4115 Commits

Author	SHA1	Message	Date
Chris Smowton	e3559d8f93	Adjust test expectations	2024-07-28 10:27:11 +02:00
Chris Smowton	142d7ae005	Make test compatible with Servlet 2.5; use old Servlet stubs	2024-07-28 10:26:58 +02:00
Owen Mansel-Chan	c051d33cc7	Merge branch 'main' into dataflow/provenance-postprocess-qltest	2024-07-26 08:04:05 +01:00
RobbingDaHood	feb31d2006	Merge branch 'main' into 17052-second-try-do-not-expose-error-message	2024-07-25 18:13:49 +02:00
Daniel Winther Petersen	1c1ba7734f	Now alerts about exposing exception.getMessage() in servlet responses are split out of java/stack-trace-exposure into its own alert java/error-message-exposure because this is a better fit.	2024-07-25 18:12:45 +02:00
Jami	91f5f086fb	Merge pull request #17025 from jcogs33/jcogs33/java/adjust-url-syntheticfield ... Java: add TaintInheritingContent for URL synthetic fields	2024-07-25 12:11:39 -04:00
Anders Schack-Mulligen	86c63dbedf	Dataflow: Fix bug causing spurious flow for FeatureHasSinkCallContext.	2024-07-23 14:59:24 +02:00
Anders Schack-Mulligen	f598a0b607	Dataflow: Add test highlighting bug.	2024-07-23 14:34:33 +02:00
Owen Mansel-Chan	ff8bb2b1f8	Merge pull request #16760 from owen-mc/java/reverse-dns-separate-threat-model-kind ... Java: make a separate threat model kind for reverse DNS sources	2024-07-23 10:08:52 +01:00
Jami Cogswell	4790656b79	Java: add TaintInheritingContent for URL synthetic fields	2024-07-20 23:03:32 -04:00
Owen Mansel-Chan	2a5144d9d9	Improve tests for reverse DNS sources	2024-07-20 21:40:02 +01:00
Michael Nebel	2796597d1a	Code quality improvements.	2024-07-19 09:36:17 +02:00
Ed Minnix	ad4bca9975	Fix provenance in tests	2024-07-18 18:18:24 -04:00
Ed Minnix	62944ee473	Add tests for lastaflute framework	2024-07-18 17:41:02 -04:00
Owen Mansel-Chan	9a66e66d66	Merge branch 'main' into amammad-java-bombs	2024-07-18 21:28:23 +01:00
Michael Nebel	0bf1ed1d96	C#/Java: Update model generator expected output.	2024-07-18 16:35:40 +02:00
Michael Nebel	c9832df3c0	C#/Java: Add test for missing neutral summary generation.	2024-07-18 16:29:34 +02:00
Anders Schack-Mulligen	94078e851c	Shared: Add support for provenance pretty-printing as a qltest postprocess step.	2024-07-18 15:34:30 +02:00
Jami	39f0288e09	Merge pull request #16964 from jcogs33/jcogs33/add-toByteArray-summaries ... Java: add `IOUtils.toByteArray` summaries	2024-07-16 17:03:30 -04:00
Owen Mansel-Chan	e2356d9820	Merge pull request #16914 from owen-mc/java/android-app-detection ... Java: Improve Android app detection	2024-07-16 21:52:43 +01:00
Jami Cogswell	f90df85722	Java: update provenance numbers in tests again	2024-07-16 11:55:46 -04:00
Jami	a73170df49	Merge branch 'main' into jcogs33/add-toByteArray-summaries	2024-07-16 10:46:36 -04:00
Anders Schack-Mulligen	37d78249e7	Java: Update provenance ids.	2024-07-16 11:11:54 +02:00
Anders Schack-Mulligen	2bfd65f145	Java: update expected output	2024-07-16 11:11:54 +02:00
Anders Schack-Mulligen	b2f57b4b48	Java: Update expected output.	2024-07-16 11:11:53 +02:00
Anders Schack-Mulligen	dc64a08467	Java: Update test expectations for Object.clone().	2024-07-16 11:11:52 +02:00
Jami Cogswell	8f6d4be256	Java: update tests	2024-07-15 14:33:40 -04:00
am0o0	bf506f8a9e	remove redundent stubs	2024-07-13 18:06:02 +02:00
am0o0	71e1d63953	finilize tests	2024-07-13 18:00:50 +02:00
am0o0	d8e2d355df	categorize the new stubs	2024-07-13 17:25:38 +02:00
am0o0	8f7c690529	revert some mistakes	2024-07-13 17:03:24 +02:00
am0o0	1d1c476674	update tests and use TaintFlowTestArgString ... add stubs add missed sink models	2024-07-13 16:58:51 +02:00
Chris Smowton	1cb9f6370f	Use hasTaintFlow marker	2024-07-13 13:09:43 +02:00
Chris Smowton	059a1389c6	Run TaintedPath query on experimental tests	2024-07-13 13:09:26 +02:00
Chris Smowton	4e9a528df9	Move experimental tests	2024-07-13 13:09:08 +02:00
am0o0	025aa77e79	add the snappy missed sink	2024-07-13 11:15:45 +02:00
am0o0	3868b386f3	update inline tests	2024-07-13 10:47:42 +02:00
am0o0	0165696a1e	update tests	2024-07-13 10:33:35 +02:00
am0o0	c824aa4e45	delete pom.xml	2024-07-13 10:21:53 +02:00
Jami Cogswell	6b497da15f	Java: fix line number changes in tests	2024-07-11 15:33:09 -04:00
am0o0	dd4bce8e30	finilize tests	2024-07-09 19:48:58 +02:00
Owen Mansel-Chan	e2a6358048	Update tests so they still work	2024-07-07 00:24:28 +01:00
am0o0	fe1103d997	add stubs, upgrade test to inline test, update test files	2024-07-04 15:25:36 +02:00
am0o0	7e5f2e2a48	experimentalSinkModel to sinkModel, remove one path injection sink that already exist before	2024-07-03 08:55:12 +02:00
Michael Nebel	25b20186af	Merge pull request #16861 from michaelnebel/modelgen/sourcesinklift ... C#/Java: Do not lift source and sink models.	2024-07-02 08:50:31 +02:00
am0o0	7df59ffe6c	update tests, is not completed yet :)	2024-07-01 18:22:27 +02:00
Jami Cogswell	be565288f2	Java: update more test cases due to shifted alert provenance line numbers	2024-06-27 22:08:38 -04:00
Jami Cogswell	c73af7f789	Java: update some test cases due to shifted alert provenance line numbers	2024-06-27 21:07:35 -04:00
Michael Nebel	9cb7018215	Java: Update the model generator expected test output.	2024-06-27 11:35:07 +02:00
Michael Nebel	22e9ae2793	Java: Add some source/sink examples where lifting is applied.	2024-06-27 11:15:06 +02:00