erik-krogh
|
de8384d904
|
revert alert message change to java/unused-local-variable
|
2022-08-23 11:14:58 +02:00 |
|
Tony Torralba
|
e3c1101b79
|
Merge pull request #10136 from atorralba/atorralba/redos-cwe-tag
Java: Add CWE-1333 tag to Java ReDoS queries
|
2022-08-23 11:07:51 +02:00 |
|
erik-krogh
|
305a23b952
|
apply suggestion from review
|
2022-08-23 11:05:32 +02:00 |
|
erik-krogh
|
82a5b7838c
|
don't add deprecated alias in experimental folder
|
2022-08-23 10:38:23 +02:00 |
|
Joe Farebrother
|
ac79866799
|
Merge pull request #9982 from joefarebrother/rsa-without-oaep
Java: Add query for RSA without OAEP
|
2022-08-23 09:14:46 +01:00 |
|
Tony Torralba
|
6b4cfbbacd
|
Add change note
|
2022-08-23 10:00:10 +02:00 |
|
Tony Torralba
|
cd10f559ca
|
Add CWE-1333 tag to Java ReDoS queries
|
2022-08-23 09:56:59 +02:00 |
|
Tony Torralba
|
da3288fced
|
Move change note to src
|
2022-08-23 09:40:34 +02:00 |
|
erik-krogh
|
f7846a598e
|
add change-notes
|
2022-08-23 07:54:01 +02:00 |
|
erik-krogh
|
684a987abf
|
update java/unused-import to match python
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
54268f4424
|
update java/static-array to match csharp
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
8899c1be04
|
update java/unassigned-field to match csharp
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
280b101caa
|
update java/useless-assignment-to-local to match go
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
034d197e01
|
update {java/rb}/xxe to match python/javascript
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
5a0183f1e2
|
update java/password-in-configuration to match csharp
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
064c9a6938
|
update {cs/java}/todo-comment to match javascript
|
2022-08-22 21:41:46 +02:00 |
|
erik-krogh
|
55c8863e92
|
update java/sql-injection to match go/javascript/python/ruby
|
2022-08-22 21:41:45 +02:00 |
|
erik-krogh
|
b471a401cc
|
update {rb/js/java}/unused-parameter to match python
|
2022-08-22 21:41:45 +02:00 |
|
erik-krogh
|
698ccd8850
|
update {cpp/java}/unused-local to match python
|
2022-08-22 21:41:45 +02:00 |
|
erik-krogh
|
e52fa9a469
|
update {cs/java}/regex-injection to match javascript
|
2022-08-22 21:41:45 +02:00 |
|
erik-krogh
|
e89e0eb7fb
|
make some acronyms camelCase
|
2022-08-22 21:22:35 +02:00 |
|
luchua-bc
|
3e382fd47c
|
Optimize the query
|
2022-08-22 17:04:03 +00:00 |
|
Jami Cogswell
|
733078183e
|
update query description
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
f34e23bdba
|
adjusted comments and precision level
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
eacce03073
|
resolved merge conflict in AndroidManifest lib
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
0934c1d184
|
resolved merge conflict in AndroidManifest lib
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
9968d5d816
|
updated predicates
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
58d3d89b2e
|
resolved merge conflict in AndroidManifest
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
084b9830bc
|
resolved merge conflict in AndroidManifest
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
55bd9f943f
|
minor wording updates in help file
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
a99d7ffaaf
|
minor wording update in change note
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
33c48ec685
|
updated change note
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
10fa687e26
|
updated help file and unit tests
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
eea1089ee0
|
resolved merge conflict in AndroidManifest
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
60921a0355
|
switched to checking for permission attr in application elem instead of in manifest elem
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
a6ecac6e00
|
third draft with category launcher and permission element excluded
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
8d5bbc458f
|
first draft of query and tests
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
3e09d86a4f
|
adding starter files
|
2022-08-22 12:41:22 -04:00 |
|
erik-krogh
|
ce9f69a639
|
rename all occurrences of XML to Xml
|
2022-08-22 14:08:31 +02:00 |
|
Sebastian Bauersfeld
|
2ec3746861
|
Address PR comments.
|
2022-08-19 17:33:35 +07:00 |
|
Sebastian Bauersfeld
|
f6d42bd3c6
|
Allow blacklist sanitizers.
|
2022-08-19 17:33:35 +07:00 |
|
Sebastian Bauersfeld
|
11f527ea5b
|
Fix up query tests.
|
2022-08-19 17:33:35 +07:00 |
|
Erik Krogh Kristensen
|
4f93f2b9ba
|
Merge pull request #10076 from erik-krogh/ql-for-ql-fixes
various QL-for-QL fixes
|
2022-08-18 15:46:48 +02:00 |
|
Anders Schack-Mulligen
|
61a2c0dab5
|
Merge pull request #10084 from aschackmull/java/numericcasttainted-barrier
Java: Move sink-constraints into the configuration in NumericCastTainted.ql.
|
2022-08-18 15:22:00 +02:00 |
|
Joe Farebrother
|
e8f027dab2
|
Apply docs suggestions from code review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2022-08-18 14:21:40 +01:00 |
|
erik-krogh
|
9e7c0c6ab9
|
revert changing imports in java/
|
2022-08-18 10:19:12 +02:00 |
|
Anders Schack-Mulligen
|
37e5f0438c
|
Java: Add change note.
|
2022-08-18 09:19:32 +02:00 |
|
erik-krogh
|
4bc10f9b5c
|
explicitly import required frameworks that were previously implicitly imported
|
2022-08-18 08:40:46 +02:00 |
|
Anders Schack-Mulligen
|
f6eccd390e
|
Java: Move sink-constraints into the configuration.
|
2022-08-17 15:06:55 +02:00 |
|
erik-krogh
|
14d83ab1b5
|
make the framework imports in FlowSources.qll private
|
2022-08-17 13:50:08 +02:00 |
|