Tony Torralba
cad5cd4037
java.io tests
2023-03-14 11:21:33 +01:00
Tony Torralba
8cc2686a2f
netty.resolver tests
2023-03-14 11:09:26 +01:00
Tony Torralba
1b85e8b706
hudson.remoting tests
2023-03-14 11:00:27 +01:00
Anders Schack-Mulligen
5792b4d363
Merge pull request #12503 from aschackmull/java/qltest-callback-instance-sideeffect
...
Java: Add a qltest demonstrating side-effect on a callback instance.
2023-03-13 17:26:12 +01:00
Tamas Vajk
c57fcfb8fb
Java: Fix printAST to handle javadoc belonging to multiple elements
2023-03-13 14:26:33 +01:00
Tony Torralba
705691b096
Merge pull request #12446 from github/java/update-mad-decls-after-triage-2023-03-08T14-51-59
...
Java: Update MaD Declarations after Triage
2023-03-13 14:07:59 +01:00
Anders Schack-Mulligen
f54b02edb3
Java: Add a qltest demonstrating side-effect on a callback instance.
2023-03-13 13:22:18 +01:00
Tamas Vajk
e44aca0b33
Java: Add printAST test with javadoc
2023-03-13 12:02:50 +01:00
Anders Schack-Mulligen
da273269cb
Java: Refactor PolynomialReDoS.ql
2023-03-13 11:27:14 +01:00
Tony Torralba
e834f9302e
Fix Apache Commons HTTP Client and SQL Injection tests
2023-03-13 09:36:53 +01:00
Ed Minnix
b6eeac5bc8
Update names to new naming convention
2023-03-10 15:13:58 -05:00
Tony Torralba
f07f0888aa
Fix tests
2023-03-10 12:35:13 +01:00
Tony Torralba
393a0759db
More stubs
2023-03-10 12:35:13 +01:00
Tony Torralba
8065714ebe
Add tests
2023-03-10 12:35:13 +01:00
Tony Torralba
eef3dc81df
Add stubs
2023-03-10 12:35:13 +01:00
Ed Minnix
da43a61506
Convert dataflow configuration to using new module-configuration
2023-03-08 19:19:00 -05:00
Ed Minnix
eeb9a88c3a
Renamed test file to follow camel casing convention
2023-03-08 13:56:25 -05:00
Ed Minnix
f680a2ecbf
Update test java file to support InlineExpectationsTest
2023-03-08 13:50:02 -05:00
Ed Minnix
bfd430b446
Remove qlref tests
2023-03-08 13:21:31 -05:00
Ed Minnix
5fb5f1b23b
Begin InlineExpectationsTest
2023-03-08 12:14:45 -05:00
Ed Minnix
8fcf00b73d
Test improvements
2023-03-08 12:12:10 -05:00
Ed Minnix
d3d712fbff
Remove Url#parse as a source
2023-03-08 12:12:10 -05:00
Ed Minnix
5f4e8e3e6a
Add test cases relating to intents with the ACTION_INSTALL_PACKAGE action
2023-03-08 12:12:10 -05:00
Ed Minnix
01b20b3a26
Added external storage test case
2023-03-08 12:12:10 -05:00
Ed Minnix
c448481bf7
Added test expectations
2023-03-08 12:12:10 -05:00
Ed Minnix
618b608962
Arbitrary APK Installation MVP
2023-03-08 12:12:10 -05:00
Anders Schack-Mulligen
e7f85673e9
Java: Fix tests and make modules private
2023-03-08 13:35:25 +01:00
Anders Schack-Mulligen
5c7f2ac7f7
Merge pull request #12186 from aschackmull/dataflow/refactor-configuration
...
Data flow: Refactor configuration
2023-03-06 13:38:59 +01:00
Tony Torralba
59bd1e5ab1
Merge pull request #12228 from github/java/mad-decls-triage-request-2276
...
Java: Update MaD sink decls after triage
2023-03-01 17:08:38 +01:00
Tony Torralba
0439eb640d
Add tests
2023-03-01 09:49:28 +01:00
Tony Torralba
4e7dbbf5f0
Add stubs
2023-03-01 09:48:33 +01:00
Anders Schack-Mulligen
5469a82efb
Go,Java,Python: Fix some tests.
2023-02-28 14:31:00 +01:00
Edward Minnix III
7f607fb46b
Merge pull request #12032 from egregius313/egregius313/promote-hardcoded-jwt-credential
...
Java: Promote Hardcoded JWT credential query
2023-02-27 11:33:53 -05:00
Ed Minnix
06a1368e7c
Additional test cases
2023-02-27 12:16:14 +01:00
Ed Minnix
6de946ef00
Remove experimental files
2023-02-27 12:16:14 +01:00
Ed Minnix
fa6ac063d1
Add com.auth0.jwt.algorithm.Algorithm sinks
...
The HMAC* constructors of the com.auth0.jwt.algorithm.Algorithm class
take a secret as a parameter. Therefore, the arguments should be added
to be checked for hardcoded credentials.
2023-02-27 12:16:14 +01:00
Tony Torralba
c027e10ef7
Add java.net tests
2023-02-27 09:33:16 +01:00
Anders Schack-Mulligen
46d6f5af7e
Java: Update some tests.
2023-02-21 13:14:35 +01:00
Anders Schack-Mulligen
bb0ec46eb2
Java: Update tests.
2023-02-21 10:04:25 +01:00
Tom Hvitved
0bceefc930
Java: Update test expectations
2023-02-17 15:20:21 +01:00
Chad Bentz
f3124d3239
Merge branch 'main' into main
2023-02-15 18:46:15 -05:00
Chad Bentz
2f576a4fe9
test both arguments of getConnection
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-02-15 18:26:56 -05:00
Chris Smowton
3514dd1e4d
Java: merge the @class and @interface database types and tables
...
This will allow the extractor to emit class(id, ...) when all it knows about a class is its name, due to not having it available on the classpath. Previously it would have had to guess whether it belonged to @class or @interface, possibly introducing an inconsistency.
2023-02-14 17:21:23 +00:00
Jami
029e1d47fe
Merge pull request #12081 from jcogs33/jcogs33/update-some-Files-sinks
...
Java: update `createTempDirectory` and `copy` "create-file" sinks
2023-02-14 10:53:17 -05:00
Chad Bentz
b0c8992eef
Adding CWE-798 MSSQL Tests
2023-02-13 19:44:02 -05:00
Chad Bentz
cfe169a4f9
Adding MSSQL to SensitiveAPI
2023-02-13 19:42:28 -05:00
Jami Cogswell
e4c8387815
Java: update CaptureSinkModels.expected with read-file sink
2023-02-13 11:29:30 -05:00
Michael Nebel
2ce6d5f920
Java: Update negative models test to not produce a negative summary for interface member.
2023-02-13 10:45:54 +01:00
Anders Schack-Mulligen
2d6d8aaa74
Java: Account for additional constants in ArrayIndexOutOfBounds query.
2023-02-03 16:16:39 +01:00
Joe Farebrother
97b2e852c9
Merge pull request #11713 from joefarebrother/sensitive-result-receiver
...
Java: Add query for leaking sensitive data through a ResultReceiver
2023-02-01 16:34:17 +00:00