Ed Minnix
6e4e1e52c0
Refactor NFEAndroidDoS
2023-04-12 20:37:35 -04:00
Ed Minnix
94768f425f
Refactor HashWithoutSalt
2023-04-12 20:37:35 -04:00
Ed Minnix
cb7391177d
Refactor MyBatis queries
2023-04-12 20:37:35 -04:00
Ed Minnix
d528c8461f
Refactor XQueryInjection.ql
2023-04-12 20:37:35 -04:00
Ed Minnix
e7cbd493d7
Refactor FilePathInjection
2023-04-12 20:37:35 -04:00
Ed Minnix
47c5db03ab
Refactor OpenStream.ql
2023-04-12 20:37:34 -04:00
Ed Minnix
5bd9aae072
Refactor Log4jJndiInjection.ql
2023-04-12 20:37:34 -04:00
Jami Cogswell
8b0eba78aa
Java: add UnsupportedOperationException to topJdkApiName
2023-04-06 10:14:36 -04:00
Jami
c55c9f50c9
Merge pull request #12680 from jcogs33/jcogs33/metrics-query-refactor-top500
...
Java: test GeneratedVsManualCoverage query on top 500 JDK APIs
2023-04-06 10:07:35 -04:00
Jami Cogswell
b534f40b26
Java: move TopJdkApis.qll to src directory
2023-04-06 08:23:22 -04:00
github-actions[bot]
ac426b1302
Post-release preparation for codeql-cli-2.12.6
2023-04-04 16:49:26 +00:00
Jonathan Leitschuh
b9d409279b
Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-03-31 23:36:07 -04:00
Jonathan Leitschuh
e641505361
Fix partial path traversal Java example Again
...
The original wouldn't compile, and the fix made by #11899 is sub-optimal.
This keeps the entire comparision using the Java `Path` object, which is optimal.
Signed-off-by: Jonathan Leitschuh <Jonathan.Leitschuh@gmail.com >
2023-03-31 23:36:07 -04:00
Jami Cogswell
aca538310f
Java: update some qldocs
2023-03-31 18:02:09 -04:00
Jami Cogswell
8501a16cac
Java: move TopJdkApis.qll to lib directory for better importing
2023-03-31 18:02:09 -04:00
Jami Cogswell
fea55e910e
Java: move query logic to qll file and add subset restriction for top500 jdk apis
2023-03-31 18:02:08 -04:00
Edward Minnix III
2b9daed26a
Merge pull request #12563 from egregius313/egregius313/refactor-java-libs-to-dataflow-modules
...
Java: Refactor Java query libraries to use dataflow modules
2023-03-31 12:38:14 -04:00
github-actions[bot]
0a3218676c
Release preparation for version 2.12.6
2023-03-30 19:25:06 +00:00
Edward Minnix III
8e54328315
Merge pull request #12681 from egregius313/egregius313/java/move-configurations-to-libraries
...
Java: Move dataflow configurations in queries to `*Query.qll` libraries (part 1)
2023-03-30 14:33:21 -04:00
Ed Minnix
684408a493
Fix StringFormat import
2023-03-30 11:20:35 -04:00
Alex Ford
62fcea030a
Merge pull request #12718 from github/post-release-prep/codeql-cli-2.12.5
...
Post-release preparation for codeql-cli-2.12.5
2023-03-30 15:50:56 +01:00
github-actions[bot]
e87ce62f95
Post-release preparation for codeql-cli-2.12.5
2023-03-30 13:48:58 +00:00
Ian Lynagh
f5a2853ab9
Merge pull request #12705 from igfoo/igfoo/integ-extractor-info
...
Java: Allow keys to be omitted from ExtractorInformation.ql
2023-03-30 14:06:41 +01:00
Tony Torralba
3102199a69
Make LocalUserInputToArgumentToExecFlowConfig and LocalUserInputToArgumentToExecFlow importable
2023-03-30 10:24:23 +02:00
Tony Torralba
534725f9eb
Add command injection sink kind
2023-03-30 10:17:35 +02:00
Ed Minnix
6a3eadf6cb
Refactor ImplicitPendingIntents
2023-03-29 22:33:09 -04:00
Ed Minnix
42b582da2f
Refactor StaticInitializationVector
2023-03-29 22:33:09 -04:00
Ed Minnix
469ac80d40
Refactor PartialPathTraversal
2023-03-29 22:33:09 -04:00
Ed Minnix
f8e26f1571
Refactor MissingJWTSignatureCheck
2023-03-29 22:33:09 -04:00
Ed Minnix
cae5637d8d
Refactor InsufficientKeySize
2023-03-29 22:33:09 -04:00
Ed Minnix
fa2f0dbc3b
Refactor InsecureBasicAuth
2023-03-29 22:33:09 -04:00
Ed Minnix
dcd46c2236
Refactor InsecureTrustManager
2023-03-29 22:33:09 -04:00
Ed Minnix
7262c6a097
Refactor XmlParsers.qll
2023-03-29 22:33:09 -04:00
Ed Minnix
da718610e8
Refactor HttpsUrlsQuery.qll
2023-03-29 22:33:09 -04:00
Ed Minnix
2698b61514
Refactor HardcodedCredentialsApiCall.qll
2023-03-29 22:33:08 -04:00
Ed Minnix
e8f7e3fcf1
Refactor ExternalAPIs.qll
2023-03-29 22:33:08 -04:00
Ed Minnix
ac8dec740a
Refactor UnsafeCertTrustQuery
2023-03-29 22:33:08 -04:00
Ed Minnix
a040ff6997
Refactor ConditionalBypass
2023-03-29 22:33:08 -04:00
Ed Minnix
e5f11d00a7
Refactor CWE-502/UnsafeDeserialization
2023-03-29 22:33:08 -04:00
Ed Minnix
9afa051621
Move ExternallyControlledFormatStringFlow to Query.qll
2023-03-29 17:59:34 -04:00
Ed Minnix
3eaa94a5d2
Move ResponseSplitting configuration to ResponseSplittingQuery.qll
2023-03-29 17:59:33 -04:00
Ed Minnix
e3af8b2c7f
Move LdapInjectionLib to LdapInjectionQuery.qll
2023-03-29 17:59:33 -04:00
Ed Minnix
1add692643
Move XssConfig to XssQuery.qll
2023-03-29 17:59:33 -04:00
Ed Minnix
19a94a5c13
Move InsecureBeanValidation configuration to Query.qll
2023-03-29 17:59:33 -04:00
Ed Minnix
367042bcff
Move ZipSlip configurations to Query.qll library
2023-03-29 17:59:33 -04:00
Ed Minnix
ce2cab0d2e
Move TaintedPath configurations to Query.qll
2023-03-29 17:59:33 -04:00
Ed Minnix
a3c1d08a59
Fix ExecUnescaped
2023-03-29 11:45:09 -04:00
Ed Minnix
25359d2218
Deprecate execTainted
2023-03-29 11:45:09 -04:00
Ed Minnix
0249890747
Refactor CommandLineQuery.qll
2023-03-29 11:45:09 -04:00
Edward Minnix III
117a983423
Merge pull request #12639 from egregius313/egregius313/java/refactor-injection-queries
...
Java: Refactor injection queries to new dataflow API
2023-03-29 11:02:18 -04:00
