Andrew Eisenberg
2d81e30d81
Fix addsTo.pack references
...
This change is a prerequisite for a CLI change where there will be
strict testing of the `addsTo.pack` values. It must resolve to a pack
reference that is a transitive dependency of the current query's pack.
2023-05-29 13:45:41 -07:00
Jami Cogswell
f255b6acb8
Java: fix typos
2023-05-26 18:55:13 -04:00
Jami Cogswell
7e6913af62
Java: update provenance to 'hq-manual'
2023-05-26 18:55:13 -04:00
Jami Cogswell
60b07083c3
Java: add 'sink' kind
2023-05-26 18:55:13 -04:00
Jami Cogswell
65dd7eb8e7
Java: add neutral models discovered with path-inj and ssrf heuristics
2023-05-26 18:55:13 -04:00
Tony Torralba
903fdb0cb8
Java: Add models for the Play Framework
2023-05-26 10:23:43 +02:00
Tony Torralba
a276cc3094
Convert all command injection sinks to MaD format
2023-05-25 11:41:32 +02:00
Tony Torralba
654bb00946
Java: Tweak java.nio.files.Files.copy models
2023-05-23 10:27:19 +02:00
Tony Torralba
b58eb3a92c
Java: Add TemplateEngine.createTemplate as a groovy injection sink
2023-05-19 17:45:47 +02:00
Tony Torralba
2c54996499
Apply @jcogs33's suggestions from code review
2023-05-18 08:51:19 +02:00
Alvaro Muñoz
b235b1cbb9
improve yaml models
2023-05-17 16:40:28 +02:00
Alvaro Muñoz
d17199a9e1
add gson models
2023-05-16 15:00:26 +02:00
Tony Torralba
a48fa652ce
Java: Add SQLi sinks for Spring JDBC
2023-05-12 10:57:49 +02:00
Stephan Brandauer
61b0514b53
Merge pull request #13122 from github/java/update-mad-decls-after-triage-2023-05-11T08-52-07
...
Java: Update MaD Declarations after Triage
2023-05-11 16:04:36 +02:00
Tony Torralba
ca6ae26aad
Change provenance to ai-manual
2023-05-11 14:56:16 +02:00
Stephan Brandauer
9b35a9f74a
Update java/ql/lib/ext/org.apache.hadoop.fs.model.yml
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-05-11 14:01:25 +02:00
Stephan Brandauer
b0ec089a3a
Update MaD Declarations after Triage
2023-05-11 10:52:09 +02:00
Tony Torralba
e1f868b976
Merge pull request #12965 from atorralba/atorralba/java/apache-commons-net-models
...
Java: Add manual models for `org.apache.commons.net`
2023-05-10 16:28:19 +02:00
Tony Torralba
3f8a56722f
Remove auto-generated models
2023-05-10 10:35:34 +02:00
Michael Nebel
f2f9944a1c
Merge pull request #12931 from michaelnebel/neutralkinds
...
Java/C#: Introduce kind for neutrals.
2023-05-09 08:42:38 +02:00
Michael Nebel
bd23814e7c
Java: Update existing neutrals to include kind information.
2023-05-08 16:18:59 +02:00
Ed Minnix
0c604b1c34
Remove generated model
2023-05-04 16:56:14 -04:00
Ed Minnix
7a295b554b
Remove Map rows
2023-05-04 16:52:40 -04:00
Edward Minnix III
a34a51737f
Add SyntheticFields for JwsHeader
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-05-04 16:52:40 -04:00
Ed Minnix
a4f4ff15ce
Change method resolveSigningKey from class to interface
...
The resolveSigningKey method of SigningKeyResolverAdapter is an
implementation of that defined in SigningKeyResolver. So this changes
the type from the class to the interface it implements
2023-05-04 16:52:40 -04:00
Ed Minnix
a38466b0f3
Erase generics in generated model
2023-05-04 16:52:40 -04:00
Ed Minnix
26cdf24bf0
Added MaD models for io.jsonwebtoken
2023-05-04 16:52:39 -04:00
Jami
3c74c8bbe0
Merge pull request #13019 from jcogs33/jcogs33/url-open-stream-updates
...
Java: switch `url-open-stream` sink models to `experimentalSinkModel`
2023-05-04 15:07:44 -04:00
Jami Cogswell
78661f4ec9
Java: remove hardcoded-jwt-key summaries
2023-05-03 16:09:30 -04:00
Jami Cogswell
917268e7e6
Java: activate the models in openstream query
2023-05-03 09:57:45 -04:00
Jami Cogswell
f8b39fda2e
Java: switch url-open-stream models to experimentalSinkModel
2023-05-03 09:11:24 -04:00
Tony Torralba
34f978ed26
Move manual models out of the generated directory
2023-05-02 15:29:28 +02:00
Tony Torralba
564bb1ccb0
Manual fixes
2023-05-02 11:27:48 +02:00
Tony Torralba
e0074d52eb
Add autogenerated models for org.apache.commons.net
2023-04-28 14:33:23 +02:00
Tony Torralba
0094c25791
Fix StringJoiner.add models
2023-04-26 12:40:04 +02:00
Tony Torralba
4c102ab99c
Refactor to models-as-data
2023-04-26 10:13:15 +02:00
Tony Torralba
e3d93c3581
Fix FileCopyUtils models
2023-04-24 15:07:19 +02:00
Tony Torralba
ba49386e6c
Merge pull request #12806 from GeekMasher/main
...
Java: Add missing write-file models for Java IO / NIO
2023-04-18 11:15:53 +02:00
Jami
a149c41baf
Merge pull request #12155 from jcogs33/jcogs33/add-heuristic-ssrf-models
...
Java: add ssrf models discovered with heuristics
2023-04-17 15:45:48 -04:00
Mathew Payne
44c1b48f94
Merge branch 'main' into main
2023-04-17 12:40:23 +01:00
Mathew Payne
c77cdcf4c3
Removed the OutputStream models
2023-04-17 11:38:28 +00:00
Jami Cogswell
108b7a38aa
Java: update provenance to hq-manual
2023-04-13 10:24:24 -04:00
Jami Cogswell
4f9c51a02b
Java: update provenance to hq-manual now that 12595 is merged
2023-04-13 10:11:31 -04:00
Jami Cogswell
523feabaa2
Java: switch Netty setUri method from summary to sink; resolve conflicts
2023-04-13 09:16:18 -04:00
Jami Cogswell
d85bcacf84
Java: update some models, undo temp edits; resolve conflicts
2023-04-13 09:14:52 -04:00
Jami Cogswell
540b8391dc
Java: add more tests
2023-04-13 09:12:55 -04:00
Jami Cogswell
99320857af
Java: change model to summary and update comments
2023-04-13 09:12:55 -04:00
Jami Cogswell
8a6ff95035
Java: remove neutral which will be added in a different PR
2023-04-13 09:12:54 -04:00
Jami Cogswell
4daaf783e1
Java: remove cache ones for now
2023-04-13 09:12:54 -04:00
Jami Cogswell
cd7b79f62b
Java: add tests for org.apache.hc.client5.http.fluent
2023-04-13 09:12:54 -04:00
