Ed Minnix
|
f7c07d55ed
|
Credential-other sinks
|
2023-10-25 14:31:53 -04:00 |
|
Ed Minnix
|
49218cdbfb
|
Credential-username models
|
2023-10-25 14:31:53 -04:00 |
|
Ed Minnix
|
18661eee77
|
Crypto-parameter models
|
2023-10-25 14:31:53 -04:00 |
|
Ed Minnix
|
66486b08dc
|
Password models
|
2023-10-25 14:31:53 -04:00 |
|
Tony Torralba
|
9f7a8aa18c
|
Update MaD Declarations after Triage
|
2023-10-24 17:42:03 +02:00 |
|
Tony Torralba
|
cd10dc8a27
|
Java: Added up to date models for Spring's ResponseEntity
|
2023-10-23 16:06:11 +02:00 |
|
Dave Bartolomeo
|
bd7de83aab
|
Use extension packs for threat models
|
2023-10-19 17:07:26 -04:00 |
|
Edward Minnix III
|
15afc3ed64
|
Merge pull request #14491 from egregius313/egregius313/java/mad/convert-iv
Java: Refactor `java/static-initialization-vector` to use Models as Data
|
2023-10-17 13:15:45 -04:00 |
|
Stephan Brandauer
|
9d719aa44e
|
Merge pull request #13444 from github/java/update-mad-decls-after-triage-2023-06-13T14-50-57
Java: Update MaD Declarations after Triage
|
2023-10-17 13:54:10 +02:00 |
|
Tony Torralba
|
3cd06b0026
|
More review suggestions
|
2023-10-17 11:54:32 +02:00 |
|
Tony Torralba
|
62a9ffd277
|
Apply suggestions from code review
|
2023-10-17 11:51:55 +02:00 |
|
Ed Minnix
|
3356261031
|
Static IV refactor to MaD
|
2023-10-13 12:50:49 -04:00 |
|
Edward Minnix III
|
a1d3667f1c
|
Refactor Hudson file methods to MaD
|
2023-10-03 22:28:59 -04:00 |
|
Edward Minnix III
|
3a75c0fde7
|
Refactor DatabaseInput to MaD
|
2023-10-03 22:28:59 -04:00 |
|
Edward Minnix III
|
655470f3da
|
Refactor EnvInput to MaD
|
2023-10-03 22:28:47 -04:00 |
|
Michael Nebel
|
5b949b19f7
|
Java: Cleanup threat model taxanomy to align with the EDR.
|
2023-10-03 09:16:39 +02:00 |
|
Anders Schack-Mulligen
|
7e04ac55b7
|
Merge pull request #14268 from aschackmull/java/xmlparsers-typetrack
Java/Dataflow: Add new light-weight data flow api and use it in XmlParsers
|
2023-09-21 13:33:21 +02:00 |
|
Anders Schack-Mulligen
|
5c40d553b4
|
Java: Switch XmlParsers lib to lightweight data flow.
|
2023-09-20 10:21:53 +02:00 |
|
Tony Torralba
|
b08e410f45
|
Merge pull request #14029 from atorralba/atorralba/apache-cxf-models
Java: Add new Apache CXF models
|
2023-09-18 10:54:05 +02:00 |
|
Tony Torralba
|
5367fb99d9
|
Manually update a couple of models affected by the nested name change
|
2023-08-25 11:25:40 +02:00 |
|
Tony Torralba
|
2448bc8ce2
|
Java: Add new Apache CXF models
|
2023-08-25 11:17:51 +02:00 |
|
Tony Torralba
|
2ed01d06b4
|
Java: Re-generate Jenkins and Stapler models
Re-generated the Jenkins and Stapler models to pick up the changes from github/codeql#14032
|
2023-08-25 10:01:28 +02:00 |
|
Anders Schack-Mulligen
|
7af1e96943
|
Merge pull request #14032 from aschackmull/java/mad-nestednames
Java: Use nested names in MaD signatures.
|
2023-08-24 13:53:55 +02:00 |
|
Tony Torralba
|
8c32919381
|
Merge pull request #13903 from atorralba/atorralba/jaxrs-mad-models
Java: New models for JAX-RS
|
2023-08-24 11:43:13 +02:00 |
|
Anders Schack-Mulligen
|
6c02e30f56
|
Java: Update models.
|
2023-08-23 13:24:55 +02:00 |
|
Ed Minnix
|
655a98452a
|
Remove escapeHTML models
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
a36c12ff1f
|
Add trust-boundary-violation sink kind
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
ab9f0240d3
|
Add taint steps for HTML encoding methods
|
2023-08-17 13:05:36 -04:00 |
|
Ed Minnix
|
a8b7e70d01
|
Convert trust boundary models to MaD
|
2023-08-17 13:05:36 -04:00 |
|
Ed Minnix
|
76438f13b6
|
Trust Boundary Query
|
2023-08-17 13:05:36 -04:00 |
|
Michael Nebel
|
a95aad51bd
|
Merge pull request #13546 from michaelnebel/java/withoutelement
Java: Support for With[out]Element for MaD.
|
2023-08-15 10:03:03 +02:00 |
|
Anders Schack-Mulligen
|
0ca3f3308b
|
Merge pull request #13478 from aschackmull/java/varcapture
Java: Add proper support for variable capture flow.
|
2023-08-08 16:22:56 +02:00 |
|
Michael Nebel
|
0ed724eb13
|
Java: Make a flow summary for Set.clear using WithoutElement and introduce appropriate tests.
|
2023-08-08 11:10:08 +02:00 |
|
Jami
|
5862cd2378
|
Merge pull request #13889 from jcogs33/jcogs33/fix-some-models
Java: remove duplicate models
|
2023-08-07 08:46:18 -04:00 |
|
Tony Torralba
|
fb0102b763
|
Java: New models for JAX-RS
|
2023-08-07 11:52:23 +02:00 |
|
Jami Cogswell
|
19622aec49
|
Java: remove duplicate 'Files.newOutputStream' ai model
|
2023-08-04 14:06:57 -04:00 |
|
Jami Cogswell
|
e64d581f7a
|
Java: remove duplicate 'Files.newInputStream' ai model
|
2023-08-04 14:05:05 -04:00 |
|
Jami Cogswell
|
d2a24dee7f
|
Java: remove duplicate 'Files.delete' ai model
|
2023-08-04 14:02:59 -04:00 |
|
Jami Cogswell
|
516831aa41
|
Java: remove duplicate 'Files.move' ai model
|
2023-08-04 14:01:27 -04:00 |
|
Jami Cogswell
|
c510d33fbf
|
Java: remove duplicate 'Files.deleteIfExists' ai model
|
2023-08-04 13:52:18 -04:00 |
|
Michael Nebel
|
9c4d77a925
|
Java: Address review comments.
|
2023-08-04 13:47:30 +02:00 |
|
Michael Nebel
|
d3eb9c1325
|
Java: Add release note and address review comments.
|
2023-08-04 13:36:43 +02:00 |
|
Anders Schack-Mulligen
|
37455ec29e
|
Java: Replace ratpack test fix with general heuristic summary.
|
2023-08-03 10:04:06 +02:00 |
|
Anders Schack-Mulligen
|
70bef64e2a
|
Java: Fix ratpack flow.
|
2023-08-03 10:04:05 +02:00 |
|
Anders Schack-Mulligen
|
d1a616a70a
|
Java: Add proper support for variable capture flow.
|
2023-08-03 10:04:02 +02:00 |
|
Michael Nebel
|
a9bc23fa3e
|
Java: Add threat model configuration related extensible predicates and some initial tuples.
|
2023-08-01 12:56:13 +02:00 |
|
Michael Nebel
|
99ac98bffc
|
Java: Re-factor a model to use WithElement (this model is already tested in collections/B.java).
|
2023-08-01 12:03:44 +02:00 |
|
Michael Nebel
|
0604a85bb1
|
Java: Add WithoutElement model for List.clear and add appropriate test.
|
2023-08-01 12:03:44 +02:00 |
|
Tony Torralba
|
3bd4d34a47
|
Java: Remove superfluous generated models
|
2023-07-31 09:48:03 +02:00 |
|
Tony Torralba
|
2dff0ce5b4
|
Merge pull request #13712 from pwntester/java/new_struts2_models
[Java] New models for Struts2 framework
|
2023-07-28 14:31:25 +02:00 |
|