Nora Dimitrijević
c81ea9d747
Merge branch 'main' into swift/rename-functions
2023-05-01 11:03:26 +02:00
Geoffrey White
5a77dfb5d5
Merge pull request #12905 from geoffw0/webviewdoc
...
Swift: Doc review for swift/unsafe-webview-fetch
2023-04-27 11:23:53 +01:00
Geoffrey White
507bb61c3c
Swift: Add missing '.'
2023-04-27 11:00:35 +01:00
Geoffrey White
c823c58e00
Swift: WebView -> web view.
2023-04-27 10:57:25 +01:00
Geoffrey White
cc8d7bff0b
Update swift/ql/src/queries/Security/CWE-079/UnsafeWebViewFetch.qhelp
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2023-04-27 10:12:13 +01:00
Nora Dimitrijević
3d67970357
Swift: query library renamings
2023-04-26 15:47:20 +02:00
Geoffrey White
84ddfe9c3f
Merge pull request #12919 from geoffw0/precision2
...
Swift: Upgrade two queries to precision high.
2023-04-25 14:04:52 +01:00
Geoffrey White
2c28fae7e3
Merge pull request #12836 from geoffw0/precision
...
Swift: Downgrade swift/unsafe-js-eval to precision medium.
2023-04-25 09:58:11 +01:00
Geoffrey White
b0b2d6e05f
Swift: Upgrade two queries to @precision high.
2023-04-25 09:42:49 +01:00
Geoffrey White
1f126b60ff
Swift: Touch UnsafeWebViewFetch.qhelp.
2023-04-24 09:35:32 +01:00
Geoffrey White
3779d8423f
Swift: Autoformat.
2023-04-19 14:57:17 +01:00
Geoffrey White
4484574301
Swift: Rename clashing CleartextStorage modules.
2023-04-19 14:29:25 +01:00
Geoffrey White
706fdce527
Swift: Downgrade swift/unsafe-js-eval to precision medium.
2023-04-14 18:16:16 +01:00
Tom Hvitved
3cc9dec9c8
Remove all queries.xml files
2023-04-13 11:18:58 +02:00
Geoffrey White
3baba70903
Merge pull request #12764 from geoffw0/modernsec
...
Swift: Modernize the encryption queries
2023-04-06 13:26:32 +01:00
Geoffrey White
fc5e958c8d
Swift: Add extendible sinks, sanitizers etc and use them.
2023-04-05 11:08:26 +01:00
Jeroen Ketema
cae1892ab4
Swift: Update StringLengthConflation to use DataFlow::StateConfigSig
2023-04-05 09:12:15 +02:00
Jeroen Ketema
3bd6fd0f51
Swift: Update CleartextStorageDatabase to use DataFlow::ConfigSig
2023-04-04 21:53:29 +02:00
Jeroen Ketema
cb8568f6fd
Swift: Rewrite PathInjection to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
97575807df
Swift: Rewrite CleartextTransmission to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
e8bfb87f67
Swift: Rewrite CleartextStoragePreferences to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
a45f381ab9
Swift: Rewrite CleartextLogging to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
5deafeaf9e
Swift: Rewrite UnsafeWebViewFetch to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
56156cfa36
Swift: Rewrite UnsafeJsEval to use `DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
db641e508a
Swift: Rewrite UncontrolledFormatString to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
0ff607c930
Swift: Rewrite XXEQuery to use DataFlow::ConfigSig
2023-04-04 09:10:21 +02:00
Jeroen Ketema
9220bea3ec
Swift: Rewrite SqlInjectionQuery to use DataFlow::ConfigSig
2023-04-04 09:10:15 +02:00
Geoffrey White
e62a6a037c
Swift: Split encryption queries into three parts (trivial re-organization of existing code).
2023-04-03 17:20:34 +01:00
Jeroen Ketema
70d0e987c4
Swift: Rewrite PredicateInjection to use DataFlow::ConfigSig
2023-04-03 16:19:30 +02:00
Paolo Tranquilli
bc698546e5
Swift: specify treatment for multi-line things
2023-03-31 10:32:40 +02:00
Paolo Tranquilli
33b4d2d653
Swift: add SuccessfullyExtractedLines query
...
This counts how many lines we have extracted some entity in. If we test
changes in this, we can have a more fine grained look into how much we
actually extract than looking at the extracted files.
2023-03-31 10:02:19 +02:00
Jeroen Ketema
edfd8715c8
Merge pull request #12695 from jketema/swift-configsig
...
Swift: Refactor a number of queries to use `DataFlow::ConfigSig`
2023-03-29 16:07:47 +02:00
Mathias Vorreiter Pedersen
e3e68b7753
Merge pull request #12642 from geoffw0/modernstring
...
Swift: Modernize the swift/string-length-conflation query
2023-03-29 14:55:40 +01:00
Jeroen Ketema
a381aa4d37
Swift: Use DataFlow::ConfigSig in InsufficientHashIterations.ql
2023-03-28 17:39:58 +02:00
Jeroen Ketema
60f033f10c
Swift: Use DataFlow::ConfigSig in ConstantSalt.ql
2023-03-28 17:39:18 +02:00
Jeroen Ketema
b97b3d9975
Swift: Use DtatFlow::ConfigSig in InsecureTLS.ql
2023-03-28 17:38:46 +02:00
Jeroen Ketema
42248220b4
Swift: Use DataFlow::ConfigSig in WeakSensitiveDataHashing.ql
2023-03-28 17:38:11 +02:00
Jeroen Ketema
a8599eb689
Swift: Use DataFlow::ConfigSig in ECBEncryption.ql
2023-03-28 17:37:37 +02:00
Jeroen Ketema
cc23ba3698
Swift: Use DataFlow::ConfigSig in HardcodedEncryptionKey.ql
2023-03-28 17:37:05 +02:00
Jeroen Ketema
1592b578d9
Swift: Use DataFlow::ConfigSig in ConstantPassword.ql
2023-03-28 17:36:37 +02:00
Jeroen Ketema
31512b8627
Swift: Use DataFlow::ConfigSig in StaticInitializationVector.ql
2023-03-28 17:36:00 +02:00
Geoffrey White
28998ccafe
Merge pull request #12471 from geoffw0/dbsinks2
...
Swift: Better sinks for swift/cleartext-storage-database
2023-03-27 12:51:13 +01:00
Anders Schack-Mulligen
d0b7ffda70
Python/Ruby/Swift: Rename references.
2023-03-23 13:06:19 +01:00
Geoffrey White
4c0d02a87d
Swift: Standardize the sources, sinks etc.
2023-03-23 10:39:03 +00:00
Geoffrey White
dfcad7fa84
Swift: Split the query into the usual three files.
2023-03-23 10:39:03 +00:00
Geoffrey White
a4e9d38abb
Swift: Fix the test regression.
2023-03-22 16:44:29 +00:00
Paolo Tranquilli
a131966066
Swift: make SuccessfullyExtractedFiles.ql more precise
...
This is done by adding a `isSuccessfullyExtracted` predicate that is
filled for primary files at the very end of the extractor invocation if
the frontend was performed successfully. If for example the extractor
crashes this will therefore not be filled.
The upgrade script is written so that `SuccessfullyExtractedFiles.ql`
on an upgraded script will give exactly the same results as before it.
2023-03-20 08:34:34 +01:00
Alex Denisov
7c15527300
Swift: add a query showing successfully extracted files
2023-03-17 11:27:03 +01:00
Geoffrey White
237669aab7
Merge branch 'main' into dbsinks2
2023-03-14 16:26:36 +00:00
Geoffrey White
725d784be8
Swift: Make the same result presentation change to swift/cleartext-storage-preferences.
2023-03-14 16:13:26 +00:00
