2910 Commits

Author	SHA1	Message	Date
Ed Minnix	899200a9c9	Remove unnecessary private markers	2023-03-24 09:57:55 -04:00
Ed Minnix	f6b8d89756	Refactor GroovyInjectionQuery	2023-03-24 09:57:55 -04:00
Ed Minnix	bf5f82bb78	Refactor SqlInjectionQuery	2023-03-24 09:57:55 -04:00
Ed Minnix	fec80973a9	Refactor SpelInjectionQuery	2023-03-24 09:57:55 -04:00
Ed Minnix	787b73317d	Refactor TemplateInjection	2023-03-24 09:57:55 -04:00
Ed Minnix	7e1c42442a	Refactor OgnlInjection	2023-03-24 09:57:55 -04:00
Ed Minnix	3116e306b1	Refactor MvelInjection	2023-03-24 09:57:55 -04:00
Ed Minnix	423ab1d9cf	Refactor JndiInjection	2023-03-24 09:57:54 -04:00
Ed Minnix	8bf3315bb5	Refactor JexlInjection	2023-03-24 09:57:54 -04:00
Ed Minnix	7ee6c06f7f	Refactor RegexInjectionQuery	2023-03-24 09:57:54 -04:00
Ed Minnix	c44254e2e0	Refactor XsltInjection	2023-03-24 09:57:54 -04:00
Ed Minnix	1bf4dd9649	Update to DataFlow::Global	2023-03-24 09:54:53 -04:00
Ed Minnix	2eea34dc4a	Apply suggestions from code review	2023-03-24 09:47:50 -04:00
Edward Minnix III	c62eaba601	Simulate deprecated import ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2023-03-24 09:47:50 -04:00
Ed Minnix	58bd2f7fa2	Address code review comments	2023-03-24 09:47:50 -04:00
Ed Minnix	e7f6d53907	Deprecate WebViewDubuggingQuery.qll	2023-03-24 09:47:50 -04:00
Ed Minnix	ef08a91340	Refactor ImproperIntentVerificationQuery.qll	2023-03-24 09:47:50 -04:00
Ed Minnix	413a6cbc4f	Refactor SensitiveKeyboardCacheQuery	2023-03-24 09:47:50 -04:00
Ed Minnix	d68bec98bc	Refactor CWE-940/AndroidIntentRedirection	2023-03-24 09:47:50 -04:00
Ed Minnix	1e0c6811a4	Refactor UnsafeAndroidAccess	2023-03-24 09:47:50 -04:00
Ed Minnix	807588a031	Refactor AndroidCertificatePinningQuery	2023-03-24 09:47:50 -04:00
Ed Minnix	768102ee92	Refactor java/android/webview-debugging-enabled	2023-03-24 09:47:50 -04:00
Anders Schack-Mulligen	b45c274f33	Dataflow: Adjust qldoc	2023-03-24 12:41:53 +01:00
Jeroen Ketema	a87a9438c7	Replace all definitions of Unit by import codeql.util.Unit	2023-03-24 10:39:34 +01:00
Tony Torralba	c395779b85	Merge pull request #12643 from chmodxxx/sbaddou/jndisanitizer ... Java : Add JndiInjection Sanitizer Class	2023-03-24 09:04:54 +01:00
Anders Schack-Mulligen	9d88f01c82	Merge pull request #12645 from aschackmull/dataflow/renaming ... Dataflow: Rename Make to Global and hasFlow to flow	2023-03-24 08:48:31 +01:00
Tony Torralba	3eed4b4186	Move JndiInjectionSanitizer to importable file ... Add change note	2023-03-23 17:05:53 +01:00
Anders Schack-Mulligen	4993e7c149	Dataflow: Rename output signature	2023-03-23 13:39:53 +01:00
Salah Baddou	b1d9c65194	Add JndiInjection Sanitizer Class	2023-03-23 12:11:07 +00:00
Anders Schack-Mulligen	978c5f7bd8	Java/C++: Autoformat	2023-03-23 13:06:19 +01:00
Anders Schack-Mulligen	ec34d44359	Java: Rename references.	2023-03-23 13:06:19 +01:00
Anders Schack-Mulligen	2761aa73ca	Dataflow: Sync.	2023-03-23 13:06:19 +01:00
Anders Schack-Mulligen	cfa5af969e	Dataflow: Rename Make to Global and remove has* prefix.	2023-03-23 13:06:19 +01:00
Kasper Svendsen	ce6be1f636	Dataflow: Instantiate stage 1 access paths with proper unit type	2023-03-23 08:32:16 +01:00
Michael Nebel	915efffe21	Merge pull request #12610 from michaelnebel/java/validatespecs ... Java/C#: Validate all AccessPaths.	2023-03-22 16:22:54 +01:00
Anders Schack-Mulligen	dc6729d0bf	Merge pull request #12616 from aschackmull/java-csharp/redundant-sign-analysis-case ... Java/C#: Remove useless disjuncts.	2023-03-22 13:33:46 +01:00
Michael Nebel	46ef954d5c	Java: Validate all accesspaths except for Field.	2023-03-22 10:05:46 +01:00
Anders Schack-Mulligen	89d9d65755	Java/C#: Remove useless disjuncts.	2023-03-21 14:45:29 +01:00
Anders Schack-Mulligen	56288eb3d2	Java: Misc performance fixes	2023-03-21 14:26:13 +01:00
Edward Minnix III	ac58299d9e	Merge pull request #12541 from egregius313/egregius313/refactor-queries-to-new-dataflow-api ... Java: Refactor more queries to the new DataFlow module API	2023-03-20 12:24:26 -04:00
Anders Schack-Mulligen	3876e4335f	Merge pull request #12420 from kaspersv/kaspersv/dataflow-remove-alias-preds ... Dataflow: Remove revFlowAlias and revFlowApAlias predicates	2023-03-20 16:30:15 +01:00
Michael Nebel	17b3383043	Merge pull request #12556 from michaelnebel/java/argumentthis ... Java: Argument[-1] -> Argument[this]	2023-03-20 15:59:59 +01:00
Erik Krogh Kristensen	a9d40d39d9	Merge pull request #12550 from erik-krogh/useNumberUtil ... Java/Python: use Number.qll to parse hex numbers in regex parsing	2023-03-20 15:50:31 +01:00
Kasper Svendsen	1d2f1b6ae6	Address comments	2023-03-20 13:34:14 +01:00
Ed Minnix	1c661fd3ac	Add missing QLDocs	2023-03-20 08:10:07 -04:00
Kasper Svendsen	e0e3a1d621	Dataflow: remove revFlowApAlias trick	2023-03-20 13:04:13 +01:00
Ed Minnix	60a4a79537	Make the Config module of public Flow modules public ... This is to make things easier for the CodeML/ATM team once these configurations are moved from `src/` to `lib/`.	2023-03-20 07:47:55 -04:00
Michael Nebel	0ec56203f9	Java: Introduce index validation.	2023-03-20 09:38:40 +01:00
Michael Nebel	9a3c2d3fbe	Java: Update summary parsing to use this instead of -1 and adjust the model generator.	2023-03-20 09:38:40 +01:00
Michael Nebel	abd9f673e1	Java: Update the java internal documentation for models.	2023-03-20 09:38:39 +01:00