27 Commits

Author	SHA1	Message	Date
Michael Nebel	404ca27aec	Java: Move non-experimental models out of the experimental folder.	2024-11-11 10:08:45 +01:00
Chris Smowton	15989ce213	Merge pull request #14089 from am0o0/amammad-java-JWT ... Java: JWT decoding without verification	2024-08-21 14:14:08 +01:00
am0o0	d88b310b0e	add getCredentials method of AuthenticationToken as a remote source	2024-08-16 15:41:19 +02:00
am0o0	1d1c476674	update tests and use TaintFlowTestArgString ... add stubs add missed sink models	2024-07-13 16:58:51 +02:00
am0o0	7e5f2e2a48	experimentalSinkModel to sinkModel, remove one path injection sink that already exist before	2024-07-03 08:55:12 +02:00
am0o0	412472e9a4	add zip4j	2024-06-08 01:14:04 +02:00
am0o0	ceea475c45	add new s3 and spring IO path injection sinks	2024-06-08 01:04:20 +02:00
Owen Mansel-Chan	83249cd9c2	Fix grammar in comment	2024-05-02 09:59:48 +01:00
Owen Mansel-Chan	16dcc0969b	Standardise comment explaining why extensible predicates must be defined	2024-05-01 22:00:01 +01:00
Owen Mansel-Chan	09e59ccf44	Name files with empty definitions of MaD extensible predicates to erowdmpty.model.yml	2024-05-01 21:39:38 +01:00
Jami Cogswell	658fffeac1	Java: remove experimental files	2024-03-17 22:03:59 -04:00
Tony Torralba	a276cc3094	Convert all command injection sinks to MaD format	2023-05-25 11:41:32 +02:00
Jami	3c74c8bbe0	Merge pull request #13019 from jcogs33/jcogs33/url-open-stream-updates ... Java: switch `url-open-stream` sink models to `experimentalSinkModel`	2023-05-04 15:07:44 -04:00
Jami Cogswell	78661f4ec9	Java: remove hardcoded-jwt-key summaries	2023-05-03 16:09:30 -04:00
Jami Cogswell	917268e7e6	Java: activate the models in openstream query	2023-05-03 09:57:45 -04:00
Jami Cogswell	f8b39fda2e	Java: switch url-open-stream models to experimentalSinkModel	2023-05-03 09:11:24 -04:00
Michael Nebel	9039a468cb	Java: Update models that uses -1 in a range.	2023-03-20 10:14:20 +01:00
Michael Nebel	e86f1e4961	Java: Replace Argument[-1] with Argument[this].	2023-03-20 10:14:20 +01:00
Michael Nebel	bc02adb400	Java: Make the corresponding rename in all the data extensions.	2022-12-14 13:48:31 +01:00
Michael Nebel	b96540c937	Java: Convert permissve-dot-regex-query to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	91840c613e	Java: Convert unsafe-url-forward to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	aed5ee4edc	Java: Convert thread-resource-abuse to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	07578f11d4	Java: Convert hardcoded-jwt-key models to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	ab12b6cc2b	Java: Convert android-web-resource-response to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	5c15ad412c	Java: Convert log4j-injection to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	665d40dc4b	Java: Convert file-path-injection to data extensions.	2022-11-28 12:30:35 +01:00
Michael Nebel	b61f515af2	Jave: Make support for query specific models.	2022-11-28 12:30:35 +01:00