1297 Commits

Author	SHA1	Message	Date
Napalys Klicius	652e9cba3d	Java: Added inline test expectations for java/visible-for-testing-abuse	2025-08-22 09:23:49 +02:00
Napalys Klicius	0c14d93bc6	Java: Added new query java/visible-for-testing-abuse	2025-08-22 09:23:49 +02:00
Napalys Klicius	eb6e9b8fe6	Java: Fix java/jvm-exit false positives for local nested classes in test methods	2025-08-21 14:20:49 +00:00
Napalys Klicius	41a78a0c3d	Java: Added nested local class test case	2025-08-21 14:10:12 +00:00
Napalys Klicius	53ccc56959	Java: exclude single-method classes from mocking	2025-08-11 13:43:36 +02:00
Napalys Klicius	a9e9a62439	Java: add single-method class test case for mocking rule ... Classes with only one public method should be compliant when mocked.	2025-08-11 13:43:36 +02:00
Napalys Klicius	22caa584ad	Java: Add inline test expectations for MockingAllNonPrivateMethodsMeansUnitTestIsTooBig.qlref	2025-08-11 13:43:36 +02:00
Napalys Klicius	50c7160819	Java: port java/mocking-all-non-private-methods-means-unit-test-is-too-big query	2025-08-11 13:43:36 +02:00
Napalys Klicius	4df613ce37	Java: Improved java/jvm-exit query to remove FP's.	2025-08-11 09:24:01 +02:00
Napalys Klicius	d41a5e3a25	Java: Added basic test cases for java/jvm-exit	2025-08-11 09:24:01 +02:00
Anders Schack-Mulligen	d9cfe14729	Java: Accept qltest change.	2025-08-07 14:51:49 +02:00
Anders Schack-Mulligen	23aac0ac51	Java: document nullness false negative as qltest	2025-08-05 13:49:51 +02:00
Jami Cogswell	c9692a6d10	Java: fix test failures cause by alert msg change	2025-07-19 13:27:09 -04:00
Jami Cogswell	7250265c1f	Java: consider all endpoints except for health and info as sensitive to align with Spring docs	2025-07-18 17:50:18 -04:00
Jami Cogswell	685f68d9d3	Java: support 'management.endpoints.web.expose' property	2025-07-18 17:50:17 -04:00
Jami Cogswell	70d51504a7	Java: rename to align with 'java/spring-boot-exposed-actuators' query	2025-07-18 17:50:12 -04:00
Jami Cogswell	ea35fbbe3b	Java: support version 3.x	2025-07-18 17:50:07 -04:00
Jami Cogswell	0d2a4222fd	Java: add related location to alert message	2025-07-17 19:22:18 -04:00
Jami Cogswell	2bfc4b4ee2	Java: fix test case for version 1.4 ... Need the existence of an ApplicationProperties File, not an ApplicationProperties ConfigPair	2025-07-17 19:22:15 -04:00
Jami Cogswell	3823186dc6	Java: split tests by versions ... splitting is required to properly test each scenario	2025-07-17 19:22:13 -04:00
Jami Cogswell	ed8da5e151	Java: convert tests to inline expectations	2025-07-17 19:22:08 -04:00
Jami Cogswell	fc930d9184	Java: update tests for non-experimental directory	2025-07-17 19:22:06 -04:00
Jami Cogswell	a39cb40177	Java: copy out of experimental	2025-07-17 19:22:01 -04:00
Nora Dimitrijević	b33058c967	[TEST] Java: SensitiveCommunication: convert to qlref	2025-07-17 18:59:05 +02:00
Nora Dimitrijević	44bb5e7220	[TEST] Java: ConditionalBypass: convert to qlref	2025-07-17 18:59:03 +02:00
Nora Dimitrijević	6134518d60	[TEST] Java: SensitiveLogInfo: convert to qlref	2025-07-17 18:59:01 +02:00
Nora Dimitrijević	94386f0550	[TEST] Java: TrustBoundaryViolations: convert test to qlref	2025-07-17 18:58:59 +02:00
Nora Dimitrijević	49e03b4dfd	[TEST] Java: UnsafeCertTrust: convert test to qlref	2025-07-17 18:58:56 +02:00
Nora Dimitrijević	7aced48443	[TEST] Java: LogInjection: convert test to qlref	2025-07-17 18:58:54 +02:00
Nora Dimitrijević	5c2cf79785	[TEST] Java: CWE-020/ExternalAPI: new test based on qhelp	2025-07-17 18:58:52 +02:00
Owen Mansel-Chan	805e31fdb9	Update test expectations	2025-07-16 15:25:45 +01:00
Owen Mansel-Chan	fdd1e3fefe	Use MaD models for unsafe deserialization sinks when possible ... Many of the unsafe deserialization sinks have to stay defined in QL because they have custom logic that cannot be expressed in MaD models.	2025-07-16 14:42:07 +01:00
Owen Mansel-Chan	8e4bd1a102	Add sink for ObjectInput.readObject to make test pass	2025-07-11 11:05:38 +01:00
Owen Mansel-Chan	34fae324a0	Add test for ObjectInput.readObject	2025-07-11 11:03:47 +01:00
Tamás Vajk	1351f57d2b	Merge pull request #19998 from tamasvajk/quality/label-in-switch ... Java: Add query to detect non-case labels in switch statements	2025-07-10 14:13:38 +02:00
Tamas Vajk	5f7d746266	Java: Add query to detect non-case labels in switch statements	2025-07-08 14:53:39 +02:00
Tamas Vajk	09a2aeead6	Java: Add query to detect special characters in string literals	2025-07-08 13:28:18 +02:00
Tamas Vajk	813ce7d3f8	Rename query	2025-07-08 11:28:12 +02:00
Tamas Vajk	82fe647a40	Improve alert message	2025-07-08 11:28:11 +02:00
Tamas Vajk	a2d4f58af7	Use inline test expectations	2025-07-08 11:28:10 +02:00
Tamas Vajk	2cd0c64e41	Improve query quality	2025-07-08 11:28:09 +02:00
Tamas Vajk	e0cb1792bd	Java: Add 'Useless serialization member in record class' query	2025-07-08 11:28:09 +02:00
Tom Hvitved	6fdec47e83	Java: Use MaD in log injection test	2025-07-08 10:25:58 +02:00
Jami Cogswell	87ab4d0160	Java: remove java/run-method-called-on-java-lang-thread-directly ... using existing query java/call-to-thread-run instead	2025-06-29 22:42:31 -04:00
Jami Cogswell	12e7bbbae8	Java: update existing tests to services tests	2025-06-29 22:41:47 -04:00
Jami Cogswell	1172f82a4b	Java: update existing tests to inline expectations	2025-06-29 22:21:41 -04:00
Jami Cogswell	7a2023b863	Java: move original files	2025-06-29 22:13:49 -04:00
Nora Dimitrijević	e0b3a2c5f9	Java: convert ArbitraryApkInstallation test to .qlref	2025-06-26 13:22:05 +02:00
Tamás Vajk	ae36f94d5e	Merge pull request #19844 from tamasvajk/tamasvajk/threadpoolexecutor ... Java: Add `java/javautilconcurrentscheduledthreadpoolexecutor` query for zero thread pool size	2025-06-26 12:36:09 +02:00
Anders Schack-Mulligen	326f2b0498	Java: Accept qltest change showing FP removal.	2025-06-26 11:03:39 +02:00