yo-h
|
eedc385b37
|
Java 15: adjust test options
|
2020-11-26 00:14:24 -05:00 |
|
Anders Schack-Mulligen
|
89361a3b75
|
Merge pull request #3812 from luchua-bc/java-android-remote-source
Java: Add remote source of Android intent extra
|
2020-11-03 09:35:40 +01:00 |
|
luchua-bc
|
864411b4b9
|
Updates to Android stub classes
|
2020-11-02 14:06:44 +00:00 |
|
luchua-bc
|
7ac3fb41d5
|
Clean up query and test files
|
2020-10-31 13:37:36 +00:00 |
|
luchua-bc
|
2ee9a45e69
|
Use proper class inheritance
|
2020-10-28 22:05:30 +00:00 |
|
Anders Schack-Mulligen
|
f3e2bd0fd9
|
Merge pull request #3141 from pwntester/InsecureBeanValidation
Insecure Bean Validation query
|
2020-10-28 12:04:12 +01:00 |
|
luchua-bc
|
3cc3fe9d37
|
Switch to TaintPreservingCallable and add test cases
|
2020-10-28 00:33:07 +00:00 |
|
Alvaro Muñoz
|
3378dd526e
|
remove compiled classes from stubs
|
2020-10-27 15:56:26 +01:00 |
|
Alvaro Muñoz
|
3dcd8acf97
|
add expected results
|
2020-10-27 15:47:54 +01:00 |
|
Alvaro Muñoz
|
671ea2f6c6
|
add test and stubs
|
2020-10-27 15:47:54 +01:00 |
|
Chris Smowton
|
3f298f3dc8
|
Add basic tests for Android intents as flow sources
|
2020-10-27 12:03:05 +00:00 |
|
Joe Farebrother
|
2050f82553
|
Merge pull request #4383 from joefarebrother/guava-strings
Java: Add modelling for Guava
|
2020-10-26 10:16:55 +00:00 |
|
Tom Hvitved
|
492b1141ef
|
Merge pull request #4445 from hvitved/csharp/sign-analysis-cfg
C#: Use CFG nodes instead of AST nodes in sign/modulus analysis
|
2020-10-26 09:45:38 +01:00 |
|
Chris Smowton
|
4fa2a79b41
|
Fix test data for WebView experimental query
|
2020-10-19 14:57:18 +01:00 |
|
Joe Farebrother
|
980fdd8dea
|
Java: Update Guava version in test stubs and change note
|
2020-10-19 11:56:28 +01:00 |
|
Chris Smowton
|
3e03db178f
|
Merge pull request #4483 from smowton/smowton/admin/droid-webview-pr-rebase
Rebase of #3706
|
2020-10-19 09:29:04 +01:00 |
|
Anders Schack-Mulligen
|
a806a4f086
|
Merge pull request #4312 from JLLeitschuh/feat/JLL/java/jhipster_CVE-2019-16303
Java: QL Query Detector for JHipster Generated CVE-2019-16303
|
2020-10-16 15:47:09 +02:00 |
|
Joe Farebrother
|
8834a8fed6
|
Java: Make tests less noisy
|
2020-10-16 10:22:41 +01:00 |
|
Joe
|
28647b20e2
|
Java: Add tests
|
2020-10-16 10:22:41 +01:00 |
|
Joe Farebrother
|
388f60f818
|
Merge pull request #4430 from joefarebrother/tainttrackingutils-refactor
Java: Refactor part of TaintTrackingUtil.qll
|
2020-10-15 16:05:38 +01:00 |
|
luchua-bc
|
b359802dd4
|
Replace non-ASCII apostrophe in Java stub classes
|
2020-10-15 14:53:32 +01:00 |
|
luchua-bc
|
6f6ec9d51a
|
Change the source class type and simplify the data-flow step
|
2020-10-15 14:53:32 +01:00 |
|
luchua-bc
|
c7750fd8c2
|
Fine tune the query
|
2020-10-15 14:53:32 +01:00 |
|
luchua-bc
|
5338332648
|
Enhance the query and add more test cases
|
2020-10-15 14:53:31 +01:00 |
|
luchua-bc
|
bd0c577ffd
|
Unsafe resource loading in Android webview
|
2020-10-15 14:53:30 +01:00 |
|
Tom Hvitved
|
2af7e1c213
|
C#: Use CFG nodes instead of AST nodes in sign/modulus analysis
|
2020-10-14 13:39:44 +02:00 |
|
Jonathan Leitschuh
|
fc71ca747d
|
Java: Track taint through java.io.File::toPath & java.nio.file.Path::toFile
|
2020-10-13 21:15:09 -04:00 |
|
Joe Farebrother
|
aa8bacb724
|
Java: Update test output
|
2020-10-12 15:50:47 +01:00 |
|
Joe Farebrother
|
eafde05a55
|
Java: Expand flow step refactoring to Callables
Also add some missing flow steps for StringBuilder
|
2020-10-12 15:50:47 +01:00 |
|
Joe Farebrother
|
91ce02aad4
|
Java: Fix bug involving varadic parameters
|
2020-10-12 15:50:46 +01:00 |
|
Joe Farebrother
|
ca60f2cc18
|
Java: Fix failing tests
|
2020-10-12 15:48:43 +01:00 |
|
Daniel Beck
|
0c70be145f
|
Track taint through java.io.File constructor and #toURI; URI#toURL
|
2020-10-10 20:54:55 +02:00 |
|
Anders Schack-Mulligen
|
cb00f8bcc4
|
Merge pull request #4362 from tamasvajk/feature/sign-analysis-cleanup
Sign analysis cleanup
|
2020-10-08 09:10:04 +02:00 |
|
Tamás Vajk
|
06f1c898dc
|
Merge pull request #4349 from tamasvajk/feature/modulus-analysis
ModulusAnalysis shared between C# and Java
|
2020-10-07 21:21:20 +02:00 |
|
Tamas Vajk
|
40a7f5aa1f
|
Java: Minor fix to modulus analysis to handle constant expressions and not only compile time constants
|
2020-10-07 11:42:42 +02:00 |
|
Tamas Vajk
|
5688210249
|
Java: add test for modulus analysis
|
2020-10-07 11:41:55 +02:00 |
|
Arthur Baars
|
89710928c8
|
Merge branch 'main' into android-database
|
2020-10-06 10:48:22 +02:00 |
|
Anders Schack-Mulligen
|
30f29e0ba7
|
Merge pull request #4320 from aibaars/multipart-request
Java: add Spring::MultipartRequest as taint source
|
2020-10-05 13:45:06 +02:00 |
|
Anders Schack-Mulligen
|
e660ac54da
|
Merge pull request #4358 from joefarebrother/format-taint
Java: Add taint steps through string formatting methods
|
2020-10-05 13:25:54 +02:00 |
|
Tamas Vajk
|
1cf3196b61
|
Fix additional PR review findings
|
2020-10-02 09:12:13 +02:00 |
|
Tamas Vajk
|
21ff1a0445
|
Address some of the PR review findings
|
2020-10-02 09:12:13 +02:00 |
|
Jonathan Leitschuh
|
ab3772eaeb
|
Update JHipster CodeQL query from code review
|
2020-10-01 15:38:56 -04:00 |
|
Arthur Baars
|
cf6036f9b4
|
Java: fix some android database sinks
|
2020-09-30 14:42:19 +02:00 |
|
Arthur Baars
|
061c2a754f
|
Java: tests for android database flow steps
|
2020-09-30 12:42:19 +02:00 |
|
Arthur Baars
|
a13e845127
|
Java: tests for android database sinks
|
2020-09-30 12:42:19 +02:00 |
|
Arthur Baars
|
39f5284dcc
|
Java: add stubs for some android database classes
|
2020-09-30 12:33:33 +02:00 |
|
Joe
|
be07d27a4c
|
Java: Improve tests
|
2020-09-29 16:36:34 +01:00 |
|
Joe
|
bea38fcd07
|
Java: Add taint modelling for string format methods
|
2020-09-28 16:25:45 +01:00 |
|
Tamas Vajk
|
2bbaa4e173
|
Handle unsigned types in sign analysis (C# and Java)
|
2020-09-28 14:46:32 +02:00 |
|
Joe
|
5256c0ba39
|
Java: Improve PrintAst tests and rename things
Add tests for `EnhcancedForStmt`s and `InstanceOfExpr`s.
Rename LocalVarDeclParent to SingleLocalVarDeclParent
|
2020-09-25 11:31:56 +01:00 |
|