erik-krogh
|
5e3cb08ed2
|
rename stateInPumpableRegexp to stateInRelevantRegexp
|
2022-08-23 12:40:45 +02:00 |
|
Chris Smowton
|
0a7350f3bf
|
Merge pull request #10041 from smowton/AddSensitiveApiCalls
Java: support more libraries in hardcoded-credentials queries
|
2022-08-23 10:51:04 +01:00 |
|
Tony Torralba
|
085c12a51f
|
Merge pull request #10116 from atorralba/atorralba/static-init-vector-fix
Java: Improve Static Initialization Vector query
|
2022-08-23 11:38:41 +02:00 |
|
Chris Smowton
|
131d6043c1
|
Add java imports
|
2022-08-23 09:41:00 +01:00 |
|
erik-krogh
|
82d9180892
|
only have one deprecated alias for XmlDtd
|
2022-08-23 10:38:23 +02:00 |
|
Joe Farebrother
|
ac79866799
|
Merge pull request #9982 from joefarebrother/rsa-without-oaep
Java: Add query for RSA without OAEP
|
2022-08-23 09:14:46 +01:00 |
|
Tony Torralba
|
a3f27d4abe
|
Merge pull request #10131 from atorralba/atorralba/path-steps
Java: Add new java.nio.Path{,s} summary models
|
2022-08-23 09:47:34 +02:00 |
|
erik-krogh
|
28083ebe09
|
run the implicit-this patch
|
2022-08-22 21:23:31 +02:00 |
|
erik-krogh
|
a593a52b5e
|
add missing qldoc (that was already missing?)
|
2022-08-22 21:22:39 +02:00 |
|
erik-krogh
|
e89e0eb7fb
|
make some acronyms camelCase
|
2022-08-22 21:22:35 +02:00 |
|
Jami Cogswell
|
0136c7542b
|
update XML to Xml due to recent deprecation
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
f34e23bdba
|
adjusted comments and precision level
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
ac07544d70
|
group negated expressions together
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
efac4b197d
|
removed another comment
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
eee12264c3
|
excluded action main from query results, added unit test
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
c5526ffef8
|
update class QLDoc to start with 'An'
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
eacce03073
|
resolved merge conflict in AndroidManifest lib
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
0934c1d184
|
resolved merge conflict in AndroidManifest lib
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
9968d5d816
|
updated predicates
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
58d3d89b2e
|
resolved merge conflict in AndroidManifest
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
084b9830bc
|
resolved merge conflict in AndroidManifest
|
2022-08-22 12:41:22 -04:00 |
|
Jami Cogswell
|
eea1089ee0
|
resolved merge conflict in AndroidManifest
|
2022-08-22 12:41:22 -04:00 |
|
Tony Torralba
|
ee6ac744c5
|
Add new Path steps and tests
|
2022-08-22 15:54:20 +02:00 |
|
erik-krogh
|
2ac5441aec
|
rename the XMLDTD class to XmlDTD
|
2022-08-22 14:09:19 +02:00 |
|
erik-krogh
|
1a89ddae5d
|
update some comments from XML to Xml
|
2022-08-22 14:09:19 +02:00 |
|
erik-krogh
|
ce9f69a639
|
rename all occurrences of XML to Xml
|
2022-08-22 14:08:31 +02:00 |
|
Tony Torralba
|
5e815fb359
|
Merge branch 'main' into atorralba/static-init-vector-fix
|
2022-08-22 13:31:00 +02:00 |
|
Tony Torralba
|
c35fbf9abc
|
Add more sanitizers
|
2022-08-22 13:20:02 +02:00 |
|
Tony Torralba
|
72c204063d
|
Merge pull request #10115 from atorralba/atorralba/fragment-fix
Java: Add support for androidx.fragment.app.Fragment
|
2022-08-22 12:53:19 +02:00 |
|
Chris Smowton
|
f3ef8510d3
|
Merge pull request #10093 from smowton/smowton/feature/java-singular-locations
Java: pick an arbitrary representative location when an entity has many candidate locations.
|
2022-08-22 09:32:43 +01:00 |
|
erik-krogh
|
049af68bc2
|
restrict suffix-construction to relevant regexps
|
2022-08-21 20:35:39 +02:00 |
|
erik-krogh
|
bcf4c57060
|
Merge branch 'main' into redosPrefix
|
2022-08-19 19:22:49 +02:00 |
|
erik-krogh
|
d052b1e3c9
|
also support regular expressions without repetitions
|
2022-08-19 19:21:44 +02:00 |
|
Tony Torralba
|
3c6c09b0f8
|
No longer require a mode in Cipher.init
|
2022-08-19 16:40:59 +02:00 |
|
Tony Torralba
|
794fd976a9
|
Add androidx Fragment support
|
2022-08-19 16:32:06 +02:00 |
|
Tamas Vajk
|
1c08ac1d7a
|
Kotlin: Identify data classes during extraction
|
2022-08-19 14:51:36 +02:00 |
|
Sebastian Bauersfeld
|
354a7fd252
|
Make taint flow through java.lang.String.(replace|replaceFirst|replaceAll) more permissive.
|
2022-08-19 17:33:35 +07:00 |
|
Sebastian Bauersfeld
|
5cf320d553
|
Add corresponding taint steps.
|
2022-08-19 17:33:35 +07:00 |
|
Erik Krogh Kristensen
|
4f93f2b9ba
|
Merge pull request #10076 from erik-krogh/ql-for-ql-fixes
various QL-for-QL fixes
|
2022-08-18 15:46:48 +02:00 |
|
Chris Smowton
|
17dd1f64ec
|
Java: pick an arbitrary representative location when an entity has many candidate locations.
|
2022-08-18 14:29:16 +01:00 |
|
erik-krogh
|
9e7c0c6ab9
|
revert changing imports in java/
|
2022-08-18 10:19:12 +02:00 |
|
erik-krogh
|
473bc92e2d
|
move the PrefixConstruction module out of the ReDoSPruning module
|
2022-08-18 10:07:48 +02:00 |
|
erik-krogh
|
4bc10f9b5c
|
explicitly import required frameworks that were previously implicitly imported
|
2022-08-18 08:40:46 +02:00 |
|
Anders Schack-Mulligen
|
c3ba632a32
|
Java: Add some type-based sanitizers to SensitiveInfoLog.ql.
|
2022-08-17 14:54:28 +02:00 |
|
Anders Schack-Mulligen
|
6e495ba6e5
|
Merge pull request #10068 from aschackmull/java/summarizedcallable-split
Java: Make synthesized method bodies disjoint from source code.
|
2022-08-17 14:13:56 +02:00 |
|
erik-krogh
|
14d83ab1b5
|
make the framework imports in FlowSources.qll private
|
2022-08-17 13:50:08 +02:00 |
|
erik-krogh
|
b7b80fe176
|
reintroduce redundant cast in synced file
|
2022-08-17 13:34:22 +02:00 |
|
erik-krogh
|
ffb65d054e
|
delete redundant inline casts
|
2022-08-17 13:34:22 +02:00 |
|
erik-krogh
|
2e44fba67d
|
add explicit this
|
2022-08-17 13:33:31 +02:00 |
|
Anders Schack-Mulligen
|
27f76330be
|
Java: Fix models.
|
2022-08-17 12:46:09 +02:00 |
|