3180 Commits

Author	SHA1	Message	Date
Tony Torralba	3102199a69	Make LocalUserInputToArgumentToExecFlowConfig and LocalUserInputToArgumentToExecFlow importable	2023-03-30 10:24:23 +02:00
Tony Torralba	534725f9eb	Add command injection sink kind	2023-03-30 10:17:35 +02:00
Ed Minnix	312508e279	Documentation for IntentUriPermissionManipulationQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	cf7aa2e420	Documentation UnsafeDeserializationQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	1a89c3fa7c	Documentation for AndroidSensitiveCommunicationQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	1016b7323f	Documentation for ConditionalBypassQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	96cf4f16fa	Documentation for ExternalAPIs	2023-03-29 22:33:10 -04:00
Ed Minnix	c7fd216c3c	Documentation for RsaWithoutOaepQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	11d72ffc1f	Documentation for UnsafeContentUriResolutionQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	59b1460c49	Documentation for UnsafeCertTrustQuery	2023-03-29 22:33:09 -04:00
Ed Minnix	a798b1959f	Replace flow(_, sink) with flowTo(sink)	2023-03-29 22:33:09 -04:00
Ed Minnix	d24c5071d8	Move private helper method out of module	2023-03-29 22:33:09 -04:00
Ed Minnix	a119b99f92	Documentation additions	2023-03-29 22:33:09 -04:00
Ed Minnix	6a3eadf6cb	Refactor ImplicitPendingIntents	2023-03-29 22:33:09 -04:00
Ed Minnix	8621a49645	Remove unnecessary private markers	2023-03-29 22:33:09 -04:00
Ed Minnix	42b582da2f	Refactor StaticInitializationVector	2023-03-29 22:33:09 -04:00
Ed Minnix	469ac80d40	Refactor PartialPathTraversal	2023-03-29 22:33:09 -04:00
Ed Minnix	f8e26f1571	Refactor MissingJWTSignatureCheck	2023-03-29 22:33:09 -04:00
Ed Minnix	cae5637d8d	Refactor InsufficientKeySize	2023-03-29 22:33:09 -04:00
Ed Minnix	fa2f0dbc3b	Refactor InsecureBasicAuth	2023-03-29 22:33:09 -04:00
Ed Minnix	dcd46c2236	Refactor InsecureTrustManager	2023-03-29 22:33:09 -04:00
Ed Minnix	3b2eea2d44	Refactor XxeQuery	2023-03-29 22:33:09 -04:00
Ed Minnix	7262c6a097	Refactor XmlParsers.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	da718610e8	Refactor HttpsUrlsQuery.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	c67b984fff	Refactor RandomQuery.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	2698b61514	Refactor HardcodedCredentialsApiCall.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	e8f7e3fcf1	Refactor ExternalAPIs.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	ac8dec740a	Refactor UnsafeCertTrustQuery	2023-03-29 22:33:08 -04:00
Ed Minnix	a040ff6997	Refactor ConditionalBypass	2023-03-29 22:33:08 -04:00
Ed Minnix	aa7934161a	Refactor CleartextStorage libraries	2023-03-29 22:33:08 -04:00
Ed Minnix	b4130e650d	Refactor RegexFlowConfigs.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	6681c1a3a8	Refactor SnakeYaml.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	e5f11d00a7	Refactor CWE-502/UnsafeDeserialization	2023-03-29 22:33:08 -04:00
Ed Minnix	9afa051621	Move ExternallyControlledFormatStringFlow to Query.qll	2023-03-29 17:59:34 -04:00
Ed Minnix	3eaa94a5d2	Move ResponseSplitting configuration to ResponseSplittingQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	e3af8b2c7f	Move LdapInjectionLib to LdapInjectionQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	1add692643	Move XssConfig to XssQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	19a94a5c13	Move InsecureBeanValidation configuration to Query.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	367042bcff	Move ZipSlip configurations to Query.qll library	2023-03-29 17:59:33 -04:00
Ed Minnix	ce2cab0d2e	Move TaintedPath configurations to Query.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	744f2653f0	Add QLdoc for RemoteUserInputToArgumentToExecFlow	2023-03-29 11:45:09 -04:00
Ed Minnix	25359d2218	Deprecate execTainted	2023-03-29 11:45:09 -04:00
Ed Minnix	dcd703f1a9	Update to the TaintTracking::Global api	2023-03-29 11:45:09 -04:00
Ed Minnix	bbf7c67f9b	Remove unnecessary private markers (CommandLine and Request forgery)	2023-03-29 11:45:09 -04:00
Ed Minnix	0249890747	Refactor CommandLineQuery.qll	2023-03-29 11:45:09 -04:00
Edward Minnix III	117a983423	Merge pull request #12639 from egregius313/egregius313/java/refactor-injection-queries ... Java: Refactor injection queries to new dataflow API	2023-03-29 11:02:18 -04:00
Anders Schack-Mulligen	d0fa7c7ff8	Merge pull request #12683 from aschackmull/java/rangeanalysis-add ... Java: Support double-recursive range analysis bounds for addition.	2023-03-29 13:39:59 +02:00
Ed Minnix	c8579d8c26	RegexInjection docs	2023-03-29 07:24:32 -04:00
Ed Minnix	17cdd16c19	Fix miscopied isBarrier in JndiInjectionQuery	2023-03-29 07:23:13 -04:00
Jeroen Ketema	0acca2ba76	Merge pull request #12687 from jketema/unit-2 ... Make imports of `codeql.util.Unit` private	2023-03-29 13:07:12 +02:00