1238 Commits

Author	SHA1	Message	Date
Jami Cogswell	9968d5d816	updated predicates	2022-08-22 12:41:22 -04:00
Jami Cogswell	58d3d89b2e	resolved merge conflict in AndroidManifest	2022-08-22 12:41:22 -04:00
Jami Cogswell	084b9830bc	resolved merge conflict in AndroidManifest	2022-08-22 12:41:22 -04:00
Jami Cogswell	55bd9f943f	minor wording updates in help file	2022-08-22 12:41:22 -04:00
Jami Cogswell	10fa687e26	updated help file and unit tests	2022-08-22 12:41:22 -04:00
Jami Cogswell	eea1089ee0	resolved merge conflict in AndroidManifest	2022-08-22 12:41:22 -04:00
Jami Cogswell	60921a0355	switched to checking for permission attr in application elem instead of in manifest elem	2022-08-22 12:41:22 -04:00
Jami Cogswell	a6ecac6e00	third draft with category launcher and permission element excluded	2022-08-22 12:41:22 -04:00
Jami Cogswell	8d5bbc458f	first draft of query and tests	2022-08-22 12:41:22 -04:00
Jami Cogswell	3e09d86a4f	adding starter files	2022-08-22 12:41:22 -04:00
Sebastian Bauersfeld	2ec3746861	Address PR comments.	2022-08-19 17:33:35 +07:00
Sebastian Bauersfeld	f6d42bd3c6	Allow blacklist sanitizers.	2022-08-19 17:33:35 +07:00
Sebastian Bauersfeld	11f527ea5b	Fix up query tests.	2022-08-19 17:33:35 +07:00
Erik Krogh Kristensen	4f93f2b9ba	Merge pull request #10076 from erik-krogh/ql-for-ql-fixes ... various QL-for-QL fixes	2022-08-18 15:46:48 +02:00
Joe Farebrother	e8f027dab2	Apply docs suggestions from code review ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2022-08-18 14:21:40 +01:00
Anders Schack-Mulligen	f6eccd390e	Java: Move sink-constraints into the configuration.	2022-08-17 15:06:55 +02:00
erik-krogh	2e44fba67d	add explicit this	2022-08-17 13:33:31 +02:00
Joe Farebrother	5d00b871d4	Correct node type	2022-08-17 11:58:11 +01:00
Joe Farebrother	de69827711	Use a full dataflow config rather than local flow	2022-08-17 10:35:48 +01:00
Joe Farebrother	fe5a61bdde	Fix typos in docs and comments	2022-08-17 10:35:48 +01:00
Joe Farebrother	c77b17574a	Use CryptoAlgoSpec rather than hadcoding Cipher.getInstance	2022-08-17 10:35:47 +01:00
Joe Farebrother	08b77493d2	Add security severity and change note	2022-08-17 10:35:47 +01:00
Joe Farebrother	9ae652dd6a	Add tests	2022-08-17 10:35:47 +01:00
Joe Farebrother	41bdd6d4cc	Add RSA without OEAP query and qhelp	2022-08-17 10:35:46 +01:00
Joe Farebrother	7c188a6b96	Apply doc suggestions	2022-08-17 10:35:16 +01:00
Joe Farebrother	5afc0b0c15	Add security severity	2022-08-17 10:35:15 +01:00
Joe Farebrother	bf32b5a8fd	Reiview suggestions - add doc comment, reword description, simplify a part	2022-08-17 10:35:15 +01:00
Joe Farebrother	c152a27a68	Reword docs	2022-08-17 10:35:14 +01:00
Joe Farebrother	f8f21c7ee6	Move static init vector query and tests from experimental to main	2022-08-17 10:35:13 +01:00
Jami	dd23d48ad2	Merge pull request #9939 from jcogs33/android-debug-query-inline-tests ... Java: query to detect android:debuggable attribute enabled	2022-08-16 10:07:13 -04:00
Sid Shankar	1e1e2318b7	Merge pull request #10052 from github/task/fix-broken-links ... Docs: Replace HTTP broken links to equivalent HTTPS resources	2022-08-16 08:45:08 -04:00
Erik Krogh Kristensen	f106e064fa	Merge pull request #9422 from erik-krogh/refacReDoS ... Refactorizations of the ReDoS libraries	2022-08-16 09:32:08 +02:00
Jami Cogswell	07e141c5be	added commas to help file	2022-08-15 15:50:00 -04:00
Jami Cogswell	b779f9f935	added casting	2022-08-15 15:50:00 -04:00
Jami Cogswell	6e10fcf519	added predicates in the AndroidManifest library and adjusted tests	2022-08-15 15:50:00 -04:00
Jami Cogswell	229324fde0	updated overview section of help file; also added 'App Manifest Overview' to references	2022-08-15 15:50:00 -04:00
Jami Cogswell	3714a98403	add reference to help file	2022-08-15 15:50:00 -04:00
Jami Cogswell	d1a23ad78c	updated to getRelativePath with %build%	2022-08-15 15:50:00 -04:00
Jami Cogswell	8c4b98c04f	rename files	2022-08-15 15:50:00 -04:00
Jami Cogswell	475d67a4df	minor updates, removed comments	2022-08-15 15:50:00 -04:00
Jami Cogswell	e2374f816a	test commit for new branch	2022-08-15 15:50:00 -04:00
Jami Cogswell	54470c794d	updated location part of query to use abs path and /build	2022-08-15 15:49:59 -04:00
Jami Cogswell	54acd0e330	add numeric value for security-severity	2022-08-15 15:49:59 -04:00
Jami Cogswell	fdb437552c	clean up android query and tests	2022-08-15 15:49:59 -04:00
Jami Cogswell	cf39cc0909	updates to android debug query	2022-08-15 15:49:59 -04:00
Jami Cogswell	6720dba8e7	draft android debug query	2022-08-15 15:49:59 -04:00
Sid Shankar	02cd7bc7d2	Remove reference to infosecwriters.com ... infosecwriters.com now redirects to a completely unrelated page. The broken link was replaced with a mailing list post from Diabolical Crab (DCrab) diving into HTTP response splitting.	2022-08-15 14:41:50 -04:00
Chris Smowton	774e379eb1	Merge pull request #9742 from smehta23/feat/SM/java_partial_path_traversal_vulnerability ... [JAVA] Partial Path Traversal Vuln Query	2022-08-15 12:56:16 +01:00
Erik Krogh Kristensen	0adb588fe8	Merge pull request #9712 from erik-krogh/badRange ... JS/RB/PY/Java: add suspicious range query	2022-08-15 13:55:44 +02:00
Chris Smowton	1a3dc1d6eb	Remove extra closing tag	2022-08-15 11:31:53 +01:00