Joe Farebrother
980fdd8dea
Java: Update Guava version in test stubs and change note
2020-10-19 11:56:28 +01:00
Chris Smowton
3e03db178f
Merge pull request #4483 from smowton/smowton/admin/droid-webview-pr-rebase
...
Rebase of #3706
2020-10-19 09:29:04 +01:00
Anders Schack-Mulligen
a806a4f086
Merge pull request #4312 from JLLeitschuh/feat/JLL/java/jhipster_CVE-2019-16303
...
Java: QL Query Detector for JHipster Generated CVE-2019-16303
2020-10-16 15:47:09 +02:00
Joe
28647b20e2
Java: Add tests
2020-10-16 10:22:41 +01:00
luchua-bc
b359802dd4
Replace non-ASCII apostrophe in Java stub classes
2020-10-15 14:53:32 +01:00
luchua-bc
bd0c577ffd
Unsafe resource loading in Android webview
2020-10-15 14:53:30 +01:00
Arthur Baars
39f5284dcc
Java: add stubs for some android database classes
2020-09-30 12:33:33 +02:00
Jonathan Leitschuh
ab618dcf2f
Java: QL Query Detector for JHipster Generated CVE-2019-16303
2020-09-21 18:46:13 -04:00
Porcupiney Hairs
441825919c
Java : add MongoDB injection sinks
2020-08-31 02:24:23 +05:30
luchua-bc
3a23451395
Enhance the query
2020-07-27 18:50:47 +00:00
luchua-bc
01fb51829c
Unsecure basic authentication
2020-07-24 20:35:09 +00:00
Arthur Baars
67b6018079
Merge pull request #3729 from luchua-bc/java-hardcoded-aws-credentials
...
Java: Hardcoded AWS credentials
2020-07-13 18:04:42 +02:00
Anders Schack-Mulligen
581d496167
Java: Fix LdapInjection qltest
2020-07-08 14:04:01 +02:00
Anders Schack-Mulligen
6eac8e82a3
Java: Consolidate spring-ldap-2.3.2 stubs.
2020-07-08 10:08:44 +02:00
Anders Schack-Mulligen
40b9d34ab9
Java: Consolidate springframework-5.2.3 stubs
2020-07-08 09:57:48 +02:00
luchua-bc
ede9cec4a9
Uncaught Servlet Exception
2020-06-29 20:07:53 +00:00
luchua-bc
f40e27a3c5
Hardcoded AWS credentials
2020-06-17 02:46:02 +00:00
Anders Schack-Mulligen
4b3ca13f25
Merge pull request #3491 from luchua-bc/java-insecure-smtp-ssl
...
Java: CWE-297 insecure JavaMail SSL configuration
2020-06-10 11:02:50 +02:00
luchua-bc
1fd9c7fdec
Add all dependent class stubs
2020-06-09 20:12:05 +00:00
luchua-bc
1e4addb20d
Add dependent stub classes for the test case
2020-06-08 16:17:01 +00:00
Artem Smotrakov
df9d10f2ac
Java: Added MVELRuntime.execute() sink for MVEL injections
2020-06-05 17:17:43 +03:00
Artem Smotrakov
fa717b2d86
Java: Added template sinks for MVEL injections
2020-06-05 17:17:43 +03:00
Artem Smotrakov
8fd72659ec
Java: Added JSR 223 sinks for MVEL injections
...
- Updated MvelInjectionLib.qll
- Added tests and stubs for JSR 223 API
2020-06-05 17:17:43 +03:00
Artem Smotrakov
6a6c805048
Java: Added Accessor sink for MVEL injections
2020-06-05 17:13:24 +03:00
Artem Smotrakov
12e0234d40
Java: Added CompiledAccExpression sink for MVEL injections
2020-06-05 17:13:24 +03:00
Artem Smotrakov
32ff5ad496
Java: Added CompiledExpression sink for MVEL injections
2020-06-05 17:13:24 +03:00
Artem Smotrakov
c6c4c2c99b
Java: Add a query for MVEL injections
...
- Added experimental/Security/CWE/CWE-094/MvelInjection.ql
- Added experimental/Security/CWE/CWE-094/MvelInjectionLib.qll
- Added a qhelp file with an example of vulnerable code
- Added tests and stubs for mvel2-2.4.7
2020-06-05 17:13:24 +03:00
Artem Smotrakov
df3adeec36
Java: Add a query for SpEL injections
...
- Added experimental/Security/CWE/CWE-094/SpelInjection.ql
and a couple of libraries
- Added a qhelp file with a few examples
- Added tests and stubs for Spring
2020-05-31 20:52:45 +03:00
Anders Schack-Mulligen
3b3ca6d41e
Merge pull request #3214 from aibaars/base64
...
Java: Add org.apache.commons.codec.(De|En)coder to TaintTrackingUtil
2020-05-06 09:21:18 +02:00
Arthur Baars
ae2bab7e9c
Add test case
2020-04-28 16:57:03 +02:00
Arthur Baars
31e284a707
Add test case
2020-04-28 11:26:43 +02:00
Aditya Sharad
a6e039b284
Java: Add tests for Jackson taint steps.
...
Add stubs for jackson-databind-2.10.
Based on http://fasterxml.github.io/jackson-databind/javadoc/2.10 .
Test taint through Jackson serialization APIs.
2020-03-24 12:59:24 -07:00
Anders Schack-Mulligen
7d19eb7c05
Java: Add LICENSE.txt
2020-02-05 09:38:16 +01:00
Anders Schack-Mulligen
2b1723dd88
Java: Move some taint tests.
2020-02-04 13:21:31 +01:00
Anders Schack-Mulligen
ea3d7b1b2f
Java: Adjust stubs and unit test.
2020-01-30 11:27:33 +01:00
Anders Schack-Mulligen
9391058363
Java: Add unit test for ldap injection.
2020-01-29 11:37:33 +01:00
Robin Neatherway
84202ff2e1
Java: Respect Hamcrest assertThat(X, notNullValue())
2019-10-29 17:52:13 +00:00
Pavel Avgustinov
127c33700c
Add Java stubs readme
2019-08-17 18:57:50 +01:00
Pavel Avgustinov
c92eb58300
Add j2objc license
2019-08-17 16:31:18 +01:00
Pavel Avgustinov
b52ea1e21b
Add Apache Shiro third-party notice
2019-08-17 16:31:18 +01:00
yh-semmle
64b2d331ae
Java: add test for Guice framework support
2019-02-15 20:01:08 -05:00
Pavel Avgustinov
846c9d5860
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
