3229 Commits

Author	SHA1	Message	Date
sentient0being	f575d2f941	get array string url	2025-05-17 19:40:41 +08:00
Jami	02ded89d84	Merge branch 'main' into jcogs33/java/junit5-missing-nested-annotation	2025-04-21 09:46:49 -04:00
Chris Smowton	0a293cf357	Add EnumType to SimpleTypeSanitizer	2025-04-09 12:12:35 +01:00
Chris Smowton	77e4d9e692	Fix stray references to the javax package name ... Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>	2025-04-02 10:03:49 +01:00
Jami Cogswell	faeb7ab890	Java: add blank lines to qldocs	2025-04-01 14:54:46 -04:00
Chris Smowton	20839745bd	Remove redundant import	2025-04-01 16:49:56 +01:00
Chris Smowton	50119ae481	Update docs	2025-04-01 16:20:06 +01:00
Chris Smowton	a5a6fd37df	Enable recognising jakarta.persistence in dead-code queries	2025-04-01 16:19:42 +01:00
Chris Smowton	fb6296a564	Persistence models: recognise jakarta.persistence	2025-04-01 16:07:40 +01:00
Anders Schack-Mulligen	e8e9403b4c	Merge pull request #19093 from aschackmull/java/caching ... Java: Adjust caching of BasicBlocks, BaseSSA, and CompileTimeConstants	2025-03-31 10:48:12 +02:00
Anders Schack-Mulligen	5a986f5327	SSA: Remove empty predicates and dead code.	2025-03-28 12:00:38 +01:00
Anders Schack-Mulligen	4c420c5bae	Java: Switch from ssaDefAssigns/ssaDefInitializesParam to ssaDefHasSource.	2025-03-28 11:57:27 +01:00
Anders Schack-Mulligen	0c74f21107	Merge pull request #19044 from aschackmull/ssa/useuse-trim ... Ssa: Trim the use-use relation to skip irrelevant nodes	2025-03-28 11:55:34 +01:00
Jami	e458aca806	Merge branch 'main' into jcogs33/java/junit5-missing-nested-annotation	2025-03-27 21:31:09 -04:00
Anders Schack-Mulligen	d5d0274ce7	Java/SSA: Keep proper distinction between cached stages.	2025-03-25 13:43:55 +01:00
Anders Schack-Mulligen	7c82f51381	Java: Skip SSA definition nodes in data flow.	2025-03-25 12:31:01 +01:00
Anders Schack-Mulligen	dc0ca1ac18	Java: Fix TC magic in SystemProperty.	2025-03-24 13:31:23 +01:00
Jami Cogswell	35b647839c	Java: include RepeatedTest, ParameterizedTest, TestFactory, and TestTemplate when identifying JUnit 5 test methods	2025-03-23 19:49:55 -04:00
Jami Cogswell	4d7bed6181	Java: exclude anonymous, local, and private classes	2025-03-23 19:49:53 -04:00
Jami Cogswell	f17e7266cf	Java: refactor QL	2025-03-23 19:48:15 -04:00
Anders Schack-Mulligen	3c6db09039	Java: Cache the other compiletimeconstant value predicates	2025-03-21 15:53:26 +01:00
Anders Schack-Mulligen	e75ed5a085	Java: Merge BaseSSA cached stages.	2025-03-21 15:45:50 +01:00
Anders Schack-Mulligen	33135330fd	Java: Merge cached stages for BasicBlocks.	2025-03-21 15:21:25 +01:00
mc	1f76793863	Merge branch 'main' into tamasvajk/java_empty_method	2025-03-21 10:01:10 +00:00
Tamás Vajk	246c8276e0	Update java/ql/lib/semmle/code/java/UnitTests.qll ... Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>	2025-03-20 09:22:13 +01:00
Jami	2750d1d889	Merge pull request #18646 from jcogs33/jcogs33/java/directory-chars-path-sanitizer ... Java: path sanitizer for `replace`, `replaceAll`, and `matches`	2025-03-18 13:26:01 -04:00
Jami Cogswell	0d2e9ae469	Java: fix 'matches' false branch	2025-03-17 18:48:44 -04:00
Jami Cogswell	49d37c517d	Java: fix replacement char check and add tests	2025-03-17 16:02:13 -04:00
Jami Cogswell	3083360032	Java: remove 'complementary' from qldocs	2025-03-17 15:24:31 -04:00
Jami Cogswell	b9f642f4aa	Java: condense '.' matching	2025-03-17 15:20:14 -04:00
Jami Cogswell	9d6a10b601	Java: rename 'isSingleReplaceAll' and 'isDoubleReplaceOrReplaceAll'	2025-03-17 15:07:10 -04:00
Tamas Vajk	9662b47464	Move likely test method logic to library	2025-03-14 11:36:15 +01:00
Jami	ea9b0462bf	Merge pull request #18793 from jcogs33/jcogs33/java/spring-boot-actuators-promo ... Java: Promote Spring Boot Actuators query from experimental	2025-03-11 14:42:14 -04:00
Jami Cogswell	76433a31f7	Java: generalize sanitizer and add tests	2025-03-10 18:56:01 -04:00
Jami Cogswell	ab3690f666	Java: initial sanitizer	2025-03-10 18:55:56 -04:00
Anders Schack-Mulligen	d075466958	Merge pull request #18941 from aschackmull/ssa/refactor4 ... Ssa: Extend consistency checks and reduce phi read nodes	2025-03-07 15:18:02 +01:00
Anders Schack-Mulligen	3508ca89e6	Java: Restrict SSA reads to the reachable CFG.	2025-03-07 11:13:53 +01:00
Anders Schack-Mulligen	da579c27fc	Merge pull request #18934 from aschackmull/ssa/refactor5 ... SSA: Replace the Guards interface in the SSA data flow integration.	2025-03-06 15:11:52 +01:00
Lukas Abfalterer	b4c75d832c	Merge branch 'main' into cwe-925	2025-03-05 14:15:07 +01:00
Anders Schack-Mulligen	c6761db2fc	SSA: Replace the Guards interface in the SSA data flow integration.	2025-03-05 13:29:31 +01:00
Lukas Abfalterer	c9b75afc2a	Fix QLL and add change notes with tests	2025-03-05 10:23:35 +01:00
Jami Cogswell	746f022cfa	Java: add 'Spring' prefix to public class names	2025-03-04 10:34:16 -05:00
Anders Schack-Mulligen	9e03b12ba0	C#/Java/Ruby/Rust/SSA: Replace DefinitionExt with SourceVariable in data flow integration predicates.	2025-03-04 12:24:21 +01:00
Alex Eyers-Taylor	5e3ccc0cca	Java: Simplify interpretOutput	2025-02-26 18:20:46 +00:00
Anders Schack-Mulligen	994a8eea39	Merge pull request #18857 from aschackmull/ssa/refactor-df-integr ... Ssa: Refactor the data flow integration module	2025-02-25 15:04:11 +01:00
Anders Schack-Mulligen	2c3b48946d	Merge pull request #18824 from aschackmull/java/basessa ... Java: Switch BaseSSA to use shared SSA lib.	2025-02-25 14:23:46 +01:00
Owen Mansel-Chan	74a249597a	Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer ... Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values	2025-02-24 23:39:18 +00:00
Jami Cogswell	6fe7c7a233	Java: some refactoring	2025-02-24 18:33:29 -05:00
Jami Cogswell	9e51b014d2	Java: handle example in Spring docs	2025-02-24 18:27:43 -05:00
Jami Cogswell	b2469ff8ba	Java: add APIs and tests for more recent Spring versions: authorizeHttpRequests, AuthorizeHttpRequestsConfigurer, securityMatcher(s)	2025-02-24 18:26:02 -05:00