4345 Commits

Author	SHA1	Message	Date
Porcupiney Hairs	4b25532b9f	include suggestions from review.	2020-11-13 17:55:56 +05:30
Porcupiney Hairs	2525cfd786	include suggestions from review.	2020-11-13 00:28:06 +05:30
Porcupiney Hairs	38de9b6433	add request forgery query	2020-11-10 01:19:35 +05:30
luchua-bc	bc899b6337	Move common code to a library and add more test cases	2020-11-09 14:14:54 +00:00
luchua-bc	76a0db84ee	Query for detecting Local Android DoS caused by NFE	2020-11-09 14:10:00 +00:00
luchua-bc	a83f9ced96	Change the query to only catch the common exception rethrown case	2020-11-09 12:07:43 +00:00
Anders Schack-Mulligen	22b4df0f3c	Merge pull request #4512 from luchua-bc/sensitive-broadcast ... Java: Sensitive broadcast	2020-11-04 10:47:48 +01:00
luchua-bc	fa54c23a83	Handle the edge case that an exception is rethrown in a catch clause	2020-11-03 16:31:12 +00:00
Anders Schack-Mulligen	92494441a7	Merge pull request #4554 from aschackmull/dataflow/reverse-partial ... Dataflow: Add support reverse partial flow exploration.	2020-11-03 15:34:30 +01:00
Anders Schack-Mulligen	89361a3b75	Merge pull request #3812 from luchua-bc/java-android-remote-source ... Java: Add remote source of Android intent extra	2020-11-03 09:35:40 +01:00
Anders Schack-Mulligen	7eb64aa998	Dataflow: Code review fixes.	2020-11-03 09:16:20 +01:00
Anders Schack-Mulligen	d5be4d7b92	Dataflow: Add support reverse partial flow exploration.	2020-11-03 09:16:19 +01:00
luchua-bc	864411b4b9	Updates to Android stub classes	2020-11-02 14:06:44 +00:00
luchua-bc	6a8ce37428	Add query for initCause and addSuppressed	2020-11-02 11:59:14 +00:00
luchua-bc	78d7fe2fbb	Detect rethrowing unprocessed exceptions in catch clause	2020-11-01 02:13:50 +00:00
luchua-bc	c89ebeeb5e	Text changes	2020-11-01 00:39:00 +00:00
luchua-bc	7ac3fb41d5	Clean up query and test files	2020-10-31 13:37:36 +00:00
luchua-bc	756db4c03a	Simplify the query and add more test cases	2020-10-31 01:33:24 +00:00
luchua-bc	67af9b0f3e	Add comments and update JavaDocs of GenericServlet using the source JAR	2020-10-30 17:05:53 +00:00
luchua-bc	93d1393ded	Add error-page check	2020-10-30 16:45:56 +00:00
luchua-bc	5a6339c1af	Remove userid from the regex	2020-10-29 15:46:05 +00:00
luchua-bc	2ee9a45e69	Use proper class inheritance	2020-10-28 22:05:30 +00:00
luchua-bc	908d659906	Minor updates	2020-10-28 20:23:22 +00:00
Anders Schack-Mulligen	f3e2bd0fd9	Merge pull request #3141 from pwntester/InsecureBeanValidation ... Insecure Bean Validation query	2020-10-28 12:04:12 +01:00
luchua-bc	99c79f4aa3	Enhance the dataflow sink and update test cases	2020-10-28 03:07:01 +00:00
luchua-bc	3cc3fe9d37	Switch to TaintPreservingCallable and add test cases	2020-10-28 00:33:07 +00:00
Alvaro Muñoz	3378dd526e	remove compiled classes from stubs	2020-10-27 15:56:26 +01:00
Alvaro Muñoz	3dcd8acf97	add expected results	2020-10-27 15:47:54 +01:00
Alvaro Muñoz	671ea2f6c6	add test and stubs	2020-10-27 15:47:54 +01:00
Chris Smowton	3f298f3dc8	Add basic tests for Android intents as flow sources	2020-10-27 12:03:05 +00:00
Joe Farebrother	2050f82553	Merge pull request #4383 from joefarebrother/guava-strings ... Java: Add modelling for Guava	2020-10-26 10:16:55 +00:00
Tom Hvitved	492b1141ef	Merge pull request #4445 from hvitved/csharp/sign-analysis-cfg ... C#: Use CFG nodes instead of AST nodes in sign/modulus analysis	2020-10-26 09:45:38 +01:00
luchua-bc	d9c140dc6c	Enhance the query to use sanitizer and null/empty array flow	2020-10-25 15:33:09 +00:00
Francis Alexander	ddc544aa07	Initial support for Play Framework > 2.6.x	2020-10-22 20:20:49 +05:30
luchua-bc	478771ccc5	Fix issues with method signature check	2020-10-21 02:49:53 +00:00
luchua-bc	2c2aab6ffc	Sensitive broadcast	2020-10-19 16:16:13 +00:00
Chris Smowton	4fa2a79b41	Fix test data for WebView experimental query	2020-10-19 14:57:18 +01:00
Joe Farebrother	980fdd8dea	Java: Update Guava version in test stubs and change note	2020-10-19 11:56:28 +01:00
Chris Smowton	3e03db178f	Merge pull request #4483 from smowton/smowton/admin/droid-webview-pr-rebase ... Rebase of #3706	2020-10-19 09:29:04 +01:00
Anders Schack-Mulligen	a806a4f086	Merge pull request #4312 from JLLeitschuh/feat/JLL/java/jhipster_CVE-2019-16303 ... Java: QL Query Detector for JHipster Generated CVE-2019-16303	2020-10-16 15:47:09 +02:00
Joe Farebrother	8834a8fed6	Java: Make tests less noisy	2020-10-16 10:22:41 +01:00
Joe	28647b20e2	Java: Add tests	2020-10-16 10:22:41 +01:00
Joe Farebrother	388f60f818	Merge pull request #4430 from joefarebrother/tainttrackingutils-refactor ... Java: Refactor part of TaintTrackingUtil.qll	2020-10-15 16:05:38 +01:00
luchua-bc	b359802dd4	Replace non-ASCII apostrophe in Java stub classes	2020-10-15 14:53:32 +01:00
luchua-bc	6f6ec9d51a	Change the source class type and simplify the data-flow step	2020-10-15 14:53:32 +01:00
luchua-bc	c7750fd8c2	Fine tune the query	2020-10-15 14:53:32 +01:00
luchua-bc	5338332648	Enhance the query and add more test cases	2020-10-15 14:53:31 +01:00
luchua-bc	bd0c577ffd	Unsafe resource loading in Android webview	2020-10-15 14:53:30 +01:00
Tom Hvitved	2af7e1c213	C#: Use CFG nodes instead of AST nodes in sign/modulus analysis	2020-10-14 13:39:44 +02:00
Jonathan Leitschuh	fc71ca747d	Java: Track taint through java.io.File::toPath & java.nio.file.Path::toFile	2020-10-13 21:15:09 -04:00