3441 Commits

Author	SHA1	Message	Date
Chris Smowton	4d8ca3d759	Add dataflow callback to filter out receiver argument flow to Golang interface dispatch candidates. ... Other langauges stub the callback.	2023-04-12 14:19:06 +01:00
Edward Minnix III	2b9daed26a	Merge pull request #12563 from egregius313/egregius313/refactor-java-libs-to-dataflow-modules ... Java: Refactor Java query libraries to use dataflow modules	2023-03-31 12:38:14 -04:00
Ed Minnix	800411cd81	More replacing of single-predicate classes to predicate	2023-03-31 10:55:17 -04:00
Ian Lynagh	c1a7d7f825	Merge pull request #12646 from igfoo/igfoo/expanded_args ... Java: Store expanded args in the database	2023-03-31 15:27:02 +01:00
Ed Minnix	ac218ba08b	Replace private classes with one method to predicates	2023-03-30 22:03:05 -04:00
Ed Minnix	03078603bf	Reinstate private markers on additional predicates	2023-03-30 11:24:33 -04:00
Ed Minnix	ecbd3be5e9	Remove private marker ... This class is used in the actual query, so it needs to be exposed.	2023-03-30 11:08:41 -04:00
Ed Minnix	dba5e9e9e2	Updates to imports ... Make some imports private Remove unnecessary imports	2023-03-30 11:03:48 -04:00
Edward Minnix III	c7a049a867	Mark things which can be private as private ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-03-30 11:00:00 -04:00
Edward Minnix III	8250e4393c	Typos and rewording ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-03-30 10:59:12 -04:00
Ian Lynagh	81a26f0396	Java: Add expanded arguments	2023-03-30 15:53:34 +01:00
Tony Torralba	3102199a69	Make LocalUserInputToArgumentToExecFlowConfig and LocalUserInputToArgumentToExecFlow importable	2023-03-30 10:24:23 +02:00
Tony Torralba	534725f9eb	Add command injection sink kind	2023-03-30 10:17:35 +02:00
Ed Minnix	312508e279	Documentation for IntentUriPermissionManipulationQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	cf7aa2e420	Documentation UnsafeDeserializationQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	1a89c3fa7c	Documentation for AndroidSensitiveCommunicationQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	1016b7323f	Documentation for ConditionalBypassQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	96cf4f16fa	Documentation for ExternalAPIs	2023-03-29 22:33:10 -04:00
Ed Minnix	c7fd216c3c	Documentation for RsaWithoutOaepQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	11d72ffc1f	Documentation for UnsafeContentUriResolutionQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	59b1460c49	Documentation for UnsafeCertTrustQuery	2023-03-29 22:33:09 -04:00
Ed Minnix	a798b1959f	Replace flow(_, sink) with flowTo(sink)	2023-03-29 22:33:09 -04:00
Ed Minnix	d24c5071d8	Move private helper method out of module	2023-03-29 22:33:09 -04:00
Ed Minnix	a119b99f92	Documentation additions	2023-03-29 22:33:09 -04:00
Ed Minnix	6a3eadf6cb	Refactor ImplicitPendingIntents	2023-03-29 22:33:09 -04:00
Ed Minnix	8621a49645	Remove unnecessary private markers	2023-03-29 22:33:09 -04:00
Ed Minnix	42b582da2f	Refactor StaticInitializationVector	2023-03-29 22:33:09 -04:00
Ed Minnix	469ac80d40	Refactor PartialPathTraversal	2023-03-29 22:33:09 -04:00
Ed Minnix	f8e26f1571	Refactor MissingJWTSignatureCheck	2023-03-29 22:33:09 -04:00
Ed Minnix	cae5637d8d	Refactor InsufficientKeySize	2023-03-29 22:33:09 -04:00
Ed Minnix	fa2f0dbc3b	Refactor InsecureBasicAuth	2023-03-29 22:33:09 -04:00
Ed Minnix	dcd46c2236	Refactor InsecureTrustManager	2023-03-29 22:33:09 -04:00
Ed Minnix	3b2eea2d44	Refactor XxeQuery	2023-03-29 22:33:09 -04:00
Ed Minnix	7262c6a097	Refactor XmlParsers.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	da718610e8	Refactor HttpsUrlsQuery.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	c67b984fff	Refactor RandomQuery.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	2698b61514	Refactor HardcodedCredentialsApiCall.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	e8f7e3fcf1	Refactor ExternalAPIs.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	ac8dec740a	Refactor UnsafeCertTrustQuery	2023-03-29 22:33:08 -04:00
Ed Minnix	a040ff6997	Refactor ConditionalBypass	2023-03-29 22:33:08 -04:00
Ed Minnix	aa7934161a	Refactor CleartextStorage libraries	2023-03-29 22:33:08 -04:00
Ed Minnix	b4130e650d	Refactor RegexFlowConfigs.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	6681c1a3a8	Refactor SnakeYaml.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	e5f11d00a7	Refactor CWE-502/UnsafeDeserialization	2023-03-29 22:33:08 -04:00
Ed Minnix	9afa051621	Move ExternallyControlledFormatStringFlow to Query.qll	2023-03-29 17:59:34 -04:00
Ed Minnix	3eaa94a5d2	Move ResponseSplitting configuration to ResponseSplittingQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	e3af8b2c7f	Move LdapInjectionLib to LdapInjectionQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	1add692643	Move XssConfig to XssQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	19a94a5c13	Move InsecureBeanValidation configuration to Query.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	367042bcff	Move ZipSlip configurations to Query.qll library	2023-03-29 17:59:33 -04:00