Anders Schack-Mulligen
|
609d6011a2
|
Merge pull request #7229 from smowton/smowton/admin/document-xxe-sanitisation-policy
Document XXE sanitisation policy
|
2021-11-25 10:55:25 +01:00 |
|
Chris Smowton
|
3c8f6e3c07
|
Merge pull request #6717 from luchua-bc/java/thread-resource-abuse
Java: CWE-400 - Query to detect uncontrolled thread resource consumption
|
2021-11-24 18:59:41 +00:00 |
|
luchua-bc
|
b0031a0d85
|
Add local input test case and update qldoc
|
2021-11-24 13:30:50 +00:00 |
|
Chris Smowton
|
c74eac4930
|
Remove needless casts
|
2021-11-24 12:18:05 +00:00 |
|
Chris Smowton
|
cec91c4831
|
Update ThreadResourceAbuse.qhelp
|
2021-11-24 12:15:48 +00:00 |
|
Chris Smowton
|
5101a8e9f3
|
Fix qhelp test
|
2021-11-24 12:12:56 +00:00 |
|
Chris Smowton
|
136ecaf49a
|
Abbreviate qhelp example
|
2021-11-24 12:12:22 +00:00 |
|
Chris Smowton
|
120f2045cd
|
Document XXE sanitisation policy
|
2021-11-24 12:03:28 +00:00 |
|
Anders Schack-Mulligen
|
a3b263ee6e
|
Merge pull request #7181 from bmuskalla/coverageAsDiagnostics
Java: Add diagnostic query for framework coverage
|
2021-11-24 10:57:50 +01:00 |
|
luchua-bc
|
e56737e007
|
Use value step to optimize the taint step and add a test case for Apache file upload listener
|
2021-11-23 17:15:28 +00:00 |
|
Benjamin Muskalla
|
50518b5622
|
Fix sum of rows
|
2021-11-23 10:42:24 +01:00 |
|
luchua-bc
|
ed78d39d61
|
Move duplicate code to the shared library and update qldoc
|
2021-11-23 03:06:26 +00:00 |
|
Anders Schack-Mulligen
|
344f7bca5b
|
Merge pull request #7187 from aschackmull/java/dont-clear-in-summary-store
Java: Don't clear content in store steps in summaries.
|
2021-11-19 16:12:37 +01:00 |
|
Anders Schack-Mulligen
|
fc43220864
|
Java: bugfix
|
2021-11-19 15:01:29 +01:00 |
|
Anders Schack-Mulligen
|
2b1f34ed9b
|
Java: Don't clear content in store steps in summaries.
|
2021-11-19 14:22:28 +01:00 |
|
Benjamin Muskalla
|
cd39d15b40
|
Simplify diagnostic query
|
2021-11-19 12:28:24 +01:00 |
|
Anders Schack-Mulligen
|
1f3f7e9ccc
|
Merge pull request #7169 from erik-krogh/useMatches
use matches instead of regexpMatch/prefix/suffix
|
2021-11-19 11:42:47 +01:00 |
|
Benjamin Muskalla
|
fb9b16325d
|
Add diagnostic query for framework coverage
|
2021-11-19 10:30:59 +01:00 |
|
luchua-bc
|
b6a6ed5ba3
|
Add a recommendation category query for local user input and check Apache file upload
|
2021-11-19 04:23:19 +00:00 |
|
Erik Krogh Kristensen
|
011fc20963
|
use matches instead of regexpMatch
|
2021-11-18 15:41:25 +01:00 |
|
Anders Schack-Mulligen
|
6815a13a00
|
Merge pull request #6931 from hvitved/dataflow/restrict-derived-summaries
Data flow: Restrict derived flow summaries
|
2021-11-18 15:31:55 +01:00 |
|
github-actions[bot]
|
ecdaeb0c10
|
Add changed framework coverage reports
|
2021-11-18 00:09:24 +00:00 |
|
Anders Schack-Mulligen
|
22ebe68b1b
|
Merge pull request #7132 from aschackmull/java/overrides
Java: Fix overrides to not be transitive.
|
2021-11-17 15:38:11 +01:00 |
|
Anders Schack-Mulligen
|
1645fcf79c
|
Merge pull request #7088 from aschackmull/java/parameterized-subtyping
Java: Improve algorithm for subtyping of parameterized types.
|
2021-11-17 15:28:28 +01:00 |
|
Benjamin Muskalla
|
3c3a65243f
|
Merge pull request #6664 from bmuskalla/bmuskalla/modelGenerator
Java: Initial CSV model generator
|
2021-11-17 12:30:45 +01:00 |
|
Tom Hvitved
|
6d58dd2823
|
Java: Update expected test output
|
2021-11-17 10:49:51 +01:00 |
|
Tom Hvitved
|
ac41451798
|
Data flow: Sync files
|
2021-11-17 10:39:12 +01:00 |
|
Anders Schack-Mulligen
|
69671ce90d
|
Java: cache overrides
|
2021-11-17 09:16:58 +01:00 |
|
Benjamin Muskalla
|
b4eadefb92
|
Fix test
|
2021-11-16 17:28:01 +01:00 |
|
Benjamin Muskalla
|
3dbaa087d4
|
Remove class file
|
2021-11-16 16:36:27 +01:00 |
|
Chris Smowton
|
188915e597
|
Fix typos
|
2021-11-16 15:30:00 +00:00 |
|
Anders Schack-Mulligen
|
76606b5995
|
Java: Add more comments.
|
2021-11-16 16:11:14 +01:00 |
|
Anders Schack-Mulligen
|
c70d384d28
|
Merge pull request #7045 from aschackmull/dataflow/hidden-ret-subpaths
Data flow: Support hidden return nodes in subpaths predicate
|
2021-11-16 15:04:51 +01:00 |
|
Anders Schack-Mulligen
|
d408105fad
|
Java: Fix bad join-order.
|
2021-11-16 14:25:19 +01:00 |
|
Benjamin Muskalla
|
0e6bb28016
|
Only consider store steps
|
2021-11-16 10:46:24 +01:00 |
|
Benjamin Muskalla
|
fd9199c0c0
|
Simplify handling of tainting fields
|
2021-11-15 16:40:09 +01:00 |
|
Benjamin Muskalla
|
d7ed325b3f
|
Refactor content flow into predicate
|
2021-11-15 16:30:55 +01:00 |
|
Benjamin Muskalla
|
f4310898b3
|
Capture sources flowing into parameters
|
2021-11-15 16:28:28 +01:00 |
|
Tony Torralba
|
87ebcea913
|
Add AsyncTask value step
|
2021-11-15 16:13:36 +01:00 |
|
Anders Schack-Mulligen
|
1cd42ea668
|
Java: Fix test and some references.
|
2021-11-15 16:03:04 +01:00 |
|
Benjamin Muskalla
|
8040d9cfcf
|
Only consider true return statements as sinks
|
2021-11-15 15:29:01 +01:00 |
|
Benjamin Muskalla
|
e6e52a3b32
|
190
|
2021-11-15 15:18:03 +01:00 |
|
Anders Schack-Mulligen
|
2fe6880d70
|
Java: Add support for adding additional value steps.
|
2021-11-15 15:05:48 +01:00 |
|
Anders Schack-Mulligen
|
c616f5784d
|
Java: Fix overrides to not be transitive.
|
2021-11-15 13:54:53 +01:00 |
|
Benjamin Muskalla
|
dc022430ee
|
Remove superflous instanceof
|
2021-11-15 13:07:02 +01:00 |
|
Benjamin Muskalla
|
412bd32f45
|
Move more predicates into configuration
|
2021-11-15 13:04:23 +01:00 |
|
Benjamin Muskalla
|
b84c03672d
|
Prefer types to TargetAPI
|
2021-11-15 12:43:46 +01:00 |
|
Benjamin Muskalla
|
bca6cecd1c
|
Remove basic support for lambda flow
|
2021-11-15 12:38:30 +01:00 |
|
Benjamin Muskalla
|
78e3906ea7
|
Exclude more JDK internals
|
2021-11-15 11:58:10 +01:00 |
|
Benjamin Muskalla
|
cce3780481
|
Restrict param2return value features
|
2021-11-15 09:57:23 +01:00 |
|