11 Commits

Author	SHA1	Message	Date
tiferet	06c7f1012c	Rename request forgery sink to server-side request forgery sink	2023-03-14 12:49:27 -07:00
tiferet	9421ba5303	Add and implementation of request forgery sinks and corresponding positive EndpointCharacteristic in Java	2023-03-14 12:49:27 -07:00
tiferet	f5109be2ac	Bug fixes	2023-03-14 12:49:27 -07:00
tiferet	c14a4c4d93	Add an implementation of TaintedPathATM.qll and corresponding positive EndpointCharacteristic in Java	2023-03-14 12:49:27 -07:00
tiferet	4546dbe51b	Subsample negative examples to 1% to prevent huge numbers.	2023-03-14 12:49:26 -07:00
tiferet	5d62dc3d2e	Add a Java NotASinkCharacteristic safe external API method	2023-03-14 12:49:26 -07:00
tiferet	0acd06a6d3	Add queries to surface high-confidence Java sinks and non-sinks to use as examples in the codex prompt.	2023-03-14 12:49:26 -07:00
tiferet	04abb87fef	Rewrite ExtractSinkCandidatesWithFlow.ql as a problem query so we can run it with codeql database analyze to output SARIF results.	2023-03-14 12:49:26 -07:00
tiferet	5dc5c3fb3f	Add a couple of endpoint filters for Java	2023-03-14 12:49:26 -07:00
tiferet	653b0128f5	Try implementing SqlInjectionATM.qll in Java	2023-03-14 12:49:26 -07:00
tiferet	c0f58371b4	Start making the additions needed to surface candidate Java sinks for codex classification outside the evaluator.	2023-03-14 12:49:26 -07:00