Tony Torralba
|
baffb0ed89
|
Consider Jakarta Mail
|
2021-10-05 09:18:47 +02:00 |
|
Tony Torralba
|
73653f77aa
|
Use InlineExpectationsTest
|
2021-10-05 09:18:45 +02:00 |
|
Tony Torralba
|
0e149f0523
|
Move from experimental
|
2021-10-05 09:18:44 +02:00 |
|
Anders Schack-Mulligen
|
745ece6e6d
|
Merge pull request #6613 from Marcono1234/marcono1234/literals-test-split
Java: Split literals tests
|
2021-10-04 16:20:08 +02:00 |
|
Anders Schack-Mulligen
|
65a4f36cf8
|
Merge pull request #6767 from aschackmull/dataflow/callback-postupdate
Dataflow: Support side-effects for callbacks in summaries.
|
2021-10-04 11:13:18 +02:00 |
|
Owen Mansel-Chan
|
938d003e5e
|
Fix example to use space after $ for consistency
|
2021-10-02 08:11:49 +01:00 |
|
Owen Mansel-Chan
|
25792b2a45
|
Change class name to avoid clash with Go and Javascript libraries
|
2021-10-02 08:04:17 +01:00 |
|
Marcono1234
|
e3fed55945
|
Java: Add tests for text blocks
|
2021-10-01 18:16:11 +02:00 |
|
Joe Farebrother
|
085701c7db
|
Remove models.csv
|
2021-10-01 17:11:12 +01:00 |
|
Joe Farebrother
|
5e4498a53a
|
Add more models; fix tests
|
2021-10-01 16:53:53 +01:00 |
|
Marcono1234
|
924b7320bc
|
Java: Add test for NullLiteral
|
2021-10-01 17:27:54 +02:00 |
|
Marcono1234
|
bb6e6f4808
|
Java: Split literals tests
This allows changing individual tests in the future without having to adjust
the expected output of all other tests.
|
2021-10-01 17:27:50 +02:00 |
|
f1v3
|
168fc4170d
|
Apply suggestions from code review
|
2021-09-30 14:26:14 +01:00 |
|
f1v3
|
f3bde56de9
|
detects a hard-coded cipher key for shiro
|
2021-09-30 14:22:48 +01:00 |
|
Chris Smowton
|
60a023d064
|
Merge pull request #5852 from luchua-bc/java/hardcoded-azure-credential
Java: CWE-798 Query to detect hard-coded Azure credentials
|
2021-09-30 14:11:29 +01:00 |
|
Joe Farebrother
|
3ae5f13c3d
|
Generate tests and stubs
|
2021-09-29 15:44:21 +01:00 |
|
Chris Smowton
|
413ac4e8f4
|
Merge pull request #6684 from owen-mc/java/model/apache-collections-subpackages
Java: model remaining subpackages of Apache Commons Collections
|
2021-09-28 12:28:48 +01:00 |
|
Tony Torralba
|
cec6cd0830
|
Merge pull request #6724 from atorralba/atorralba/android-contentprovider-sources
Java: Add sources for content providers in Android
|
2021-09-28 12:13:54 +02:00 |
|
Chris Smowton
|
39a12a8464
|
Remove models that are no longer required
|
2021-09-28 10:48:43 +01:00 |
|
Anders Schack-Mulligen
|
9a9bbe3123
|
Dataflow: Support side-effects for callbacks in summaries.
|
2021-09-28 11:42:38 +02:00 |
|
Anders Schack-Mulligen
|
fc8b439263
|
Merge pull request #6740 from aschackmull/java/callback-dispatch
Java: Add callback dispatch to more anonymous classes.
|
2021-09-28 10:49:27 +02:00 |
|
luchua-bc
|
378db7de87
|
Remove local user input and use fluent model
|
2021-09-27 17:33:04 +00:00 |
|
Owen Mansel-Chan
|
bdd78d2bc7
|
Fix stub
|
2021-09-27 16:24:41 +01:00 |
|
Owen Mansel-Chan
|
29db42c3cd
|
Generate stubs
|
2021-09-27 16:24:40 +01:00 |
|
Owen Mansel-Chan
|
e6df8164cf
|
Fix up old tests for new helper functions
|
2021-09-27 16:24:39 +01:00 |
|
Owen Mansel-Chan
|
cf03bd8bd1
|
Merge new and old tests
# Conflicts:
# java/ql/test/library-tests/frameworks/apache-collections/TestNew.java
|
2021-09-27 16:24:38 +01:00 |
|
Owen Mansel-Chan
|
342c14887b
|
Fix existing models for MapUtils
|
2021-09-27 16:24:37 +01:00 |
|
Owen Mansel-Chan
|
e1101e582e
|
Minor improvement to existing tests
|
2021-09-27 16:24:37 +01:00 |
|
Owen Mansel-Chan
|
768203bd36
|
Remove redundant casts
|
2021-09-27 16:24:36 +01:00 |
|
Owen Mansel-Chan
|
c51fb00082
|
Add tests for non-public abstract classes
|
2021-09-27 16:24:35 +01:00 |
|
Owen Mansel-Chan
|
0a92b04c8b
|
Fix up automatically generated tests
|
2021-09-27 16:24:34 +01:00 |
|
Owen Mansel-Chan
|
15161d8867
|
Make concrete subclasses of abstract classes
|
2021-09-27 16:24:33 +01:00 |
|
Owen Mansel-Chan
|
53ee465726
|
Fix errors in generated tests that stop compilation
|
2021-09-27 16:24:32 +01:00 |
|
Owen Mansel-Chan
|
a20acfee25
|
Add automatically generated tests
Also update test.ql to use the new InlineFlowTest.
|
2021-09-27 16:24:31 +01:00 |
|
Owen Mansel-Chan
|
fd0fb9483e
|
Model the remaining subpackages in Apache Commons Collections
|
2021-09-27 16:24:26 +01:00 |
|
Anders Schack-Mulligen
|
cfa0d46b73
|
Merge pull request #6097 from atorralba/atorralba/promote-xslt-injection
Java: Promote XSLT Injection from experimental
|
2021-09-27 13:14:57 +02:00 |
|
Tony Torralba
|
d5f675c2dc
|
Fix unbound field
Add tests for non-exported providers
|
2021-09-27 12:58:28 +02:00 |
|
Tony Torralba
|
6967b06dee
|
Decouple XsltInjection.qll to reuse the taint tracking configuration
|
2021-09-27 11:59:51 +02:00 |
|
Tony Torralba
|
108118afa3
|
Use InlineExpectationsTest
|
2021-09-27 11:58:18 +02:00 |
|
Tony Torralba
|
c792567904
|
Move from experimental
|
2021-09-27 11:57:53 +02:00 |
|
Tony Torralba
|
6d9a88d1c8
|
Move to lib
|
2021-09-27 11:43:46 +02:00 |
|
Tony Torralba
|
94f32d2985
|
Decouple SpelInjection.qll to reuse the taint tracking configuration
|
2021-09-27 11:39:30 +02:00 |
|
Tony Torralba
|
569426b04e
|
Consider subtypes of Expression and ExpressionParser
Add parseRaw as additional taint step
|
2021-09-27 11:38:12 +02:00 |
|
Tony Torralba
|
b985ddb868
|
Use InlineExpectationsTest
|
2021-09-27 11:37:41 +02:00 |
|
Tony Torralba
|
fc6af0476f
|
Moved from experimental
|
2021-09-27 11:36:48 +02:00 |
|
luchua-bc
|
5264936fc3
|
Correct the run method and add Math.min check
|
2021-09-24 21:00:53 +00:00 |
|
luchua-bc
|
272e4f6cf9
|
Update the query
|
2021-09-24 01:48:11 +00:00 |
|
Anders Schack-Mulligen
|
4841c3037d
|
Java: Add callback dispatch to more anonymous classes.
|
2021-09-23 14:34:56 +02:00 |
|
Chris Smowton
|
93daaf5b5b
|
Merge pull request #6174 from joefarebrother/guava-collections
Java: Model Guava collections package
|
2021-09-23 09:13:24 +01:00 |
|
Joe Farebrother
|
522c6e01d2
|
Sort models by class and name
|
2021-09-22 15:23:01 +01:00 |
|