Nora Dimitrijević
|
49e03b4dfd
|
[TEST] Java: UnsafeCertTrust: convert test to qlref
|
2025-07-17 18:58:56 +02:00 |
|
Nora Dimitrijević
|
7aced48443
|
[TEST] Java: LogInjection: convert test to qlref
|
2025-07-17 18:58:54 +02:00 |
|
Nora Dimitrijević
|
5c2cf79785
|
[TEST] Java: CWE-020/ExternalAPI: new test based on qhelp
|
2025-07-17 18:58:52 +02:00 |
|
Owen Mansel-Chan
|
805e31fdb9
|
Update test expectations
|
2025-07-16 15:25:45 +01:00 |
|
Owen Mansel-Chan
|
fdd1e3fefe
|
Use MaD models for unsafe deserialization sinks when possible
Many of the unsafe deserialization sinks have to stay defined in QL
because they have custom logic that cannot be expressed in MaD models.
|
2025-07-16 14:42:07 +01:00 |
|
Owen Mansel-Chan
|
8e4bd1a102
|
Add sink for ObjectInput.readObject to make test pass
|
2025-07-11 11:05:38 +01:00 |
|
Owen Mansel-Chan
|
34fae324a0
|
Add test for ObjectInput.readObject
|
2025-07-11 11:03:47 +01:00 |
|
Tamás Vajk
|
1351f57d2b
|
Merge pull request #19998 from tamasvajk/quality/label-in-switch
Java: Add query to detect non-case labels in switch statements
|
2025-07-10 14:13:38 +02:00 |
|
Tamas Vajk
|
5f7d746266
|
Java: Add query to detect non-case labels in switch statements
|
2025-07-08 14:53:39 +02:00 |
|
Tamas Vajk
|
09a2aeead6
|
Java: Add query to detect special characters in string literals
|
2025-07-08 13:28:18 +02:00 |
|
Tamas Vajk
|
813ce7d3f8
|
Rename query
|
2025-07-08 11:28:12 +02:00 |
|
Tamas Vajk
|
82fe647a40
|
Improve alert message
|
2025-07-08 11:28:11 +02:00 |
|
Tamas Vajk
|
a2d4f58af7
|
Use inline test expectations
|
2025-07-08 11:28:10 +02:00 |
|
Tamas Vajk
|
2cd0c64e41
|
Improve query quality
|
2025-07-08 11:28:09 +02:00 |
|
Tamas Vajk
|
e0cb1792bd
|
Java: Add 'Useless serialization member in record class' query
|
2025-07-08 11:28:09 +02:00 |
|
Tom Hvitved
|
6fdec47e83
|
Java: Use MaD in log injection test
|
2025-07-08 10:25:58 +02:00 |
|
Jami Cogswell
|
87ab4d0160
|
Java: remove java/run-method-called-on-java-lang-thread-directly
using existing query java/call-to-thread-run instead
|
2025-06-29 22:42:31 -04:00 |
|
Jami Cogswell
|
12e7bbbae8
|
Java: update existing tests to services tests
|
2025-06-29 22:41:47 -04:00 |
|
Jami Cogswell
|
1172f82a4b
|
Java: update existing tests to inline expectations
|
2025-06-29 22:21:41 -04:00 |
|
Jami Cogswell
|
7a2023b863
|
Java: move original files
|
2025-06-29 22:13:49 -04:00 |
|
Nora Dimitrijević
|
e0b3a2c5f9
|
Java: convert ArbitraryApkInstallation test to .qlref
|
2025-06-26 13:22:05 +02:00 |
|
Tamás Vajk
|
ae36f94d5e
|
Merge pull request #19844 from tamasvajk/tamasvajk/threadpoolexecutor
Java: Add `java/javautilconcurrentscheduledthreadpoolexecutor` query for zero thread pool size
|
2025-06-26 12:36:09 +02:00 |
|
Anders Schack-Mulligen
|
326f2b0498
|
Java: Accept qltest change showing FP removal.
|
2025-06-26 11:03:39 +02:00 |
|
Anders Schack-Mulligen
|
1d4c8197ec
|
Java: Fix assert CFG by properly tagging the false successor.
|
2025-06-26 10:18:14 +02:00 |
|
Anders Schack-Mulligen
|
4645856f09
|
Java: document FP
|
2025-06-26 07:17:36 +02:00 |
|
Anders Schack-Mulligen
|
5c0dcd980d
|
Java: Switch to the shared Guards library.
|
2025-06-26 07:17:34 +02:00 |
|
Nora Dimitrijević
|
690446149a
|
Java: add CleartextStorageCookie test
Given that it's a non-path-problem dataflow query, the InlineExpectationsTest is not as useful.
|
2025-06-24 18:12:19 +02:00 |
|
Nora Dimitrijević
|
e213e3fc37
|
Java: convert ImplicitPendingIntents test to .qlref
|
2025-06-24 16:42:37 +02:00 |
|
Nora Dimitrijević
|
e0311e26c6
|
Java: convert ImproperIntentVerification test to .qlref
It's a non-path query, so the InlineExpectationsTest postprocessor doesn't do anything.
|
2025-06-24 16:42:35 +02:00 |
|
Nora Dimitrijević
|
aac4f63e9a
|
Java: convert RequestForgery test to .qlref
|
2025-06-24 16:42:32 +02:00 |
|
Nora Dimitrijević
|
7f05b72e10
|
Java: convert OgnlInjection test to .qlref
|
2025-06-24 16:42:30 +02:00 |
|
Nora Dimitrijević
|
cadfd0dcaa
|
Java: convert RsaWithoutOaep test to .qlref
|
2025-06-24 16:42:28 +02:00 |
|
Nora Dimitrijević
|
b7e47e2cf3
|
Java: convert PolynomialReDoS and RegexInjection tests to .qlref
Leaves ReDoS.ql unmodified since it's not a dataflow query; just moves it to its own directory.
|
2025-06-24 16:42:26 +02:00 |
|
Nora Dimitrijević
|
f5c7ef6ab4
|
Java: convert XPathInjection test to .qlref
|
2025-06-24 16:42:23 +02:00 |
|
Nora Dimitrijević
|
162b1c51a9
|
Java: convert XXE test to .qlref
|
2025-06-24 16:42:21 +02:00 |
|
Nora Dimitrijević
|
7f33f57c9b
|
Java: convert UrlForward test to .qlref
|
2025-06-24 16:42:19 +02:00 |
|
Nora Dimitrijević
|
bf1a699982
|
Java: convert CWE-522 tests to .qlref
|
2025-06-24 16:42:17 +02:00 |
|
Nora Dimitrijević
|
4412335223
|
Java: convert UnsafeDeserialization test to .qlref
|
2025-06-24 16:42:14 +02:00 |
|
Nora Dimitrijević
|
c4b0955045
|
Java: convert WebviewDebuggingEnabled test to .qlref
|
2025-06-24 16:42:12 +02:00 |
|
Nora Dimitrijević
|
192f45ed2b
|
Java: convert FragmentInjection test to .qlref
|
2025-06-24 16:42:10 +02:00 |
|
Nora Dimitrijević
|
2b19cbcd7e
|
Java: convert UnsafeContentUriResolution test to .qlref
|
2025-06-24 16:42:08 +02:00 |
|
Nora Dimitrijević
|
28694276e2
|
Java: convert MissingJWTSignatureCheck test to .qlref
|
2025-06-24 16:42:06 +02:00 |
|
Nora Dimitrijević
|
85c2f72892
|
Java: convert InsecureRandomness test to .qlref
|
2025-06-24 16:42:04 +02:00 |
|
Nora Dimitrijević
|
288a938814
|
Java: convert InsufficientKeySize test to .qlref
|
2025-06-24 16:42:02 +02:00 |
|
Nora Dimitrijević
|
993b261b63
|
Java: convert InsecureTrustManager test to .qlref
|
2025-06-24 16:42:00 +02:00 |
|
Nora Dimitrijević
|
b736e3733c
|
Java: convert IntentUriPermissionManipulation test to .qlref
|
2025-06-24 16:41:58 +02:00 |
|
Nora Dimitrijević
|
c77875d834
|
Java: convert TemplateInjection test to .qlref
|
2025-06-24 16:41:56 +02:00 |
|
Nora Dimitrijević
|
b8c7bd29c3
|
Java: convert SpelInjection test to .qlref
|
2025-06-24 16:41:54 +02:00 |
|
Nora Dimitrijević
|
2a837b208b
|
Java: convert MvelInjection test to .qlref
|
2025-06-24 16:41:52 +02:00 |
|
Nora Dimitrijević
|
1b61cb660a
|
Java: convert JexlInjection test to .qlref
|
2025-06-24 16:41:50 +02:00 |
|