Joe Farebrother
7bf55fbc49
Update stubs to not include package protected members
2021-09-16 15:23:02 +01:00
Joe Farebrother
39349f3763
Fix failing test
2021-09-16 15:23:02 +01:00
Joe Farebrother
60c6158152
Fill in implementations of getters for synthetic fields
2021-09-16 15:23:01 +01:00
Joe Farebrother
225e70a8d0
Fill in implementations fo getMapKey/Value
2021-09-16 15:23:01 +01:00
Joe Farebrother
338a6f2114
Fill in implementations for getElement
2021-09-16 15:23:01 +01:00
Joe Farebrother
cd7c7c3152
Implement array getters/constructors in generated tests
2021-09-16 15:23:01 +01:00
Joe Farebrother
84748cda76
Increase field flow branch limit.
...
I'm a little concerned that this appears to be necassary for tests; as it may mean that results involving these flow steps may not be found in real-world projects.
2021-09-16 15:23:01 +01:00
Joe Farebrother
f94a61cc8a
Remove unneeded rows
2021-09-16 15:23:01 +01:00
Joe Farebrother
b51ffadd27
Improve generated tests
2021-09-16 15:23:01 +01:00
Joe Farebrother
0f2c50f1f5
Explicitly add the of and copyOf methods for ImmutableSorted variants of certain types.
2021-09-16 15:23:01 +01:00
Joe Farebrother
c8e2b027ee
Add fieldFlowBranchLimit to the tests
2021-09-16 15:23:00 +01:00
Joe Farebrother
839c9e35c8
Simplify synthetic table fields
2021-09-16 15:23:00 +01:00
Joe Farebrother
46eec3c8eb
Switch to simpler synthetic field model
2021-09-16 15:23:00 +01:00
Joe Farebrother
6ae11b5b2c
Generate stubs.
...
Some generated stubs were manually adjusted due to minor issues in the stub generator.
In particular, ambiguous references were resolved and references to private classes were removed.
2021-09-16 15:23:00 +01:00
Joe Farebrother
ff733e0334
Fix up issues in generated tests
2021-09-16 15:23:00 +01:00
Joe Farebrother
693d729ec6
Generate tests and fix broken specs
2021-09-16 15:23:00 +01:00
Joe Farebrother
2150c1d58e
Remove <> from flow summaries
2021-09-16 15:23:00 +01:00
Joe Farebrother
1273b063f4
Fix test expectations
2021-09-16 15:23:00 +01:00
Joe Farebrother
a755633405
Add the remaining utility classes
2021-09-16 15:22:59 +01:00
Joe Farebrother
19579f0d9a
Add more utility class models and reorder existing ones
2021-09-16 15:22:59 +01:00
Joe Farebrother
ca583bffd5
Add Lists and Collections2 utilites
2021-09-16 15:22:59 +01:00
Joe Farebrother
5fee6d2d19
Convert Sets utilities
2021-09-16 15:22:59 +01:00
Joe Farebrother
10f0f3038c
Add tables, improve tests, make fixes
2021-09-16 15:22:59 +01:00
Joe Farebrother
73aba09eee
Add create methods
2021-09-16 15:22:59 +01:00
Joe Farebrother
035d655e72
Update guava collection flow steps to CSV
2021-09-16 15:22:59 +01:00
Marcono1234
020aa4d94c
Java: Address feedback and fix test failures
2021-09-16 14:10:48 +01:00
Marcono1234
58d2d5d14e
Java: Replace incorrect usage of Literal.getLiteral()
2021-09-16 14:10:48 +01:00
Tony Torralba
f18c163408
Improve handling of the 'author' word as an exception
2021-09-16 11:57:28 +02:00
Tony Torralba
8022530f34
Merge pull request #5983 from atorralba/atorralba/promote-insecure-basic-auth
...
Java: Promote Insecure Basic Authentication query from experimental
2021-09-16 11:45:30 +02:00
Anders Schack-Mulligen
28e5dcef52
Java: Add container flow to the local taint flow relation.
2021-09-16 11:14:30 +02:00
Benjamin Muskalla
d3caa80274
Merge pull request #6706 from github/workflow/coverage/update
...
Update CSV framework coverage reports
2021-09-16 09:58:19 +02:00
Anders Schack-Mulligen
236ffc8972
Merge pull request #6700 from aschackmull/dataflow/subpaths-joinorder
...
Dataflow: Fix bad joinorder in subpaths
2021-09-16 08:22:59 +02:00
github-actions[bot]
563878d28d
Add changed framework coverage reports
2021-09-16 00:08:03 +00:00
Tony Torralba
21079a1315
Fix conditionControlsMethod predicate
...
Exceptions for throw and return statements were missing the appropriate condition
2021-09-15 17:51:51 +02:00
Tony Torralba
d3cf697b07
QLDoc
2021-09-15 17:32:36 +02:00
Tony Torralba
5ed9949498
Adapt InsecureBasicAuth to the previous commit
2021-09-15 17:20:28 +02:00
Tony Torralba
2e08c5dd2b
Refactored HttpsUrls.ql
2021-09-15 17:20:28 +02:00
Tony Torralba
c3c73377b8
Fix scope issues in the Java example
2021-09-15 17:20:28 +02:00
Tony Torralba
023264660b
Suggestions from code review
2021-09-15 17:20:28 +02:00
mc
0e7cbbfeb8
Update InsecureBasicAuth.qhelp
2021-09-15 17:20:28 +02:00
mc
e58b90ef1c
Added full stops
2021-09-15 17:20:28 +02:00
Tony Torralba
e159351179
Update java/change-notes/2021-06-01-insecure-basic-auth-query.md
...
Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com >
2021-09-15 17:20:27 +02:00
Tony Torralba
30178d4f23
Decouple InsecureBasicAuth.qll to reuse the taint tracking configuration
2021-09-15 17:20:27 +02:00
Tony Torralba
90df3fa94c
Remove CWE reference from qlhelp since it's obtained from metadata
2021-09-15 17:20:27 +02:00
Tony Torralba
49c6a56f97
Add change note
2021-09-15 17:20:27 +02:00
Tony Torralba
148443fae1
Use InlineExpectationsTest
2021-09-15 17:20:27 +02:00
Tony Torralba
2cada386b4
Refactored into InsecureBasicAuth.qll
2021-09-15 17:20:27 +02:00
Tony Torralba
905be67aae
Moved from experimental
2021-09-15 17:20:27 +02:00
Anders Schack-Mulligen
c0fd44c909
Dataflow: Sync.
2021-09-15 16:10:54 +02:00
Anders Schack-Mulligen
3abe1b4fc6
Dataflow: Fix bad join-order.
2021-09-15 16:10:30 +02:00
