371 Commits

Author	SHA1	Message	Date
luchua-bc	1fd9c7fdec	Add all dependent class stubs	2020-06-09 20:12:05 +00:00
luchua-bc	5acfc52087	Add dependent stub classes for the test case	2020-06-08 16:17:40 +00:00
luchua-bc	cba81eeb97	Fix string/type match and add a test case	2020-06-06 03:56:12 +00:00
luchua-bc	3d4a5a337d	Add check for J2EE server directory listing	2020-05-30 10:58:16 +00:00
luchua-bc	104f1c3197	Add validation query for SSL Engine/Socket and com.rabbitmq.client.ConnectionFactory	2020-05-28 03:34:29 +00:00
Anders Schack-Mulligen	0d75c6a5f1	Merge pull request #3506 from ggolawski/spring-actuators-fix ... Fixes FPs in SpringBootActuators query	2020-05-25 13:09:56 +02:00
luchua-bc	6d1ba3f899	Java: CWE-273 Unsafe certificate trust	2020-05-24 16:43:15 +00:00
Anders Schack-Mulligen	c36e6213f1	Merge pull request #3288 from ggolawski/jndi-injection ... CodeQL query to detect JNDI injections	2020-05-19 11:03:29 +02:00
Grzegorz Golawski	ac329e81f8	Fixes FPs in SpringBootActuators query ... No evidence that Spring Actuators are being used, e.g. `http.authorizeRequests().anyRequest().permitAll()` Only safe Actuators are enabled, e.g. `EndpointRequest.to("health", "info")`	2020-05-18 22:55:33 +02:00
Grzegorz Golawski	14ce049fc6	Add support for Saxon	2020-05-15 00:12:08 +02:00
Grzegorz Golawski	afea9330b7	Fix the case where user-controlled input is passed as URL to env Hashtable	2020-05-08 00:44:22 +02:00
Grzegorz Golawski	df9921f870	Update according to the review comments	2020-05-07 23:19:13 +02:00
Grzegorz Golawski	f893954ea3	Add Spring LDAP and JMXServiceURL related sinks	2020-05-03 20:51:50 +02:00
Grzegorz Golawski	31a2972eca	Remove qlpack.yml as these are not needed	2020-04-27 23:32:48 +02:00
Grzegorz Golawski	0c75330e42	Remove qlpack.yml as these are not needed	2020-04-27 23:31:10 +02:00
Grzegorz Golawski	639aa826ea	Remove qlpack.yml as these are not needed	2020-04-27 23:26:59 +02:00
Grzegorz Golawski	d590f3fba8	CodeQL query to detect XSLT injections	2020-04-27 22:35:35 +02:00
Grzegorz Golawski	457e2eaf59	CodeQL query to detect OGNL injections	2020-04-19 20:31:57 +02:00
Grzegorz Golawski	af48bc3e57	CodeQL query to detect JNDI injections	2020-04-17 21:45:42 +02:00
Grzegorz Golawski	1d8da905ac	Make the test runnable via codeql test run	2020-04-03 21:44:13 +02:00
Grzegorz Golawski	f05b2af69d	Move to experimental	2020-04-03 00:27:51 +02:00