Chris Smowton
5cb5ee026c
Fix pretty-printing of anonymous vars and multiple patterns; add test
2024-03-25 16:31:38 +00:00
Chris Smowton
f317f782ae
Add test for control-flow with mixed patterns, constants and fall-through
2024-03-25 16:31:38 +00:00
Chris Smowton
6cf956d07a
Add CFG test for anonymous variables and fall-throughs with pattern cases
2024-03-25 16:31:38 +00:00
Chris Smowton
cc8dcf63b0
Convert test to use an anonymous local
2024-03-25 16:31:38 +00:00
Chris Smowton
5243a62a41
Accept test changes
2024-03-25 16:31:37 +00:00
Owen Mansel-Chan
f4b3bae88b
Add test for ParseException use of tokenImage
2024-03-23 23:48:16 +00:00
Owen Mansel-Chan
63a04c056a
Add test with tokenImage as used in JavaCC
2024-03-23 21:30:33 +00:00
Tom Hvitved
fc55567d90
Merge pull request #15853 from hvitved/dataflow/get-location
...
Data flow: Replace `hasLocationInfo` with `getLocation`
2024-03-18 20:21:46 +01:00
Ian Lynagh
916b1e959e
Java: Add a test for MissingEnumInSwitch
2024-03-18 15:56:10 +00:00
Jami Cogswell
a8eb1d10f6
Java: remove experimental tests
2024-03-17 22:35:27 -04:00
Tony Torralba
9d44045e6f
Adjust test expectations
2024-03-14 09:41:34 +01:00
Jami Cogswell
1b01f26d09
Java: adjust BarrierPrefix to handle prepended chars
2024-03-13 16:28:45 -04:00
Jami Cogswell
5ac453eb38
Java: add spurious test case for StringBuilder.append
2024-03-13 16:28:45 -04:00
Jami Cogswell
04d27f2d65
Java: adjust prefix barriers
2024-03-13 16:28:44 -04:00
Jami Cogswell
e99cea340b
Java: update UrlPathBarrier to include FollowsBarrierPrefix
2024-03-13 16:28:44 -04:00
Jami Cogswell
a002674587
Java: clean up comments on test cases
2024-03-13 16:28:44 -04:00
Jami Cogswell
d220b3a298
Java: some updates to test cases
2024-03-13 16:28:43 -04:00
Jami Cogswell
911a61df22
Java: initial update of barrier and test cases to remove FN
2024-03-13 16:28:42 -04:00
Jami Cogswell
e75c96c0f9
Java: combine test cases; add test for StaplerResponse.forward
2024-03-13 16:28:41 -04:00
Jami Cogswell
09bc21dbd3
Java: rename 'UnsafeUrlForward' to 'UrlForward'
2024-03-13 16:28:41 -04:00
Jami Cogswell
915e106ab3
Java: remove path-injection related models and tests for now
2024-03-13 16:28:40 -04:00
Jami Cogswell
35a083ae9e
Java: update test cases to use inline expectations
2024-03-13 16:28:40 -04:00
Jami Cogswell
0d38a9625e
Java: copy files from experimental
2024-03-13 16:28:39 -04:00
Tom Hvitved
02ae2d1520
Java: Implement new data flow interface
2024-03-13 14:41:57 +01:00
Erik Krogh Kristensen
863e3f79e5
Merge pull request #15731 from erik-krogh/java-url
...
Java: More sanitizers for request-forgery
2024-03-12 19:31:52 +01:00
Chris Smowton
dae20ca50c
Explicitly import Lock
2024-03-07 09:54:17 +00:00
Owen Mansel-Chan
279605b486
Merge pull request #15786 from owen-mc/java/sensitive-logging-query-exclude-null-in-variable-name
...
Java: sensitive logging query exclude null in variable name
2024-03-04 12:14:42 +00:00
Owen Mansel-Chan
038afc4008
Merge pull request #15772 from owen-mc/java/model-generator-exclude-tostring
...
Java: do not generate models for `toString` and lambda flow methods
2024-03-04 07:57:48 +00:00
Owen Mansel-Chan
19ac9e089a
Add test
2024-03-03 21:03:41 +00:00
Owen Mansel-Chan
bf22c6dae0
Merge pull request #15766 from owen-mc/java/add-neutral-models
...
Java: add neutral models
2024-03-02 06:00:33 +00:00
Owen Mansel-Chan
5399d88d15
Accept test change: slight change in gen vs man modelgen stats
2024-03-01 14:22:00 +00:00
Owen Mansel-Chan
6e63df9e32
Accept test change: toString method no longer generated
2024-03-01 14:16:14 +00:00
Owen Mansel-Chan
0e1c45e84b
Accept test change: some more APIs have manual models now
2024-03-01 14:08:42 +00:00
Chris Smowton
051d63a5a9
Merge pull request #15740 from smowton/smowton/feature/call-and-type-telemetry
...
Java: add extraction quality telemetry; improve stringification of some erroneous expressions
2024-02-29 16:51:51 +00:00
Tony Torralba
47bf556223
Merge pull request #15709 from atorralba/atorralba/java/enable-widget-taint-steps
...
Java: Re-enable Widget.qll flow steps
2024-02-29 17:33:05 +01:00
Chris Smowton
ef9544cbef
Adjust test expectations now signature type-accesses are named
2024-02-29 15:33:29 +00:00
Chris Smowton
140c3189e3
Adjust test expectations
2024-02-29 14:59:46 +00:00
erik-krogh
b4b5ae2a2c
add some request-forgery sanitizers, inspired from C#
2024-02-27 10:05:26 +01:00
Tony Torralba
759b74791c
Java: Re-enable Widget.qll flow steps
...
The library Widget.qll was accidentally removed from the global context when its sources were migrated to models-as-data in #13136 . This re-adds it so that its flow steps are enabled again.
2024-02-23 13:07:35 +01:00
Joe Farebrother
2ebb80b632
Merge pull request #15548 from joefarebrother/android-local-auth-keys
...
Java: Add query for insecurely generated keys for local authentication.
2024-02-22 14:04:17 +00:00
Ian Lynagh
9948052fb6
Java: Properties: Add a test that used to give a stack overflow
2024-02-21 13:51:53 +00:00
Joe Farebrother
9ad05fe51c
Address reveiws - Add BAD example to doc, add doc example to tests and fix typo.
2024-02-16 12:00:51 +00:00
Anders Schack-Mulligen
03f7968dbf
Dataflow: Fix flow-feature bug.
2024-02-16 11:38:30 +01:00
Anders Schack-Mulligen
ba1a0bc320
Java: Add test highlighting problem.
2024-02-16 11:25:33 +01:00
Tony Torralba
90a9d82b9d
Java: Expand ExactPathSanitizer to work on the argument of 'equals' too
2024-02-15 10:00:24 +01:00
Asger F
faefa056eb
Merge pull request #15507 from asgerf/shared/outbarrier-bugfix
...
Shared: fix a bug in stateful outbarriers
2024-02-12 21:44:49 +01:00
Joe Farebrother
2eb93b7a3b
Add unit tests
2024-02-12 13:49:45 +00:00
Joe Farebrother
d8985f9f5b
Move tests for local auth to a folder
2024-02-12 13:49:45 +00:00
Joe Farebrother
75a2b9415c
Merge pull request #15481 from joefarebrother/android-local-auth
...
Java: Add query for insecure local authentication
2024-02-12 13:48:53 +00:00
Tony Torralba
cf7091ae5f
Merge branch 'main' into atorralba/java/open-redirect-sanitizer
2024-02-12 10:31:52 +01:00
