Ed Minnix
9c15cf18e8
Refactor deprecated predicates to use new classes
...
Modified the predicates in `SensitiveApi` to rely on the new classes
which are using models as data. This allows us to remove the old
predicates containing the pre-MaD versions of the models.
2023-10-25 14:31:55 -04:00
Edward Minnix III
72a1289eba
Rename class to CredentialsSinkNode to better align with naming convention
...
Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com >
2023-10-25 14:31:54 -04:00
Ed Minnix
dbb5aa9aad
Change note
2023-10-25 14:31:54 -04:00
Tony Torralba
9f7a8aa18c
Update MaD Declarations after Triage
2023-10-24 17:42:03 +02:00
Chris Smowton
efb63aada3
Add change note
2023-10-24 11:45:41 +01:00
Tony Torralba
cd10dc8a27
Java: Added up to date models for Spring's ResponseEntity
2023-10-23 16:06:11 +02:00
Dave Bartolomeo
712f7758cf
Merge branch 'main' into post-release-prep/codeql-cli-2.15.1
2023-10-19 12:14:07 -04:00
Stephan Brandauer
9d719aa44e
Merge pull request #13444 from github/java/update-mad-decls-after-triage-2023-06-13T14-50-57
...
Java: Update MaD Declarations after Triage
2023-10-17 13:54:10 +02:00
Tony Torralba
96d6e8e3f2
Update change note
2023-10-17 11:57:53 +02:00
github-actions[bot]
3b3c036626
Release preparation for version 2.15.1
2023-10-16 17:49:39 +00:00
Ed Minnix
31c04b50f7
Change note
2023-10-12 09:58:09 -04:00
Henry Mercer
1a370bfbbe
Merge pull request #14443 from github/post-release-prep/codeql-cli-2.15.0
...
Post-release preparation for codeql-cli-2.15.0
2023-10-11 17:39:04 +01:00
Erik Krogh Kristensen
4489e2bf28
Merge pull request #14403 from erik-krogh/dDEps
...
All: delete outdated deprecations
2023-10-09 21:04:55 +02:00
erik-krogh
a7ab9fd93b
add change-notes
2023-10-09 09:43:06 +02:00
Marcono1234
f3e5045259
Java: Add predicate MemberRefExpr::getReceiverExpr
2023-10-07 14:53:07 +02:00
Edward Minnix III
8e653d01a8
Merge pull request #14127 from egregius313/egregius313/java/mad/localuserinput
...
Java: Convert implementations of `LocalUserInput` to Models-as-Data
2023-10-04 12:55:44 -04:00
Ed Minnix
e2a14c7616
Add note about results to change note
2023-10-04 11:08:40 -04:00
github-actions[bot]
9fe993bec3
Release preparation for version 2.15.0
2023-10-04 14:15:27 +00:00
Ed Minnix
581d410304
Add change note
2023-10-03 22:29:00 -04:00
Henry Mercer
f3847b3f51
Merge branch 'main' into henrymercer/rc-3.11-mergeback
2023-10-03 16:30:23 +01:00
Anders Schack-Mulligen
15e1098791
Java: Add change note.
2023-09-28 14:28:24 +02:00
github-actions[bot]
0a3670727f
Release preparation for version 2.14.6
2023-09-19 11:40:30 +00:00
Tony Torralba
1e95a5a38a
Java: Consider AssignOps in ArithExpr
2023-09-19 12:15:59 +02:00
yoff
4a37c2fc3a
Merge pull request #13778 from geoffw0/javaparsemode
...
Java: Understand multiple parse mode flags specified in a regular expression string
2023-09-18 14:22:59 +02:00
Tony Torralba
b08e410f45
Merge pull request #14029 from atorralba/atorralba/apache-cxf-models
...
Java: Add new Apache CXF models
2023-09-18 10:54:05 +02:00
Geoffrey White
1c81bd52e6
Java: Change note.
2023-09-13 17:51:26 +01:00
Ian Lynagh
2b9a425468
Kotlin: Support 1.9.20
2023-09-12 18:28:33 +01:00
github-actions[bot]
abf2b12b1c
Release preparation for version 2.14.4
2023-09-05 16:56:14 +00:00
Dave Bartolomeo
3343b78015
Merge pull request #14074 from github/post-release-prep/codeql-cli-2.14.3
...
Post-release preparation for codeql-cli-2.14.3
2023-08-28 13:34:10 -04:00
Tony Torralba
25ac87279e
Add change note
2023-08-25 11:17:54 +02:00
Ian Lynagh
5dff1852e1
Kotlin: We now support 1.9.10
2023-08-24 17:36:45 +01:00
Anders Schack-Mulligen
7af1e96943
Merge pull request #14032 from aschackmull/java/mad-nestednames
...
Java: Use nested names in MaD signatures.
2023-08-24 13:53:55 +02:00
Tony Torralba
6b58d11eeb
Merge pull request #13900 from atorralba/atorralba/java/jaxws-getaremotemethod-improv
...
Java: Improve `JaxWsEndpoint::getARemoteMethod`
2023-08-24 13:37:15 +02:00
Tony Torralba
8c32919381
Merge pull request #13903 from atorralba/atorralba/jaxrs-mad-models
...
Java: New models for JAX-RS
2023-08-24 11:43:13 +02:00
Anders Schack-Mulligen
736c4beb9e
Java: Add change note.
2023-08-23 13:26:41 +02:00
Kristen Newbury
5e01e1d464
Java: add sanitizer to command injection query
2023-08-21 12:33:05 -04:00
github-actions[bot]
098dfb4242
Release preparation for version 2.14.3
2023-08-18 14:48:15 +00:00
Ed Minnix
cafd08521e
Add change note
2023-08-15 23:46:12 -04:00
Michael Nebel
a95aad51bd
Merge pull request #13546 from michaelnebel/java/withoutelement
...
Java: Support for With[out]Element for MaD.
2023-08-15 10:03:03 +02:00
Henry Mercer
1213eba630
Merge branch 'main' into post-release-prep/codeql-cli-2.14.2
2023-08-11 13:54:55 +01:00
Anders Schack-Mulligen
0ca3f3308b
Merge pull request #13478 from aschackmull/java/varcapture
...
Java: Add proper support for variable capture flow.
2023-08-08 16:22:56 +02:00
github-actions[bot]
79c90fa36a
Release preparation for version 2.14.2
2023-08-07 18:08:52 +00:00
Tony Torralba
fb0102b763
Java: New models for JAX-RS
2023-08-07 11:52:23 +02:00
Tony Torralba
43b9199734
Java: Improved JaxWsEndpoint::getARemoteMethod
2023-08-07 10:21:58 +02:00
Ed Minnix
23e2eb11dd
Change note
2023-08-07 00:23:58 -04:00
Michael Nebel
d3eb9c1325
Java: Add release note and address review comments.
2023-08-04 13:36:43 +02:00
Anders Schack-Mulligen
d1a616a70a
Java: Add proper support for variable capture flow.
2023-08-03 10:04:02 +02:00
Tony Torralba
41f1315da9
Merge pull request #13772 from atorralba/atorralba/java/inputstream-wrapper-read-step
...
Java: Add taint steps for InputStream wrappers
2023-07-31 11:12:43 +02:00
Tony Torralba
08cba7dc5f
Merge pull request #13713 from pwntester/java/struts2_source_taint_inheriting
...
[Java] Implement field taint inheritance for Struts2 unmarshalled objects
2023-07-28 16:46:27 +02:00
Tony Torralba
2dff0ce5b4
Merge pull request #13712 from pwntester/java/new_struts2_models
...
[Java] New models for Struts2 framework
2023-07-28 14:31:25 +02:00
