4 Commits

Author	SHA1	Message	Date
Chris Smowton	c37ecb7102	Fix existing JaxRs tests ... * Expose getContentTypeString for use by tests * Use it to get constant arguments to @Produces annotations * Note that text/html is xss-vulnerable (I have no idea how it ever came to expect exactly text/plain)	2021-06-30 12:04:21 +01:00
Chris Smowton	768a8e78dd	Fixup JaxRs.ql to cope with stubbed MediaType file ... In a real-world situation this type would be defined in an imported jar, but since here it is defined in a stub the getADeclaredContentType routine can see it is defined as an empty string in the stubbed implementation. Filter these out so the test more closely resembles the real situation.	2021-06-28 19:24:19 +01:00
Owen Mansel-Chan	e6a6a8898b	Move Jax XSS sinks to JaxWS.qll and add tests	2021-06-10 10:43:39 +01:00
Owen Mansel-Chan	155d63d5f7	Add tests for JAX-RS	2021-06-10 10:43:36 +01:00