16 Commits

Author	SHA1	Message	Date
Jonathan Leitschuh	eee521e6ce	Fix test failure for TempDirLocalInformationDisclosure	2022-02-10 10:40:40 -05:00
Jonathan Leitschuh	49a73673b6	Fix FP from mkdirs call on exact temp directory	2022-02-09 11:04:23 -05:00
Jonathan Leitschuh	7f46640176	Consider calls to setReadable(false, false) then setReadable(true, true) to be safe	2022-02-08 17:57:10 -05:00
Chris Smowton	a6596ea7ce	Fix test requirements, formatting	2022-02-08 12:01:32 +00:00
Jonathan Leitschuh	c4112e6d4c	Post refactor fixiup	2022-02-07 15:02:13 -05:00
Chris Smowton	de38638db6	Combine CWE-200 queries	2022-02-07 14:22:36 -05:00
Jonathan Leitschuh	0268dd9f0a	Add file creation sanitizer	2022-02-04 17:10:27 -05:00
Jonathan Leitschuh	9299c7996d	Add information disclosure test fix suggestions	2022-02-04 17:10:27 -05:00
Jonathan Leitschuh	79db76dcf8	Fix test failures TempDirLocalInformationDisclosureFromSystemProperty	2022-02-04 17:10:27 -05:00
Jonathan Leitschuh	7e514e9ef9	Add QLdoc and fix Compiler Errors in Tests	2022-02-04 17:10:26 -05:00
Jonathan Leitschuh	f910fd4719	Remove path flow tracking in 'TempDirLocalInformationDisclosureFromMethodCall'	2022-02-04 17:10:25 -05:00
Jonathan Leitschuh	13fed0e9b6	Temp Dir Info Disclosure: Final pass and add documentation	2022-02-04 17:10:24 -05:00
Jonathan Leitschuh	bc12e994b0	Add java.nio.file.Files API checks	2022-02-04 17:10:24 -05:00
Jonathan Leitschuh	ecad7534ae	Add mkdirs check	2022-02-04 17:10:24 -05:00
Jonathan Leitschuh	cf0ed81575	Add TempDir taint tracking for Files.write	2022-02-04 17:10:24 -05:00
Jonathan Leitschuh	3a15678b1e	Java: CWE-200: Temp directory local information disclosure vulnerability	2022-02-04 17:10:23 -05:00