3186 Commits

Author	SHA1	Message	Date
Ed Minnix	03078603bf	Reinstate private markers on additional predicates	2023-03-30 11:24:33 -04:00
Ed Minnix	ecbd3be5e9	Remove private marker ... This class is used in the actual query, so it needs to be exposed.	2023-03-30 11:08:41 -04:00
Ed Minnix	dba5e9e9e2	Updates to imports ... Make some imports private Remove unnecessary imports	2023-03-30 11:03:48 -04:00
Edward Minnix III	c7a049a867	Mark things which can be private as private ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-03-30 11:00:00 -04:00
Edward Minnix III	8250e4393c	Typos and rewording ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-03-30 10:59:12 -04:00
Ian Lynagh	81a26f0396	Java: Add expanded arguments	2023-03-30 15:53:34 +01:00
Tony Torralba	3102199a69	Make LocalUserInputToArgumentToExecFlowConfig and LocalUserInputToArgumentToExecFlow importable	2023-03-30 10:24:23 +02:00
Tony Torralba	534725f9eb	Add command injection sink kind	2023-03-30 10:17:35 +02:00
Ed Minnix	312508e279	Documentation for IntentUriPermissionManipulationQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	cf7aa2e420	Documentation UnsafeDeserializationQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	1a89c3fa7c	Documentation for AndroidSensitiveCommunicationQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	1016b7323f	Documentation for ConditionalBypassQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	96cf4f16fa	Documentation for ExternalAPIs	2023-03-29 22:33:10 -04:00
Ed Minnix	c7fd216c3c	Documentation for RsaWithoutOaepQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	11d72ffc1f	Documentation for UnsafeContentUriResolutionQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	59b1460c49	Documentation for UnsafeCertTrustQuery	2023-03-29 22:33:09 -04:00
Ed Minnix	a798b1959f	Replace flow(_, sink) with flowTo(sink)	2023-03-29 22:33:09 -04:00
Ed Minnix	d24c5071d8	Move private helper method out of module	2023-03-29 22:33:09 -04:00
Ed Minnix	a119b99f92	Documentation additions	2023-03-29 22:33:09 -04:00
Ed Minnix	6a3eadf6cb	Refactor ImplicitPendingIntents	2023-03-29 22:33:09 -04:00
Ed Minnix	8621a49645	Remove unnecessary private markers	2023-03-29 22:33:09 -04:00
Ed Minnix	42b582da2f	Refactor StaticInitializationVector	2023-03-29 22:33:09 -04:00
Ed Minnix	469ac80d40	Refactor PartialPathTraversal	2023-03-29 22:33:09 -04:00
Ed Minnix	f8e26f1571	Refactor MissingJWTSignatureCheck	2023-03-29 22:33:09 -04:00
Ed Minnix	cae5637d8d	Refactor InsufficientKeySize	2023-03-29 22:33:09 -04:00
Ed Minnix	fa2f0dbc3b	Refactor InsecureBasicAuth	2023-03-29 22:33:09 -04:00
Ed Minnix	dcd46c2236	Refactor InsecureTrustManager	2023-03-29 22:33:09 -04:00
Ed Minnix	3b2eea2d44	Refactor XxeQuery	2023-03-29 22:33:09 -04:00
Ed Minnix	7262c6a097	Refactor XmlParsers.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	da718610e8	Refactor HttpsUrlsQuery.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	c67b984fff	Refactor RandomQuery.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	2698b61514	Refactor HardcodedCredentialsApiCall.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	e8f7e3fcf1	Refactor ExternalAPIs.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	ac8dec740a	Refactor UnsafeCertTrustQuery	2023-03-29 22:33:08 -04:00
Ed Minnix	a040ff6997	Refactor ConditionalBypass	2023-03-29 22:33:08 -04:00
Ed Minnix	aa7934161a	Refactor CleartextStorage libraries	2023-03-29 22:33:08 -04:00
Ed Minnix	b4130e650d	Refactor RegexFlowConfigs.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	6681c1a3a8	Refactor SnakeYaml.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	e5f11d00a7	Refactor CWE-502/UnsafeDeserialization	2023-03-29 22:33:08 -04:00
Ed Minnix	9afa051621	Move ExternallyControlledFormatStringFlow to Query.qll	2023-03-29 17:59:34 -04:00
Ed Minnix	3eaa94a5d2	Move ResponseSplitting configuration to ResponseSplittingQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	e3af8b2c7f	Move LdapInjectionLib to LdapInjectionQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	1add692643	Move XssConfig to XssQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	19a94a5c13	Move InsecureBeanValidation configuration to Query.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	367042bcff	Move ZipSlip configurations to Query.qll library	2023-03-29 17:59:33 -04:00
Ed Minnix	ce2cab0d2e	Move TaintedPath configurations to Query.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	744f2653f0	Add QLdoc for RemoteUserInputToArgumentToExecFlow	2023-03-29 11:45:09 -04:00
Ed Minnix	25359d2218	Deprecate execTainted	2023-03-29 11:45:09 -04:00
Ed Minnix	dcd703f1a9	Update to the TaintTracking::Global api	2023-03-29 11:45:09 -04:00
Ed Minnix	bbf7c67f9b	Remove unnecessary private markers (CommandLine and Request forgery)	2023-03-29 11:45:09 -04:00