4059 Commits

Author	SHA1	Message	Date
github-actions[bot]	b7b229d59b	Add changed framework coverage reports	2021-09-28 00:08:59 +00:00
luchua-bc	378db7de87	Remove local user input and use fluent model	2021-09-27 17:33:04 +00:00
Owen Mansel-Chan	bdd78d2bc7	Fix stub	2021-09-27 16:24:41 +01:00
Owen Mansel-Chan	29db42c3cd	Generate stubs	2021-09-27 16:24:40 +01:00
Owen Mansel-Chan	e6df8164cf	Fix up old tests for new helper functions	2021-09-27 16:24:39 +01:00
Owen Mansel-Chan	cf03bd8bd1	Merge new and old tests ... # Conflicts: # java/ql/test/library-tests/frameworks/apache-collections/TestNew.java	2021-09-27 16:24:38 +01:00
Owen Mansel-Chan	342c14887b	Fix existing models for MapUtils	2021-09-27 16:24:37 +01:00
Owen Mansel-Chan	e1101e582e	Minor improvement to existing tests	2021-09-27 16:24:37 +01:00
Owen Mansel-Chan	768203bd36	Remove redundant casts	2021-09-27 16:24:36 +01:00
Owen Mansel-Chan	c51fb00082	Add tests for non-public abstract classes	2021-09-27 16:24:35 +01:00
Owen Mansel-Chan	0a92b04c8b	Fix up automatically generated tests	2021-09-27 16:24:34 +01:00
Owen Mansel-Chan	15161d8867	Make concrete subclasses of abstract classes	2021-09-27 16:24:33 +01:00
Owen Mansel-Chan	53ee465726	Fix errors in generated tests that stop compilation	2021-09-27 16:24:32 +01:00
Owen Mansel-Chan	a20acfee25	Add automatically generated tests ... Also update test.ql to use the new InlineFlowTest.	2021-09-27 16:24:31 +01:00
Owen Mansel-Chan	f69787afd0	Miscellaneous model fixes	2021-09-27 16:24:30 +01:00
Owen Mansel-Chan	9b12980688	Do not model some protected methods	2021-09-27 16:24:29 +01:00
Owen Mansel-Chan	cb0f82c36e	Do not modelled protected static inner classes	2021-09-27 16:24:29 +01:00
Owen Mansel-Chan	3b678bfbc5	Address review comments	2021-09-27 16:24:28 +01:00
Owen Mansel-Chan	e1750adc38	Address problems highlighted by generating tests	2021-09-27 16:24:27 +01:00
Owen Mansel-Chan	fd0fb9483e	Model the remaining subpackages in Apache Commons Collections	2021-09-27 16:24:26 +01:00
Owen Mansel-Chan	3d1d491e6b	Model java.lang.Object.clone() better for access paths. ... Model value flow for Element, MapKey and MapValue. This assumes that clone() is a shallow copy.	2021-09-27 16:24:25 +01:00
Anders Schack-Mulligen	cfa0d46b73	Merge pull request #6097 from atorralba/atorralba/promote-xslt-injection ... Java: Promote XSLT Injection from experimental	2021-09-27 13:14:57 +02:00
Tony Torralba	d5f675c2dc	Fix unbound field ... Add tests for non-exported providers	2021-09-27 12:58:28 +02:00
Tony Torralba	78c12dc505	Move to lib	2021-09-27 12:04:14 +02:00
Tony Torralba	ad08ccb50b	Apply suggestion from code review	2021-09-27 12:00:21 +02:00
mc	95751fcc21	Update XsltInjection.qhelp ... Made a few minor tweaks during editorial review	2021-09-27 12:00:21 +02:00
Tony Torralba	13417dbf14	Remove DataFlow references from XsltInjection.qll	2021-09-27 12:00:20 +02:00
Tony Torralba	ff21662b23	Refactor XsltInjection.qll	2021-09-27 12:00:18 +02:00
Tony Torralba	6967b06dee	Decouple XsltInjection.qll to reuse the taint tracking configuration	2021-09-27 11:59:51 +02:00
Tony Torralba	fc58ada92e	Add change note	2021-09-27 11:58:20 +02:00
Tony Torralba	108118afa3	Use InlineExpectationsTest	2021-09-27 11:58:18 +02:00
Tony Torralba	d8bb5273e7	Refactor to use CSV sink models	2021-09-27 11:57:58 +02:00
Tony Torralba	c792567904	Move from experimental	2021-09-27 11:57:53 +02:00
Tony Torralba	6d9a88d1c8	Move to lib	2021-09-27 11:43:46 +02:00
mc	3520fed752	Update SpelInjection.qhelp	2021-09-27 11:40:51 +02:00
Tony Torralba	d10dbbdd9d	Apply suggestions from code review ... Co-authored-by: Marcono1234 <Marcono1234@users.noreply.github.com>	2021-09-27 11:40:51 +02:00
Tony Torralba	6bf1e87bbe	Remove CSV sinks; make imports private	2021-09-27 11:40:47 +02:00
Tony Torralba	91f46624b6	Refactor SpelInjection.qll	2021-09-27 11:40:26 +02:00
Tony Torralba	94f32d2985	Decouple SpelInjection.qll to reuse the taint tracking configuration	2021-09-27 11:39:30 +02:00
Tony Torralba	569426b04e	Consider subtypes of Expression and ExpressionParser ... Add parseRaw as additional taint step	2021-09-27 11:38:12 +02:00
Tony Torralba	b0852f6c16	Add change note	2021-09-27 11:37:46 +02:00
Tony Torralba	b985ddb868	Use InlineExpectationsTest	2021-09-27 11:37:41 +02:00
Tony Torralba	079769ed2e	Refactored SpelInjection.qll to use CSV sink models	2021-09-27 11:36:56 +02:00
Tony Torralba	fc6af0476f	Moved from experimental	2021-09-27 11:36:48 +02:00
Anders Schack-Mulligen	92ffd8c465	Merge pull request #6749 from aschackmull/java/istextblock ... Java: Add StringLiteral.isTextBlock().	2021-09-27 10:54:31 +02:00
luchua-bc	5264936fc3	Correct the run method and add Math.min check	2021-09-24 21:00:53 +00:00
alexet	49f8f46354	Java: Cache params string computation.	2021-09-24 14:12:26 +01:00
Anders Schack-Mulligen	854f2a046a	Java: Add StringLiteral.isTextBlock().	2021-09-24 13:11:18 +02:00
Benjamin Muskalla	70e1724463	Exclude methods with non-public parameter types	2021-09-24 12:41:12 +02:00
Benjamin Muskalla	38ca5aba98	Move test generator into subdirectory	2021-09-24 11:13:04 +02:00