13956 Commits

Author	SHA1	Message	Date
Michael Nebel	7bde1cbfb3	Java: Add case for Synthetic Fields in isRelevantTaintStep.	2022-03-01 09:15:01 +01:00
Michael Nebel	24640c3670	Java: Make a testcase for wrappers of sources.	2022-02-28 16:57:36 +01:00
Michael Nebel	66fe0e74b5	Java: Don't require that the source is directly within the TargetApi itself (in that case wrappers get excluded).	2022-02-28 16:48:23 +01:00
Michael Nebel	4a0b2b64b3	Java: Explicitly tie ReturnNode to TargetApi before calling returnNodeAsOutput.	2022-02-28 16:48:23 +01:00
Tom Hvitved	44949b6353	Java: Add bindingset to returnNodeAsOutput	2022-02-28 16:48:23 +01:00
Anders Schack-Mulligen	908cc40c9f	Java: Fix bug in model flow sanitizer.	2022-02-28 16:48:23 +01:00
Anders Schack-Mulligen	16a5ccddea	Java: Simplify model generator query using flow state.	2022-02-28 16:48:23 +01:00
Ian Lynagh	1e62b485a5	Merge pull request #8241 from igfoo/igfoo/stats4 ... Java: Update stats and make some performance tweaks	2022-02-28 12:58:06 +00:00
luchua-bc	88d9694628	Query to detect insecure WebResourceResponse implementation	2022-02-26 02:03:35 +00:00
Chris Smowton	f981fee37d	Adjust test expectation	2022-02-25 20:05:06 +00:00
Chris Smowton	ff5d680837	Add missing substitution description	2022-02-25 19:12:25 +00:00
Ian Lynagh	0bf1370cd5	Java: Autoformat QL	2022-02-25 19:08:08 +00:00
Chris Smowton	8fbd8c52dd	Fix test expectations	2022-02-25 17:35:52 +00:00
Chris Smowton	ff303db034	Autoformat and fix qhelp	2022-02-25 17:33:08 +00:00
Chris Smowton	303927c9c9	Fix qhelp	2022-02-25 17:33:08 +00:00
Chris Smowton	e02a3d0ddd	Rename qlref file	2022-02-25 17:33:08 +00:00
Ahmed Farid	3a2d514b18	Create ComparingValueOfSensetiveHeader.qlref	2022-02-25 17:33:08 +00:00
Ahmed Farid	0d278f6d61	Create Test.java	2022-02-25 17:33:08 +00:00
Ahmed Farid	1bc5fe13eb	Update and rename java/ql/test/experimental/query-tests/security/CWE-208/TimingAttackAgainstHeader.expected to java/ql/test/experimental/query-tests/security/CWE-208/TimingAttackAgainstHeader/TimingAttackAgainstHeader.expected	2022-02-25 17:33:08 +00:00
Ahmed Farid	63133f7e8b	Update TimingAttackAgainstHeader.expected	2022-02-25 17:33:08 +00:00
Ahmed Farid	f2457dafb5	Create TimingAttackAgainstHeader.expected	2022-02-25 17:33:08 +00:00
Ahmed Farid	35abc3f9a3	Update and rename ComparingValueOfSensetiveHeader.java to Test.java	2022-02-25 17:33:08 +00:00
Chris Smowton	091227982c	Delete unnecessary test files	2022-02-25 17:33:08 +00:00
Ahmed Farid	899b8d03b2	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:07 +00:00
Ahmed Farid	308f86f66f	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:07 +00:00
Ahmed Farid	2eee6b4f69	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:07 +00:00
Ahmed Farid	7859288040	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:07 +00:00
Ahmed Farid	d83444cb18	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:07 +00:00
Ahmed Farid	e79c0eaa71	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:07 +00:00
Ahmed Farid	36cf1010f8	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:07 +00:00
Ahmed Farid	8e6f76d47a	Update TimingAttackAgainstHeader.qhelp	2022-02-25 17:33:07 +00:00
Ahmed Farid	fa8af6bf70	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:07 +00:00
Ahmed Farid	19d0e1f4a7	Create ComparingValueOfSensetiveHeader.qlref	2022-02-25 17:33:07 +00:00
Ahmed Farid	f96e47db09	Update ComparingValueOfSensetiveHeader.java	2022-02-25 17:33:07 +00:00
Ahmed Farid	09e054ace6	Update ComparingValueOfSensetiveHeader.java	2022-02-25 17:33:07 +00:00
Ahmed Farid	f758ed0d85	Update ComparingValueOfSensetiveHeader.java	2022-02-25 17:33:07 +00:00
ahmed532009	4a9ee5826d	Update TimingAttackAgainstHeader.qhelp	2022-02-25 17:33:07 +00:00
ahmed532009	6da9bc593f	Rename csrfComparison.java to ComparingValueOfSensetiveHeader.java	2022-02-25 17:33:07 +00:00
ahmed532009	a0a1c587e5	Create ComparingValueOfSensetiveHeader.java	2022-02-25 17:33:07 +00:00
ahmed532009	aa488e532f	Update csrfComparison.java	2022-02-25 17:33:07 +00:00
Chris Smowton	333130b2a4	Abbreviate isSink	2022-02-25 17:33:07 +00:00
Chris Smowton	80a2b388bf	Update TimingAttackAgainstHeader.qhelp	2022-02-25 17:33:07 +00:00
ahmed532009	fa81f43694	Update TimingAttackAgainstHeader.qhelp	2022-02-25 17:33:06 +00:00
ahmed532009	39e07cbc9c	Update and rename UnsafecsrfComparison.java to csrfComparison.java	2022-02-25 17:33:06 +00:00
ahmed532009	c6c67b907b	Update TimingAttackAgainstHeader.qhelp	2022-02-25 17:33:06 +00:00
ahmed532009	98b06d35af	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:06 +00:00
ahmed532009	bf95e59b24	Update TimingAttackAgainstHeader.qhelp	2022-02-25 17:33:06 +00:00
ahmed532009	ab6a7bb3d8	Update TimingAttackAgainstHeader.ql	2022-02-25 17:33:06 +00:00
root	49feeb1c36	Timing attacks while comparing the headers value	2022-02-25 17:33:06 +00:00
Asger F	a8bfebaeb6	Merge pull request #8149 from asgerf/shared/use-shared-access-path-syntax ... Shared: use shared access path syntax to parse arguments in CSV rows	2022-02-25 14:04:18 +01:00