:06:45 +02:00
Jorge
7d0b880bf7
Merge branch 'main' into jorgectf/deserialization-lookahead
2023-06-23 18:24:39 +02:00
jorgectf
b6e4ba6f9d
Add SerialKiller model
2023-06-23 18:19:43 +02:00
Jeroen Ketema
742eb8dd12
Java: Rewrite InlineFlowTest as a parameterized module
2023-06-15 10:52:10 +02:00
Tony Torralba
182513a981
Merge pull request #13235 from atorralba/atorralba/java/hudson-models
...
Java: Add Hudson models
2023-06-14 12:33:18 +02:00
Jeroen Ketema
c3ba206b6a
Merge pull request #13346 from jketema/inline-2
...
Update inline expectation tests to use parameterized module
2023-06-13 10:10:55 +02:00
Tony Torralba
ffe67689ec
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
2023-06-13 09:27:33 +02:00
Jeroen Ketema
49993b023e
Java: Rewrite inline expectation tests to use parameterized module
2023-06-09 10:42:17 +02:00
Anders Schack-Mulligen
85d6b44d92
Java: Fix test output.
2023-06-09 08:37:36 +02:00
Anders Schack-Mulligen
a0a9d30286
Java: Fix qltests.
2023-06-09 08:37:35 +02:00
Tony Torralba
6d7234f8ed
Merge pull request #13225 from atorralba/atorralba/java/path-injection-mad-sinks-2
...
Java: Migrate path injection sinks to models-as-data (simplified)
2023-06-07 14:27:36 +02:00
Tony Torralba
ad2f558002
Add Hudson models
...
Includes models-as-data rows, flow sources, and XSS sanitizers.
Tests for models-as-data rows not included.
2023-06-02 11:06:24 +02:00
Tony Torralba
527fe523a8
Add PathCreation.qll sinks to models-as-data
...
The old PathCreation sinks can't be removed because doing so would cause alert wobble in the path injection queries. See their getReportingNode predicates.
2023-06-02 09:14:35 +02:00
