5747 Commits

Author	SHA1	Message	Date
Jami Cogswell	f17e7266cf	Java: refactor QL	2025-03-23 19:48:15 -04:00
Jami Cogswell	ccbe77eb09	Java: move original files	2025-03-23 19:48:13 -04:00
Nick Rolfe	361fbba39b	Java: fix comma splice in alert message	2025-03-21 14:23:32 +00:00
mc	1f76793863	Merge branch 'main' into tamasvajk/java_empty_method	2025-03-21 10:01:10 +00:00
Nicolas Will	d18dac0c8e	Add JCA key (generation) modelling	2025-03-20 21:26:18 +01:00
Chris Smowton	9a2a13ed55	Merge remote-tracking branch 'origin/main' into smowton/admin/merge-rc317-into-main	2025-03-19 16:01:29 +00:00
Nicolas Will	95607c5f31	Refactor instances and consumers + add JCA hashes	2025-03-18 22:05:00 +01:00
github-actions[bot]	51cdeefafb	Post-release preparation for codeql-cli-2.20.7	2025-03-17 13:00:41 +00:00
github-actions[bot]	2d64a618e6	Release preparation for version 2.20.7	2025-03-17 12:15:54 +00:00
Owen Mansel-Chan	7702e9da7d	Address review comments	2025-03-14 11:44:01 +00:00
Tamas Vajk	9662b47464	Move likely test method logic to library	2025-03-14 11:36:15 +01:00
Tamas Vajk	05502bc74e	Change severity and precision	2025-03-14 11:36:14 +01:00
Tamás Vajk	30ff68dc71	Update java/ql/src/Language Abuse/EmptyMethod.md ... Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>	2025-03-14 11:36:14 +01:00
Tamas Vajk	2538ba82cc	Revert message	2025-03-14 11:36:13 +01:00
Tamás Vajk	050ef405c1	Improve query help ... Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>	2025-03-14 11:36:12 +01:00
Tamas Vajk	24f129c12c	Fix typo in QL help	2025-03-14 11:36:12 +01:00
Tamas Vajk	dea081b385	Add quality and cwe tag	2025-03-14 11:36:10 +01:00
Tamas Vajk	3be7044c6e	Fix references in query help file	2025-03-14 11:36:10 +01:00
Tamas Vajk	3d4fcefe70	Do not accept empty default methods	2025-03-14 11:36:09 +01:00
Tamas Vajk	77400778ea	Add change note	2025-03-14 11:36:08 +01:00
Tamas Vajk	3d2a72341b	Improve ql code quality	2025-03-14 11:36:08 +01:00
Tamas Vajk	6512ed9429	Adjust alert message	2025-03-14 11:36:07 +01:00
Tamas Vajk	7476f19b09	Adjust query help	2025-03-14 11:36:06 +01:00
Tamas Vajk	349f48982a	Make query more accepting	2025-03-14 11:36:06 +01:00
Tamas Vajk	a8063e1cd2	Adjust query name	2025-03-14 11:36:03 +01:00
Tamas Vajk	f7f8b47f12	Java: Add initial version of empty method query	2025-03-14 11:36:03 +01:00
Owen Mansel-Chan	6ca9a1ff9a	Add change note	2025-03-13 15:05:32 +00:00
Owen Mansel-Chan	a8e993c942	Fix FP for always-locked fields	2025-03-13 15:03:32 +00:00
Jami	ea9b0462bf	Merge pull request #18793 from jcogs33/jcogs33/java/spring-boot-actuators-promo ... Java: Promote Spring Boot Actuators query from experimental	2025-03-11 14:42:14 -04:00
Jami	ad63dd946c	Apply suggestions from docs review ... Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>	2025-03-10 09:01:04 -04:00
Lukas Abfalterer	32e1589745	Update java/ql/src/change-notes/2025-03-03-fix-improper-intent-verification-query.md ... Co-authored-by: Edward Minnix III <egregius313@github.com>	2025-03-06 09:57:16 +01:00
Jami Cogswell	0eec951218	Java: update change note to mention removal from Community Packs	2025-03-05 08:55:51 -05:00
Lukas Abfalterer	b4c75d832c	Merge branch 'main' into cwe-925	2025-03-05 14:15:07 +01:00
Lukas Abfalterer	c9b75afc2a	Fix QLL and add change notes with tests	2025-03-05 10:23:35 +01:00
Jami Cogswell	746f022cfa	Java: add 'Spring' prefix to public class names	2025-03-04 10:34:16 -05:00
REDMOND\brodes	8865d89fe9	Removing old ReusedNonce query.	2025-03-03 16:51:30 -05:00
REDMOND\brodes	2ee1681126	Adding a proof-of-concept PossibleReusedNonce query.	2025-03-03 15:09:27 -05:00
REDMOND\brodes	14cb2bb12f	Updates to insecure or unknown nonce at operation.	2025-03-03 14:42:50 -05:00
REDMOND\brodes	076f53147d	Proof-of-concept query for InsecureOrUnknownNonceAtOperation	2025-03-03 13:53:16 -05:00
github-actions[bot]	58f355ae5a	Post-release preparation for codeql-cli-2.20.6	2025-03-03 18:18:15 +00:00
github-actions[bot]	fa850cccb1	Release preparation for version 2.20.6	2025-03-03 17:13:19 +00:00
Lukas Abfalterer	a3749530d6	The query should only report cases when the method is not empty.	2025-03-03 10:20:46 +01:00
Jami Cogswell	b0b95965f6	Java: add change note	2025-03-02 17:13:37 -05:00
Jami Cogswell	fbf7513f37	Java: handle lock state check stored in variable	2025-03-02 17:01:18 -05:00
Nicolas Will	04f4683399	Rewrite handling of known unknowns and data-flow	2025-02-27 05:42:02 +01:00
Nicolas Will	f55f27b0d9	Expand handling of generic artifact sources	2025-02-25 18:22:38 +01:00
Owen Mansel-Chan	74a249597a	Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer ... Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values	2025-02-24 23:39:18 +00:00
Jami Cogswell	c2e859c756	Java: add change note	2025-02-24 18:33:45 -05:00
Jami Cogswell	26e396732a	Java: edit qhelp	2025-02-24 18:33:43 -05:00
Jami Cogswell	53cb30dcd0	Java: update metadata, move from CWE-016 to CWE-200	2025-02-24 18:33:41 -05:00