Owen Mansel-Chan
|
cd0af0fc57
|
Ignore types with methods which have annotations
The motivation is test classes in JUnit 4 and 5 are currently FPs for this. They have methods with `@Test`, so this should fix the FPs.
|
2024-07-30 16:29:35 +01:00 |
|
Owen Mansel-Chan
|
050dcb1370
|
Add some tests for java/unused-reference-type
|
2024-07-30 16:29:11 +01:00 |
|
Owen Mansel-Chan
|
e259b25428
|
Add "tokenizer" to sensitive variable name FPs
|
2024-07-30 15:38:32 +01:00 |
|
Owen Mansel-Chan
|
bdff0fdcc5
|
Add test for "tokenizer"
|
2024-07-30 15:37:46 +01:00 |
|
Owen Mansel-Chan
|
0d71072f94
|
Make test more compact
|
2024-07-30 15:36:59 +01:00 |
|
am0o0
|
9662950405
|
add comments for FPs
|
2024-07-30 13:24:46 +02:00 |
|
am0o0
|
4dc1a10f71
|
update tests for zip4j, add aditional flow steps for zip4j, remove BombTypeInputStream class since we don't need it anymore, add a predicate which was for testing porpose and was junk
|
2024-07-29 18:10:04 +02:00 |
|
Jami Cogswell
|
e226da4f04
|
Java: use post-process provenance pretty-printing in .ql library-tests
|
2024-07-29 11:46:28 -04:00 |
|
Jami Cogswell
|
bab89c46b6
|
Java: use post-process provenance pretty-printing in library-tests
|
2024-07-28 18:13:58 -04:00 |
|
Jami Cogswell
|
0a382bf0cf
|
Java: use post-process provenance pretty-printing in experimental/query-tests
|
2024-07-28 18:13:20 -04:00 |
|
Jami Cogswell
|
c70d39539e
|
Java: use post-process provenance pretty-printing in query-tests
|
2024-07-28 18:12:17 -04:00 |
|
am0o0
|
c8749ff82e
|
Merge branch 'amammad-java-bombs' of https://github.com/am0o0/codeql into amammad-java-bombs
|
2024-07-28 12:15:23 +02:00 |
|
am0o0
|
209fa1a10a
|
update tests
|
2024-07-28 12:15:07 +02:00 |
|
am0o0
|
7689db7d42
|
change apache commons sink
|
2024-07-28 12:09:33 +02:00 |
|
am0o0
|
1b97804f45
|
update tests
|
2024-07-28 11:45:48 +02:00 |
|
Am
|
96c142bf0a
|
Merge branch 'main' into amammad-java-JWT
|
2024-07-28 13:03:23 +03:30 |
|
am0o0
|
6538a06f29
|
update tests
|
2024-07-28 11:30:59 +02:00 |
|
am0o0
|
46ddddc8cf
|
Merge tag 'codeql-cli/v2.18.1' into amammad-java-JWT
Compatible with CodeQL CLI 2.18.1
|
2024-07-28 11:23:20 +02:00 |
|
am0o0
|
494f0b709e
|
Merge branch 'main' into amammad-java-JWT
|
2024-07-28 10:37:26 +02:00 |
|
Chris Smowton
|
e3559d8f93
|
Adjust test expectations
|
2024-07-28 10:27:11 +02:00 |
|
Chris Smowton
|
142d7ae005
|
Make test compatible with Servlet 2.5; use old Servlet stubs
|
2024-07-28 10:26:58 +02:00 |
|
Owen Mansel-Chan
|
c051d33cc7
|
Merge branch 'main' into dataflow/provenance-postprocess-qltest
|
2024-07-26 08:04:05 +01:00 |
|
RobbingDaHood
|
feb31d2006
|
Merge branch 'main' into 17052-second-try-do-not-expose-error-message
|
2024-07-25 18:13:49 +02:00 |
|
Daniel Winther Petersen
|
1c1ba7734f
|
Now alerts about exposing exception.getMessage() in servlet responses are split out of java/stack-trace-exposure into its own alert java/error-message-exposure because this is a better fit.
|
2024-07-25 18:12:45 +02:00 |
|
Jami
|
91f5f086fb
|
Merge pull request #17025 from jcogs33/jcogs33/java/adjust-url-syntheticfield
Java: add TaintInheritingContent for URL synthetic fields
|
2024-07-25 12:11:39 -04:00 |
|
Anders Schack-Mulligen
|
86c63dbedf
|
Dataflow: Fix bug causing spurious flow for FeatureHasSinkCallContext.
|
2024-07-23 14:59:24 +02:00 |
|
Anders Schack-Mulligen
|
f598a0b607
|
Dataflow: Add test highlighting bug.
|
2024-07-23 14:34:33 +02:00 |
|
Owen Mansel-Chan
|
ff8bb2b1f8
|
Merge pull request #16760 from owen-mc/java/reverse-dns-separate-threat-model-kind
Java: make a separate threat model kind for reverse DNS sources
|
2024-07-23 10:08:52 +01:00 |
|
Jami Cogswell
|
4790656b79
|
Java: add TaintInheritingContent for URL synthetic fields
|
2024-07-20 23:03:32 -04:00 |
|
Owen Mansel-Chan
|
2a5144d9d9
|
Improve tests for reverse DNS sources
|
2024-07-20 21:40:02 +01:00 |
|
Michael Nebel
|
2796597d1a
|
Code quality improvements.
|
2024-07-19 09:36:17 +02:00 |
|
Ed Minnix
|
ad4bca9975
|
Fix provenance in tests
|
2024-07-18 18:18:24 -04:00 |
|
Ed Minnix
|
62944ee473
|
Add tests for lastaflute framework
|
2024-07-18 17:41:02 -04:00 |
|
Owen Mansel-Chan
|
9a66e66d66
|
Merge branch 'main' into amammad-java-bombs
|
2024-07-18 21:28:23 +01:00 |
|
Michael Nebel
|
0bf1ed1d96
|
C#/Java: Update model generator expected output.
|
2024-07-18 16:35:40 +02:00 |
|
Michael Nebel
|
c9832df3c0
|
C#/Java: Add test for missing neutral summary generation.
|
2024-07-18 16:29:34 +02:00 |
|
Anders Schack-Mulligen
|
94078e851c
|
Shared: Add support for provenance pretty-printing as a qltest postprocess step.
|
2024-07-18 15:34:30 +02:00 |
|
Jami
|
39f0288e09
|
Merge pull request #16964 from jcogs33/jcogs33/add-toByteArray-summaries
Java: add `IOUtils.toByteArray` summaries
|
2024-07-16 17:03:30 -04:00 |
|
Owen Mansel-Chan
|
e2356d9820
|
Merge pull request #16914 from owen-mc/java/android-app-detection
Java: Improve Android app detection
|
2024-07-16 21:52:43 +01:00 |
|
Jami Cogswell
|
f90df85722
|
Java: update provenance numbers in tests again
|
2024-07-16 11:55:46 -04:00 |
|
Jami
|
a73170df49
|
Merge branch 'main' into jcogs33/add-toByteArray-summaries
|
2024-07-16 10:46:36 -04:00 |
|
Anders Schack-Mulligen
|
37d78249e7
|
Java: Update provenance ids.
|
2024-07-16 11:11:54 +02:00 |
|
Anders Schack-Mulligen
|
2bfd65f145
|
Java: update expected output
|
2024-07-16 11:11:54 +02:00 |
|
Anders Schack-Mulligen
|
b2f57b4b48
|
Java: Update expected output.
|
2024-07-16 11:11:53 +02:00 |
|
Anders Schack-Mulligen
|
dc64a08467
|
Java: Update test expectations for Object.clone().
|
2024-07-16 11:11:52 +02:00 |
|
Jami Cogswell
|
8f6d4be256
|
Java: update tests
|
2024-07-15 14:33:40 -04:00 |
|
am0o0
|
bf506f8a9e
|
remove redundent stubs
|
2024-07-13 18:06:02 +02:00 |
|
am0o0
|
71e1d63953
|
finilize tests
|
2024-07-13 18:00:50 +02:00 |
|
am0o0
|
d8e2d355df
|
categorize the new stubs
|
2024-07-13 17:25:38 +02:00 |
|
am0o0
|
8f7c690529
|
revert some mistakes
|
2024-07-13 17:03:24 +02:00 |
|