4152 Commits

Author	SHA1	Message	Date
haby0	d36a7ed10e	add test case	2021-11-25 15:47:32 +08:00
haby0	99c8b291b2	add sink	2021-11-25 15:47:32 +08:00
haby0	b8732859de	Add isSanitizerGuard, verify file path	2021-11-25 15:47:31 +08:00
haby0	31400df0d4	Modify sink and improve SQL injection detection	2021-11-25 15:47:30 +08:00
haby0	69690a2509	Modify sinks	2021-11-25 15:47:30 +08:00
haby0	4438f8c58c	Add MyBatis Mapper Sql Injection	2021-11-25 15:47:29 +08:00
Chris Smowton	3c8f6e3c07	Merge pull request #6717 from luchua-bc/java/thread-resource-abuse ... Java: CWE-400 - Query to detect uncontrolled thread resource consumption	2021-11-24 18:59:41 +00:00
Anders Schack-Mulligen	7ca3407c86	Dataflow: Sync.	2021-11-24 14:43:00 +01:00
Anders Schack-Mulligen	a7ec0fa900	Dataflow: Remove more disjunction-induced tuple duplication.	2021-11-24 14:39:49 +01:00
Michael Nebel	b9d0a60ce7	C#: Addressed review comments from hvitved	2021-11-24 14:35:52 +01:00
luchua-bc	b0031a0d85	Add local input test case and update qldoc	2021-11-24 13:30:50 +00:00
Anders Schack-Mulligen	4efdcc22a2	Dataflow: Improve barrier handling.	2021-11-24 14:17:05 +01:00
Chris Smowton	c74eac4930	Remove needless casts	2021-11-24 12:18:05 +00:00
Chris Smowton	cec91c4831	Update ThreadResourceAbuse.qhelp	2021-11-24 12:15:48 +00:00
Chris Smowton	5101a8e9f3	Fix qhelp test	2021-11-24 12:12:56 +00:00
Chris Smowton	136ecaf49a	Abbreviate qhelp example	2021-11-24 12:12:22 +00:00
Chris Smowton	120f2045cd	Document XXE sanitisation policy	2021-11-24 12:03:28 +00:00
Michael Nebel	a3ca9ad27d	C#: Sync flow summary implementation files and implement specific parts for ruby and java	2021-11-24 12:09:20 +01:00
Anders Schack-Mulligen	a3b263ee6e	Merge pull request #7181 from bmuskalla/coverageAsDiagnostics ... Java: Add diagnostic query for framework coverage	2021-11-24 10:57:50 +01:00
luchua-bc	e56737e007	Use value step to optimize the taint step and add a test case for Apache file upload listener	2021-11-23 17:15:28 +00:00
Anders Schack-Mulligen	822890f2bd	Dataflow: Remove disjunction-induced tuple duplication.	2021-11-23 15:05:24 +01:00
Anders Schack-Mulligen	f5f67dd11a	Dataflow: Pull ccc.matchesCall(call) from the recursive loop.	2021-11-23 14:35:33 +01:00
Anders Schack-Mulligen	e711ba9d18	Dataflow: Remove negation materialization.	2021-11-23 11:35:57 +01:00
Benjamin Muskalla	50518b5622	Fix sum of rows	2021-11-23 10:42:24 +01:00
luchua-bc	ed78d39d61	Move duplicate code to the shared library and update qldoc	2021-11-23 03:06:26 +00:00
Anders Schack-Mulligen	344f7bca5b	Merge pull request #7187 from aschackmull/java/dont-clear-in-summary-store ... Java: Don't clear content in store steps in summaries.	2021-11-19 16:12:37 +01:00
Anders Schack-Mulligen	fc43220864	Java: bugfix	2021-11-19 15:01:29 +01:00
Anders Schack-Mulligen	2b1f34ed9b	Java: Don't clear content in store steps in summaries.	2021-11-19 14:22:28 +01:00
Benjamin Muskalla	cd39d15b40	Simplify diagnostic query	2021-11-19 12:28:24 +01:00
Anders Schack-Mulligen	1f3f7e9ccc	Merge pull request #7169 from erik-krogh/useMatches ... use matches instead of regexpMatch/prefix/suffix	2021-11-19 11:42:47 +01:00
Benjamin Muskalla	fb9b16325d	Add diagnostic query for framework coverage	2021-11-19 10:30:59 +01:00
luchua-bc	b6a6ed5ba3	Add a recommendation category query for local user input and check Apache file upload	2021-11-19 04:23:19 +00:00
Erik Krogh Kristensen	011fc20963	use matches instead of regexpMatch	2021-11-18 15:41:25 +01:00
Anders Schack-Mulligen	6815a13a00	Merge pull request #6931 from hvitved/dataflow/restrict-derived-summaries ... Data flow: Restrict derived flow summaries	2021-11-18 15:31:55 +01:00
github-actions[bot]	ecdaeb0c10	Add changed framework coverage reports	2021-11-18 00:09:24 +00:00
Anders Schack-Mulligen	22ebe68b1b	Merge pull request #7132 from aschackmull/java/overrides ... Java: Fix overrides to not be transitive.	2021-11-17 15:38:11 +01:00
Anders Schack-Mulligen	1645fcf79c	Merge pull request #7088 from aschackmull/java/parameterized-subtyping ... Java: Improve algorithm for subtyping of parameterized types.	2021-11-17 15:28:28 +01:00
Benjamin Muskalla	3c3a65243f	Merge pull request #6664 from bmuskalla/bmuskalla/modelGenerator ... Java: Initial CSV model generator	2021-11-17 12:30:45 +01:00
Tom Hvitved	6d58dd2823	Java: Update expected test output	2021-11-17 10:49:51 +01:00
Tom Hvitved	ac41451798	Data flow: Sync files	2021-11-17 10:39:12 +01:00
Anders Schack-Mulligen	69671ce90d	Java: cache overrides	2021-11-17 09:16:58 +01:00
Benjamin Muskalla	b4eadefb92	Fix test	2021-11-16 17:28:01 +01:00
Benjamin Muskalla	3dbaa087d4	Remove class file	2021-11-16 16:36:27 +01:00
Chris Smowton	188915e597	Fix typos	2021-11-16 15:30:00 +00:00
Anders Schack-Mulligen	76606b5995	Java: Add more comments.	2021-11-16 16:11:14 +01:00
Anders Schack-Mulligen	c70d384d28	Merge pull request #7045 from aschackmull/dataflow/hidden-ret-subpaths ... Data flow: Support hidden return nodes in subpaths predicate	2021-11-16 15:04:51 +01:00
Anders Schack-Mulligen	d408105fad	Java: Fix bad join-order.	2021-11-16 14:25:19 +01:00
Benjamin Muskalla	0e6bb28016	Only consider store steps	2021-11-16 10:46:24 +01:00
Benjamin Muskalla	fd9199c0c0	Simplify handling of tainting fields	2021-11-15 16:40:09 +01:00
Benjamin Muskalla	d7ed325b3f	Refactor content flow into predicate	2021-11-15 16:30:55 +01:00