Jami Cogswell
e28ce959a3
Java: update CaptureSinkModels test case
2023-05-31 15:51:07 -04:00
Jami Cogswell
5dbb698481
Java: update open/jdbc-url sink kinds to request-forgery
2023-05-31 15:50:31 -04:00
Tony Torralba
482bb94ad9
Merge pull request #13179 from pwntester/java_gson
...
[Java] Add basic support for Google's Gson library
2023-05-31 11:16:19 +02:00
Tony Torralba
6f302a43ea
Merge pull request #13297 from atorralba/atorralba/java/playmvc-models
...
Java: Add models for the Play Framework
2023-05-31 09:02:17 +02:00
Tony Torralba
d3d67f0fb0
Add tests & stubs
2023-05-30 17:52:00 +02:00
Andrew Eisenberg
2d81e30d81
Fix addsTo.pack references
...
This change is a prerequisite for a CLI change where there will be
strict testing of the `addsTo.pack` values. It must resolve to a pack
reference that is a transitive dependency of the current query's pack.
2023-05-29 13:45:41 -07:00
Jami Cogswell
24fc4ba2d4
Java: add tests
2023-05-26 18:55:13 -04:00
Tony Torralba
8e16a0d144
Add tests and stubs for the summaries
2023-05-26 12:43:58 +02:00
Tony Torralba
903fdb0cb8
Java: Add models for the Play Framework
2023-05-26 10:23:43 +02:00
Tony Torralba
a276cc3094
Convert all command injection sinks to MaD format
2023-05-25 11:41:32 +02:00
Tony Torralba
7d0b02e267
Merge pull request #13248 from atorralba/atorralba/java/nio-files-copy-models-fix
...
Java: Tweak java.nio.file.Files.copy models
2023-05-24 10:55:15 +02:00
Tony Torralba
654bb00946
Java: Tweak java.nio.files.Files.copy models
2023-05-23 10:27:19 +02:00
Ed Minnix
774baead60
Add test case based on missing result
2023-05-22 15:57:15 -04:00
Tony Torralba
b58eb3a92c
Java: Add TemplateEngine.createTemplate as a groovy injection sink
2023-05-19 17:45:47 +02:00
Tony Torralba
a8afa4785e
Merge pull request #13140 from atorralba/atorralba/java/spring-jdbc-namedparam-models
...
Java: Add SQLi sinks for Spring JDBC
2023-05-18 14:49:28 +02:00
Tony Torralba
2c54996499
Apply @jcogs33's suggestions from code review
2023-05-18 08:51:19 +02:00
Tony Torralba
770099f210
Merge branch 'main' into atorralba/java/promote-xxe-experimental-sinks
2023-05-16 09:49:34 +02:00
Tony Torralba
7d79d87d48
Add XPath.evaluate as XXE sink
2023-05-15 17:39:35 +02:00
Kasper Svendsen
d40cd0f275
Java: Make implicit this receivers explicit
2023-05-12 12:47:21 +02:00
Tony Torralba
a48fa652ce
Java: Add SQLi sinks for Spring JDBC
2023-05-12 10:57:49 +02:00
Kasper Svendsen
0de6e4138f
Merge pull request #13037 from kaspersv/kaspersv/java-enable-implicit-this-warnings
...
Java: Enable implicit this receiver warnings
2023-05-09 10:24:31 +02:00
Michael Nebel
f2f9944a1c
Merge pull request #12931 from michaelnebel/neutralkinds
...
Java/C#: Introduce kind for neutrals.
2023-05-09 08:42:38 +02:00
Kasper Svendsen
b0714904c0
Java: Enable implicit this receiver warnings
2023-05-09 08:25:40 +02:00
Edward Minnix III
05b1bd881e
Merge pull request #12852 from egregius313/egregius313/java/webgoat/model-jwsheader
...
Java: Model `io.jsonwebtoken.SigningKeyResolverAdapter` and `io.jsonwebtoken.JwsHeader`
2023-05-08 10:57:34 -04:00
Michael Nebel
c30f080ff0
Java: Update expected test out for the model generator.
2023-05-08 16:18:59 +02:00
Ed Minnix
5c10d42915
More test cases for io.jsonwebtoken.SigningKeyResolverAdapter
2023-05-04 16:52:40 -04:00
Ed Minnix
a4fa1ec768
Test case for modeling io.jsonwebtoken.SigningKeyResolverAdapter
2023-05-04 16:52:40 -04:00
Ed Minnix
3d0147765c
Add missing methods to jwtk-jjwt stubs
2023-05-04 16:52:40 -04:00
Ed Minnix
5f3c8fef3f
Privacy markers and fixed imports
2023-05-04 10:25:17 -04:00
Ed Minnix
c2b6a3f4e0
Add XPathInjectionQuery
2023-05-04 10:14:59 -04:00
Kasper Svendsen
081085e128
Java: Make implicit this receivers explicit
2023-05-03 13:37:35 +02:00
Anders Schack-Mulligen
246d904712
Merge pull request #12948 from aschackmull/dataflow/pathnode-type-tostring
...
Dataflow: Add type to PathNode.toString.
2023-04-27 14:14:10 +02:00
Anders Schack-Mulligen
f685ae1fa7
Java: Update one more expected output.
2023-04-27 12:00:32 +02:00
Anders Schack-Mulligen
8e6038577d
Java: Update expected output.
2023-04-26 14:45:40 +02:00
Tony Torralba
5d80f0818c
Fix TestModels test expectation
2023-04-26 14:32:28 +02:00
Tony Torralba
fba61d51ed
Remove experimental files
2023-04-26 12:24:30 +02:00
Tony Torralba
e54eaed26f
Refactor tests to use InlineFlowTest
2023-04-26 12:19:59 +02:00
Tony Torralba
db73e16b70
Add tests
2023-04-26 12:12:10 +02:00
Tony Torralba
2c4246f29a
Fix test comments
2023-04-26 10:08:18 +02:00
Tony Torralba
389e8c4fe8
Add review suggestions
2023-04-26 10:08:16 +02:00
Tony Torralba
0650c016f6
Add models for StringJoiner constructor
2023-04-26 10:07:59 +02:00
Tony Torralba
311498841e
Add fluent models
...
Add tests
2023-04-26 10:07:27 +02:00
Edward Minnix III
e50f56cc56
Merge pull request #12917 from egregius313/egregius313/java/dataflow/refactor-inline-flow-test
...
Java: Refactor `InlineFlowTest` to remove usage of `DataFlow::Configuration` API
2023-04-25 16:18:56 -04:00
Ed Minnix
d98723c35a
Fix naming of OkHttpFlowConfig in test
2023-04-25 10:31:27 -04:00
Jami
cff7f63193
Merge pull request #12838 from jcogs33/jcogs33/add-class-for-callables-interesting-for-modeling
...
Java: add class that represents callables that are interesting for MaD models
2023-04-25 09:28:56 -04:00
Ed Minnix
3af72fa28e
Remove legacy code from InlineFlowTest
2023-04-24 17:10:32 -04:00
Ed Minnix
59e59125d6
Refactor tests
2023-04-24 17:10:32 -04:00
Tony Torralba
e3d93c3581
Fix FileCopyUtils models
2023-04-24 15:07:19 +02:00
Jami Cogswell
2ae4b646a0
Java: adjust genVsMan query test cases
2023-04-20 16:19:15 -04:00
Jami Cogswell
fa1a6da60d
Java: update genVsMan query test case
2023-04-20 16:19:15 -04:00
