1163 Commits

Author	SHA1	Message	Date
haby0	363ad5b470	Fix error	2021-06-17 17:36:35 +08:00
haby0	3dd851fffb	expected	2021-06-17 15:20:03 +08:00
Tony Torralba	47fffb04a6	Merge branch 'main' into atorralba/promote-ognl-injection	2021-06-16 15:46:33 +02:00
Tony Torralba	91ba30a781	Merge branch 'main' into atorralba/promote-missing-jwt-signature-check	2021-06-16 15:46:14 +02:00
Tony Torralba	dab33b21fb	Merge branch 'main' into atorralba/promote-mvel-injection	2021-06-16 15:44:43 +02:00
Tony Torralba	bf2be6ec7c	Merge branch 'main' into atorralba/promote-jndi-injection	2021-06-16 15:34:37 +02:00
Tony Torralba	66a8f57784	Fix HttpsUrls tests affected by the new URL summary	2021-06-16 13:04:00 +02:00
Tony Torralba	af6bd0b963	Consider subtypes of ReaderSource	2021-06-16 13:01:40 +02:00
Tony Torralba	87dfc92aba	Add tests for CompilationUnit's subtypes	2021-06-16 13:01:40 +02:00
Tony Torralba	f3ef93fa8a	Make sinks more specific, improve tests	2021-06-16 13:01:39 +02:00
Tony Torralba	7ff4d368be	Fix tests	2021-06-16 13:01:39 +02:00
Tony Torralba	7883549c25	Use InlineExpectationsTest	2021-06-16 13:01:39 +02:00
Tony Torralba	356601ce15	Moved from experimental	2021-06-16 13:01:38 +02:00
haby0	c1ada6d85b	Merge branch 'main' into java/UnsafeDeserialization	2021-06-16 16:37:03 +08:00
Tony Torralba	e2918d55b5	Move tests back from internal repo	2021-06-16 10:09:44 +02:00
Anders Schack-Mulligen	96da85449d	Merge pull request #5823 from atorralba/promote-jexl-injection ... Java: Promote JEXL Injection query from experimental	2021-06-07 10:03:12 +02:00
Anders Schack-Mulligen	f73960da8f	Merge pull request #5788 from Marcono1234/marcono1234/stmt-toString ... Java: Override toString() for statements	2021-06-04 12:41:03 +02:00
Marcono1234	e0a45507f8	Java: Adjust toString() for statements	2021-06-03 16:27:36 +02:00
Marcono1234	7e778bc008	Java: Override toString() for statements ... Additionally remove redundant QLDoc which is inherited anyways.	2021-06-03 16:27:35 +02:00
Anders Schack-Mulligen	bd9e3d0fa9	Merge pull request #5751 from aschackmull/java/collection-flow ... Java: Convert all collection and array steps from taint flow to value flow.	2021-06-03 15:29:14 +02:00
Tony Torralba	56a429a5f9	Merge branch 'main' into promote-jexl-injection	2021-06-03 11:10:56 +02:00
Tony Torralba	34a8383c1a	Unused import	2021-06-03 10:22:53 +02:00
Anders Schack-Mulligen	8e6dd51f50	Merge pull request #5868 from Marcono1234/marcono1234/ignore-not-closing-char-array-closeable ... Java: Ignore char array based closeables for CloseReader.ql and CloseWriter.ql	2021-06-02 15:00:59 +02:00
Tony Torralba	d476459727	Use InlineExpectationsTest	2021-06-02 12:15:26 +02:00
Tony Torralba	59e6e1ffac	Moved from experimental	2021-06-02 09:58:30 +02:00
Anders Schack-Mulligen	43d1b0ab27	Java: Update qltests.	2021-06-01 11:47:52 +02:00
Alvaro Muñoz	735e4e4b7b	update failing tests	2021-05-28 15:13:18 +02:00
Tony Torralba	7dbdba28cc	Consider search methods with unsafe SearchControls	2021-05-21 15:21:04 +02:00
Tony Torralba	c1e71b60b4	Use InlineExpectationsTest	2021-05-20 12:00:11 +02:00
Tony Torralba	1351516e9a	Moved JNDI injection related files from experimental to standard	2021-05-19 11:32:51 +02:00
Tony Torralba	e58746508d	Merge branch 'main' into atorralba/promote-ognl-injection	2021-05-19 10:41:08 +02:00
Tony Torralba	34a55e77ef	Add missing subtype test	2021-05-18 09:38:35 +02:00
Tony Torralba	bc2370ae1d	Use InlineExpectationsTest for tests	2021-05-17 15:58:33 +02:00
Tony Torralba	3e4ccaf9a8	Move from experimental to standard	2021-05-17 10:41:54 +02:00
haby0	60fc607449	Modify ql	2021-05-14 18:17:05 +08:00
Tony Torralba	db732918af	Add taint step for setExpression	2021-05-13 15:01:36 +02:00
Tony Torralba	09b40601a7	Consider ExpressionAccessor	2021-05-12 12:32:38 +02:00
Anders Schack-Mulligen	a247ae4357	Merge pull request #5843 from JLLeitschuh/feat/JLL/improve_kryo_support ... [Java] Fix Kryo FP & Kryo 5 Support	2021-05-12 09:52:24 +02:00
haby0	12f47bcf24	Add UnsafeDeserialization	2021-05-12 12:37:16 +08:00
Marcono1234	8969da7775	Java: Improve not closing resource query; add tests	2021-05-11 19:32:02 +02:00
Tony Torralba	8754c85a57	Use InlineExpectationsTest	2021-05-11 16:23:12 +02:00
Tony Torralba	fc03b92e11	Moved from experimental to standard	2021-05-11 15:42:13 +02:00
Tony Torralba	d99b5bfc66	Reuse previous tests from experimental	2021-05-10 11:17:20 +02:00
Tony Torralba	c70503142f	Require JS enabled even when cross-origin access is enabled in the webviews	2021-05-10 09:45:59 +02:00
Tony Torralba	6884edf52a	Merge branch 'main' into atorralba/promote-unsafe-android-webview-fetch	2021-05-07 16:31:55 +02:00
luchua-bc	fc7d340a89	Query to detect hard-coded Azure credentials	2021-05-07 13:16:41 +00:00
Tony Torralba	dcee1daa31	Mark spurious test results	2021-05-07 13:17:04 +02:00
Tony Torralba	e78e5b9ee4	Merge branch 'main' into promote-jexl-injection	2021-05-07 12:36:49 +02:00
Tony Torralba	b37b15cea4	Re-structure imports, add some new comments to tests	2021-05-07 12:33:51 +02:00
Tony Torralba	2a501956b3	Mark a MISSING test result as suggested in code review	2021-05-07 11:17:51 +02:00