Ed Minnix
|
2eff6b351c
|
Add comment
|
2024-01-08 09:39:09 -05:00 |
|
Ed Minnix
|
16bb19e176
|
Add OWASP and CERT references
|
2024-01-08 09:39:08 -05:00 |
|
Ed Minnix
|
9f974415c0
|
Add references to CWE-454 (External Initialization of Trusted Variables)
|
2024-01-08 09:39:07 -05:00 |
|
Ed Minnix
|
97b29bb965
|
Add Java Tutorial reference
|
2024-01-08 09:39:06 -05:00 |
|
Edward Minnix III
|
938d52b86f
|
Docs review suggestions
Co-authored-by: Felicity Chapman <felicitymay@github.com>
|
2024-01-08 09:39:05 -05:00 |
|
Ed Minnix
|
e14be0e971
|
Add BAD markers to samples
|
2024-01-08 09:39:04 -05:00 |
|
Ed Minnix
|
4b9b27c395
|
change note
|
2024-01-08 09:38:52 -05:00 |
|
Edward Minnix III
|
18e8a27fca
|
Reworded name and description
|
2024-01-08 09:38:51 -05:00 |
|
Edward Minnix III
|
1f37e70d83
|
Fix typos
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2024-01-08 09:38:51 -05:00 |
|
Ed Minnix
|
51006aa088
|
Formatting fix
|
2024-01-08 09:38:50 -05:00 |
|
Ed Minnix
|
4fc6f710a4
|
Fix alert message
|
2024-01-08 09:38:48 -05:00 |
|
Ed Minnix
|
1550f5df2a
|
Environment variable injection query documentation
|
2024-01-08 09:38:47 -05:00 |
|
Ed Minnix
|
818c5de8d5
|
security-severity metadata
|
2024-01-08 09:38:46 -05:00 |
|
Ed Minnix
|
8ed3f3c865
|
Move to library
|
2024-01-08 09:38:44 -05:00 |
|
Ed Minnix
|
b482b36b5f
|
Initial ProcessBuilder support
|
2024-01-08 09:38:41 -05:00 |
|
Ed Minnix
|
93025cc8cf
|
Argument injection initial commit
|
2024-01-08 09:38:40 -05:00 |
|
github-actions[bot]
|
a6c8cc9551
|
Release preparation for version 2.16.0
|
2024-01-08 13:11:26 +00:00 |
|
Aditya Sharad
|
bbe3269b8c
|
Merge pull request #15189 from github/adityasharad/merge/3.12-main
Merge `rc/3.12` into `main`
|
2023-12-22 11:26:37 -08:00 |
|
Edward Minnix III
|
d6d76fa4f1
|
Merge pull request #15183 from egregius313/egregius313/java/fix-weak-hashing-adddition
Java: Fix minor error in `java/potentially-weak-cryptographic-algorithm`
|
2023-12-22 11:38:55 -05:00 |
|
Tony Torralba
|
67f8bcce44
|
Merge pull request #14752 from masterofnow/LoadClassNoSignatureCheck
Java: Insecure Loading of Class in Android App without Package Signature Checking
|
2023-12-22 10:24:34 +01:00 |
|
Tony Torralba
|
8ad787f3b8
|
Java: Generelize MaybeBrokenCryptoAlgorithmQuery.qll
|
2023-12-22 10:15:40 +01:00 |
|
Ed Minnix
|
8051cfcef5
|
Fix tests and fix getStringValue method
|
2023-12-21 22:48:08 -05:00 |
|
Aditya Sharad
|
b1803d0ac2
|
Merge rc/3.12 into main
|
2023-12-21 16:40:51 -08:00 |
|
masterofnow
|
0fd09759df
|
Added sample java file for qhelp to render correctly.
|
2023-12-22 08:31:23 +08:00 |
|
masterofnow
|
cb5733d647
|
Apply suggestions from code review
Update to documentation.
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2023-12-22 08:25:05 +08:00 |
|
masterofnow
|
7162540faf
|
Added options, .qhelp and .expected file for unit test.
|
2023-12-21 19:57:37 +08:00 |
|
Tony Torralba
|
39708524e7
|
Minor fixes
- Query ID
- MethodAccess -> MethodCall
- Redundant import
- Formatting
|
2023-12-20 15:31:09 +01:00 |
|
masterofnow
|
e85c4b5bf6
|
Update query from code review feedback to express it as a dataflow problem.
|
2023-12-20 18:28:16 +08:00 |
|
github-actions[bot]
|
8f72b0e4f7
|
Post-release preparation for codeql-cli-2.15.5
|
2023-12-19 10:32:57 +00:00 |
|
github-actions[bot]
|
19af35b29a
|
Release preparation for version 2.15.5
|
2023-12-18 21:22:44 +00:00 |
|
Edward Minnix III
|
56921a6e21
|
Merge pull request #14040 from egregius313/egregius313/weak-hashing-properties
Java: Add support for algorithm names specified in `.properties` files to `java/potentially-weak-cryptographic-algorithm`
|
2023-12-18 09:38:58 -05:00 |
|
Tony Torralba
|
9446249e94
|
Merge pull request #15012 from atorralba/atorralba/java/fix-missing-pinning-fp
Java: Fix FPs in Missing certificate pinning
|
2023-12-18 09:37:18 +01:00 |
|
Tony Torralba
|
0524289a73
|
Update java/ql/src/Security/CWE/CWE-327/MaybeBrokenCryptoAlgorithm.ql
|
2023-12-18 08:50:10 +01:00 |
|
masterofnow
|
4a77f45aa6
|
Minor adjustment to resolve error for codeql version 2.15.4
|
2023-12-16 12:41:39 +08:00 |
|
masterofnow
|
99b273d308
|
Apply suggestions from code review
Added suggestion from atorralba.
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2023-12-16 12:00:45 +08:00 |
|
Ed Minnix
|
02581a3850
|
Move class for getProperty method call to Properties.qll
|
2023-12-15 11:09:08 -05:00 |
|
Ed Minnix
|
fc53727b9d
|
Bump change note date
|
2023-12-15 11:09:08 -05:00 |
|
Ed Minnix
|
afefccf8f7
|
Update change note
|
2023-12-15 11:09:08 -05:00 |
|
Ed Minnix
|
0d12981d6a
|
Bump change note
|
2023-12-15 11:09:08 -05:00 |
|
Ed Minnix
|
078a33eecc
|
Updated change note
|
2023-12-15 11:09:07 -05:00 |
|
Ed Minnix
|
83c6ece405
|
Move weak hashing into MaybeBrokenCryptoAlgorithm
|
2023-12-15 11:09:07 -05:00 |
|
Ed Minnix
|
c20ea1f629
|
Bump change note date
|
2023-12-15 11:09:07 -05:00 |
|
Ed Minnix
|
cb0ea350b5
|
Improve docs
|
2023-12-15 11:09:07 -05:00 |
|
Ed Minnix
|
0efca8200d
|
Weak Hashing query wording
|
2023-12-15 11:09:07 -05:00 |
|
Ed Minnix
|
86b57a11ac
|
Bump change note date
|
2023-12-15 11:09:07 -05:00 |
|
Ed Minnix
|
93cf5b8eb9
|
Weak Hashing Property initial query
|
2023-12-15 11:09:07 -05:00 |
|
Anders Schack-Mulligen
|
7623432c76
|
Java: Remove/deprecate FlowStateString-based extension points.
|
2023-12-14 15:15:58 +01:00 |
|
Tom Hvitved
|
c8b4a215bc
|
Merge pull request #14573 from hvitved/flow-summary-impl-param
Move `FlowSummaryImpl.qll` to `dataflow` pack
|
2023-12-14 12:24:15 +01:00 |
|
Jeroen Ketema
|
99e65df6ce
|
Merge remote-tracking branch 'upstream/rc/3.12' into mb12
|
2023-12-13 15:43:39 +01:00 |
|
masterofnow
|
e1b8fabf7f
|
Use global instead of local taint tracking.
|
2023-12-13 13:50:34 +08:00 |
|