Anders Schack-Mulligen
|
5c40d553b4
|
Java: Switch XmlParsers lib to lightweight data flow.
|
2023-09-20 10:21:53 +02:00 |
|
yoff
|
4a37c2fc3a
|
Merge pull request #13778 from geoffw0/javaparsemode
Java: Understand multiple parse mode flags specified in a regular expression string
|
2023-09-18 14:22:59 +02:00 |
|
Tony Torralba
|
b08e410f45
|
Merge pull request #14029 from atorralba/atorralba/apache-cxf-models
Java: Add new Apache CXF models
|
2023-09-18 10:54:05 +02:00 |
|
Geoffrey White
|
af3d8c88bb
|
Java: Fix test comment.
|
2023-09-13 17:58:31 +01:00 |
|
Geoffrey White
|
8c3e778be6
|
Java: Port regex mode flag character fix from Python.
|
2023-09-13 17:50:52 +01:00 |
|
Tony Torralba
|
2448bc8ce2
|
Java: Add new Apache CXF models
|
2023-08-25 11:17:51 +02:00 |
|
Jeroen Ketema
|
b550c067a1
|
Java: Remove redundant inline expectation test imports
|
2023-08-25 00:18:55 +02:00 |
|
Jeroen Ketema
|
9d573e5544
|
Consolidate all InlineFlowTest libraries in the dataflow qlpack
|
2023-08-24 21:38:46 +02:00 |
|
Tony Torralba
|
8c32919381
|
Merge pull request #13903 from atorralba/atorralba/jaxrs-mad-models
Java: New models for JAX-RS
|
2023-08-24 11:43:13 +02:00 |
|
Tony Torralba
|
0f3918af16
|
Merge pull request #13773 from atorralba/atorralba/java/mdht-xxe-sink
Java: Add XXE sinks for MDHT
|
2023-08-23 13:49:49 +02:00 |
|
Edward Minnix III
|
929090a847
|
Typos and style fixes
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
55fae2daaa
|
Added ESAPI sanitizer
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
97d6e82869
|
Stubs for org.owasp.esapi
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
f58590c6a9
|
Trust Boundary Work
|
2023-08-17 13:05:37 -04:00 |
|
Ed Minnix
|
2aba425464
|
TrustBoundary test ql file
|
2023-08-17 13:05:36 -04:00 |
|
Geoffrey White
|
657642a122
|
Java: Expose parts of the vquery message in the test.
|
2023-08-14 14:12:07 +01:00 |
|
Tony Torralba
|
fb0102b763
|
Java: New models for JAX-RS
|
2023-08-07 11:52:23 +02:00 |
|
Tony Torralba
|
2cbb7ed296
|
Java: Add XXE sinks for MDHT
|
2023-07-31 11:13:17 +02:00 |
|
Geoffrey White
|
369f88beda
|
Java: Fix for multiple parse mode flags.
|
2023-07-20 11:49:54 +01:00 |
|
Geoffrey White
|
32c10885d4
|
Java: Add test case.
|
2023-07-20 11:43:11 +01:00 |
|
Anders Schack-Mulligen
|
ae24d68b5d
|
C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.
|
2023-07-19 11:41:15 +02:00 |
|
Tony Torralba
|
16529cdd18
|
Add failing test
|
2023-07-10 17:40:15 +02:00 |
|
Tony Torralba
|
a7c2a25cac
|
Merge pull request #12879 from atorralba/atorralba/java/command-injection-mad-sinks
Java: Convert all command injection sinks to MaD format
|
2023-06-27 14:06:45 +02:00 |
|
Jorge
|
7d0b880bf7
|
Merge branch 'main' into jorgectf/deserialization-lookahead
|
2023-06-23 18:24:39 +02:00 |
|
jorgectf
|
b6e4ba6f9d
|
Add SerialKiller model
|
2023-06-23 18:19:43 +02:00 |
|
Jeroen Ketema
|
742eb8dd12
|
Java: Rewrite InlineFlowTest as a parameterized module
|
2023-06-15 10:52:10 +02:00 |
|
Tony Torralba
|
182513a981
|
Merge pull request #13235 from atorralba/atorralba/java/hudson-models
Java: Add Hudson models
|
2023-06-14 12:33:18 +02:00 |
|
Jeroen Ketema
|
c3ba206b6a
|
Merge pull request #13346 from jketema/inline-2
Update inline expectation tests to use parameterized module
|
2023-06-13 10:10:55 +02:00 |
|
Tony Torralba
|
ffe67689ec
|
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
|
2023-06-13 09:27:33 +02:00 |
|
Jeroen Ketema
|
49993b023e
|
Java: Rewrite inline expectation tests to use parameterized module
|
2023-06-09 10:42:17 +02:00 |
|
Anders Schack-Mulligen
|
a0a9d30286
|
Java: Fix qltests.
|
2023-06-09 08:37:35 +02:00 |
|
Tony Torralba
|
ad2f558002
|
Add Hudson models
Includes models-as-data rows, flow sources, and XSS sanitizers.
Tests for models-as-data rows not included.
|
2023-06-02 11:06:24 +02:00 |
|
Tony Torralba
|
c3b1ef2cdf
|
Merge branch 'main' into atorralba/java/command-injection-mad-sinks
|
2023-06-02 08:57:24 +02:00 |
|
Tony Torralba
|
903fdb0cb8
|
Java: Add models for the Play Framework
|
2023-05-26 10:23:43 +02:00 |
|
Tony Torralba
|
a276cc3094
|
Convert all command injection sinks to MaD format
|
2023-05-25 11:41:32 +02:00 |
|
Tony Torralba
|
7d0b02e267
|
Merge pull request #13248 from atorralba/atorralba/java/nio-files-copy-models-fix
Java: Tweak java.nio.file.Files.copy models
|
2023-05-24 10:55:15 +02:00 |
|
Tony Torralba
|
654bb00946
|
Java: Tweak java.nio.files.Files.copy models
|
2023-05-23 10:27:19 +02:00 |
|
Ed Minnix
|
774baead60
|
Add test case based on missing result
|
2023-05-22 15:57:15 -04:00 |
|
Tony Torralba
|
b58eb3a92c
|
Java: Add TemplateEngine.createTemplate as a groovy injection sink
|
2023-05-19 17:45:47 +02:00 |
|
Tony Torralba
|
a8afa4785e
|
Merge pull request #13140 from atorralba/atorralba/java/spring-jdbc-namedparam-models
Java: Add SQLi sinks for Spring JDBC
|
2023-05-18 14:49:28 +02:00 |
|
Tony Torralba
|
2c54996499
|
Apply @jcogs33's suggestions from code review
|
2023-05-18 08:51:19 +02:00 |
|
Tony Torralba
|
770099f210
|
Merge branch 'main' into atorralba/java/promote-xxe-experimental-sinks
|
2023-05-16 09:49:34 +02:00 |
|
Tony Torralba
|
7d79d87d48
|
Add XPath.evaluate as XXE sink
|
2023-05-15 17:39:35 +02:00 |
|
Tony Torralba
|
a48fa652ce
|
Java: Add SQLi sinks for Spring JDBC
|
2023-05-12 10:57:49 +02:00 |
|
Ed Minnix
|
5f3c8fef3f
|
Privacy markers and fixed imports
|
2023-05-04 10:25:17 -04:00 |
|
Ed Minnix
|
c2b6a3f4e0
|
Add XPathInjectionQuery
|
2023-05-04 10:14:59 -04:00 |
|
Anders Schack-Mulligen
|
f685ae1fa7
|
Java: Update one more expected output.
|
2023-04-27 12:00:32 +02:00 |
|
Anders Schack-Mulligen
|
8e6038577d
|
Java: Update expected output.
|
2023-04-26 14:45:40 +02:00 |
|
Tony Torralba
|
e54eaed26f
|
Refactor tests to use InlineFlowTest
|
2023-04-26 12:19:59 +02:00 |
|
Tony Torralba
|
db73e16b70
|
Add tests
|
2023-04-26 12:12:10 +02:00 |
|