11714 Commits

Author	SHA1	Message	Date
Ed Minnix	4eb1035dfe	Documentation fixes	2023-08-17 13:05:38 -04:00
Ed Minnix	655a98452a	Remove escapeHTML models	2023-08-17 13:05:37 -04:00
Ed Minnix	d468ea9e90	Add default sanitizers	2023-08-17 13:05:37 -04:00
Ed Minnix	b305962c9a	Use more appropriate description	2023-08-17 13:05:37 -04:00
Ed Minnix	a36c12ff1f	Add trust-boundary-violation sink kind	2023-08-17 13:05:37 -04:00
Ed Minnix	60642c52aa	Use non-extending subtype	2023-08-17 13:05:37 -04:00
Ed Minnix	e22a67e7fe	Remove unnecessary methods	2023-08-17 13:05:37 -04:00
Ed Minnix	a3a4c31911	Replace servlet source node with RemoteFlowSource	2023-08-17 13:05:37 -04:00
Edward Minnix III	929090a847	Typos and style fixes ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-08-17 13:05:37 -04:00
Ed Minnix	52ebf9fff6	Java: Add trust boundary change note	2023-08-17 13:05:37 -04:00
Ed Minnix	172b8a6967	Documentation fixes	2023-08-17 13:05:37 -04:00
Ed Minnix	b567ec875a	Documentation	2023-08-17 13:05:37 -04:00
Ed Minnix	55fae2daaa	Added ESAPI sanitizer	2023-08-17 13:05:37 -04:00
Ed Minnix	97d6e82869	Stubs for org.owasp.esapi	2023-08-17 13:05:37 -04:00
Ed Minnix	f58590c6a9	Trust Boundary Work	2023-08-17 13:05:37 -04:00
Ed Minnix	2aba425464	TrustBoundary test ql file	2023-08-17 13:05:36 -04:00
Ed Minnix	ab9f0240d3	Add taint steps for HTML encoding methods	2023-08-17 13:05:36 -04:00
Ed Minnix	b9f2da7875	Comments and import fixes	2023-08-17 13:05:36 -04:00
Ed Minnix	3e7444cd66	Style fixes	2023-08-17 13:05:36 -04:00
Ed Minnix	15370506b8	Add missing security severity	2023-08-17 13:05:36 -04:00
Ed Minnix	a8b7e70d01	Convert trust boundary models to MaD	2023-08-17 13:05:36 -04:00
Ed Minnix	76438f13b6	Trust Boundary Query	2023-08-17 13:05:36 -04:00
Edward Minnix III	41a527cf72	Merge pull request #13934 from egregius313/egregius313/add-dashes-to-sha-algorithms ... Java: Add dashes to SHA algorithm names in `Encryption.qll`	2023-08-17 13:03:15 -04:00
Anders Schack-Mulligen	e27aad9d6c	Merge pull request #13987 from aschackmull/java/rangeanalysis-joinorder-fix ... Java: Join-order fix in RangeAnalysis.	2023-08-17 14:47:26 +02:00
Anders Schack-Mulligen	f8a0b6cd22	Java: Add nomagic	2023-08-17 11:20:02 +02:00
Anders Starcke Henriksen	1b31c4dd4c	Update filter to point to right pack.	2023-08-17 11:07:27 +02:00
Anders Schack-Mulligen	0afda68ba1	Java: Join-order fix in RangeAnalysis.	2023-08-17 11:07:24 +02:00
Anders Starcke Henriksen	56871c77f5	Merge branch 'main' into starcke/automodel-pack	2023-08-17 10:04:44 +02:00
Jeroen Ketema	33e8310625	Merge branch 'main' into shared-taint-tracking	2023-08-17 00:14:25 +02:00
Stephan Brandauer	44a9cf93e0	Merge branch 'main' into kaeluka/add-provenance-to-metadata	2023-08-16 09:31:03 +02:00
Stephan Brandauer	808dc3e8d3	Java: Automodel framework mode: track exact ai- provenance in alreadyAiModeled meta data property	2023-08-16 09:25:03 +02:00
Stephan Brandauer	20254c3d0a	Merge pull request #13886 from github/kaeluka/java-automodel-variadic-args ... Java: automodel application mode: use endpoint class like in framework mode	2023-08-16 08:49:01 +02:00
Ed Minnix	cafd08521e	Add change note	2023-08-15 23:46:12 -04:00
Ed Minnix	7cfe78a52d	Add dashes to SHA algorithm names in Encryption.qll	2023-08-15 23:42:17 -04:00
Michael Nebel	a95aad51bd	Merge pull request #13546 from michaelnebel/java/withoutelement ... Java: Support for With[out]Element for MaD.	2023-08-15 10:03:03 +02:00
Geoffrey White	657642a122	Java: Expose parts of the vquery message in the test.	2023-08-14 14:12:07 +01:00
Stephan Brandauer	bc55afcee7	Java: Automodel framework mode: use new interface	2023-08-14 13:17:55 +02:00
Stephan Brandauer	551b34e3be	Java: Automodel application mode: include candidates that are useful for regression testing	2023-08-14 11:46:40 +02:00
Stephan Brandauer	1a95a34441	Java: automodel: use the call for call context, rather than the argument	2023-08-14 09:54:44 +02:00
Stephan Brandauer	4107758c8a	Java: automodel extraction: add strings to query selection	2023-08-14 09:49:50 +02:00
Henry Mercer	1213eba630	Merge branch 'main' into post-release-prep/codeql-cli-2.14.2	2023-08-11 13:54:55 +01:00
Stephan Brandauer	a9906f6f7b	Java: fix - add extra $@ ... Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>	2023-08-11 09:15:09 +02:00
github-actions[bot]	432c21d4fb	Post-release preparation for codeql-cli-2.14.2	2023-08-09 18:45:18 +00:00
Stephan Brandauer	e927470961	Merge branch 'main' into kaeluka/java-automodel-variadic-args	2023-08-09 09:02:32 +02:00
Anders Schack-Mulligen	0ca3f3308b	Merge pull request #13478 from aschackmull/java/varcapture ... Java: Add proper support for variable capture flow.	2023-08-08 16:22:56 +02:00
Anders Starcke Henriksen	3918e57ffe	Take filter pack into account.	2023-08-08 15:10:12 +02:00
Anders Starcke Henriksen	8d34ab6d18	Merge branch 'main' into starcke/automodel-pack	2023-08-08 15:02:33 +02:00
Anders Starcke Henriksen	7da6da1c93	Merge pull request #13852 from github/starcke/automodel-package-filter ... Add option to filter automodel queries	2023-08-08 14:59:00 +02:00
Anders Schack-Mulligen	9d59f50340	Java: Review fixes.	2023-08-08 13:37:40 +02:00
Michael Nebel	0ed724eb13	Java: Make a flow summary for Set.clear using WithoutElement and introduce appropriate tests.	2023-08-08 11:10:08 +02:00