Ed Minnix
271d50ba99
Refactor Security.CWE.CWE-611 Xxe queries
2023-03-17 15:17:18 -04:00
Ed Minnix
80012b190d
Refactor Security.CWE.CWE-601.UrlRedirect
2023-03-17 15:17:18 -04:00
Ed Minnix
481d1f9b15
Refactor Security.CWE.CWE-297.UnsafeHostnameVerification
2023-03-17 15:17:18 -04:00
Ed Minnix
7bd7ecd9e6
Refactor Security.CWE.CWE-190 Arithmetic queries
2023-03-17 15:17:18 -04:00
Ed Minnix
4a202b430f
Security.CWE.CWE-200.AndroidWebViewSettingsAllowsContentAccess
2023-03-17 15:17:18 -04:00
Ed Minnix
d34dbbc96f
Refactor Security.CWE.CWE-134.ExternallyControlledFormatString
2023-03-17 15:17:18 -04:00
Ed Minnix
ac223ea57f
Refactor Security.CWE.CWE-094.InsecureBeanValidation
2023-03-17 15:17:18 -04:00
Ed Minnix
7aecefc4aa
Refactor Security.CWE.CWE-090.LdapInjectionLib
2023-03-17 15:17:18 -04:00
Ed Minnix
07fdcf2d04
Refactor Security.CWE.CWE-022.ZipSlip
2023-03-17 15:17:18 -04:00
Ed Minnix
e60e1a2ba9
Refactor Security.CWE.CWE-022.TaintedPathLocal
2023-03-17 15:17:18 -04:00
Stephan Brandauer
dce81cf0ae
Merge pull request #12463 from github/java/update-mad-decls-after-triage-2023-03-09T10-41-58
...
Java: Add MaD declarations after triage
2023-03-17 17:02:42 +01:00
Ian Lynagh
b8fb4b9b0f
Merge pull request #12521 from igfoo/igfoo/printast_sig
...
Java: PrintAst: Improve the ranking of callables
2023-03-17 11:43:40 +00:00
Ian Lynagh
f9bb0df6a2
Kotlin: Update expected PrintAst output
2023-03-16 15:20:07 +00:00
Ian Lynagh
13c2ef8c20
Java: PrintAst: Improve the ranking or callables
...
We now look not only at how many parameters each callable has, but what
its full signature is. This allows us to give a consistent order to
Test(Throwable) { ... }
Test(String) { ... }
2023-03-16 15:20:07 +00:00
Michael Nebel
2e86bbd6cd
Java: Introduce helper predicate to avoid empty predicate in IPA branch.
2023-03-16 14:11:53 +01:00
Tom Hvitved
9f798902bd
Data flow: Add consistency check for DataFlowCall::getEnclosingCallable
2023-03-16 08:40:53 +01:00
Henry Mercer
720eed398b
Merge pull request #12523 from github/henrymercer/polish-diagnostics
...
Polish diagnostic messages
2023-03-15 15:06:52 +00:00
Anders Schack-Mulligen
bc9942eb75
Merge pull request #12530 from aschackmull/java/refactor-dataflow-queries-3
...
Java: Refactor more dataflow queries to the new API (take 3)
2023-03-15 14:57:29 +01:00
Tony Torralba
5bc606753e
org.openjdk.jmh.runner.options tests
2023-03-15 14:47:27 +01:00
Tony Torralba
3b4980ba2f
org.kohsuke.stapler.model tests
2023-03-15 14:36:45 +01:00
Tony Torralba
c5a1905302
Fix stubs
2023-03-15 12:43:45 +01:00
Tony Torralba
341590f9ad
org.kohsuke.stapler.framework.io tests
2023-03-15 11:43:52 +01:00
Tony Torralba
e0c852c0b8
Fix stubs and test expectations
2023-03-15 11:33:02 +01:00
Anders Schack-Mulligen
6408d7cbbe
Java: Refactor RsaWithoutOaep.
2023-03-15 10:37:54 +01:00
Anders Schack-Mulligen
b3b5c2c767
Java: Refactor UnsafeContentUriResolution.
2023-03-15 10:32:58 +01:00
Anders Schack-Mulligen
4b814ec71c
Java: Refactor SensitiveCommunication.ql.
2023-03-15 10:32:35 +01:00
Anders Schack-Mulligen
ca8e013618
Java: Refactor FragmentInjection.
2023-03-15 10:23:21 +01:00
Anders Schack-Mulligen
5bd530f570
Java: Refactor IntentUriPermissionManipulation.
2023-03-15 10:13:28 +01:00
Anders Schack-Mulligen
b14b95cd79
Java: Refactor LogInjection
2023-03-15 10:10:02 +01:00
Anders Schack-Mulligen
abf3abdc65
Java: Delete DataFlowForOnActivityResult.
2023-03-15 09:47:21 +01:00
Anders Schack-Mulligen
bea7c43584
Java: Delete DataFlowForSerializability
2023-03-15 09:42:02 +01:00
Anders Schack-Mulligen
e8a7139020
Merge pull request #12476 from aschackmull/java/refactor-dataflow-queries-2
...
Java: Refactor more dataflow queries to the new API
2023-03-15 09:40:32 +01:00
Arthur Baars
fbe9823a42
Merge branch 'main' into henrymercer/polish-diagnostics
2023-03-14 23:42:33 +01:00
Tony Torralba
fe1cc405eb
org.kohsuke.stapler.framework.adjunct tests
2023-03-14 18:21:38 +01:00
Tony Torralba
44f239f4a4
Fix org.kohsuke.stapler.framework.adjunct models
2023-03-14 18:21:19 +01:00
Henry Mercer
6fbc8261f2
Java: Add a full stop
2023-03-14 17:03:42 +00:00
Henry Mercer
770924455e
Java: Use Dotcom help links
2023-03-14 17:00:48 +00:00
Henry Mercer
ce96f009b7
Java: Capitalise HTTPS
2023-03-14 16:58:24 +00:00
Henry Mercer
819e0dfbf0
Java: Use "relevant" instead of "suspicious"
2023-03-14 16:54:14 +00:00
Henry Mercer
110cb64b7a
Java: Avoid reference to other diagnostics
2023-03-14 16:52:58 +00:00
Henry Mercer
4c329b7b62
Java: Remove "please" in diagnostics
...
Per review from docs team
2023-03-14 16:46:06 +00:00
Tony Torralba
cbc0ba6ac6
org.apache.tools.zip tests
2023-03-14 17:41:20 +01:00
Tony Torralba
7455c27086
org.apache.tools.ant.taskdefs tests
2023-03-14 17:28:35 +01:00
Tony Torralba
6aa9726223
org.apache.tools.ant tests
2023-03-14 17:20:31 +01:00
Tony Torralba
db9e305a56
org.apache.commons.jelly tests
2023-03-14 17:04:14 +01:00
Anders Schack-Mulligen
30163e4f60
Merge pull request #12515 from aschackmull/java/neutral-dispatch
...
Java: Remove low-confidence dispatch to known neutrals.
2023-03-14 15:35:05 +01:00
Tom Hvitved
c132891669
Merge pull request #12513 from hvitved/dataflow/lambda-flow-no-expects-content
...
Data flow: Exclude `expectsContent` nodes from lambda flow
2023-03-14 15:28:35 +01:00
Ian Lynagh
32e8b130ad
Merge pull request #12501 from tamasvajk/java/javadoc_printast
...
Java: Fix printAST to handle javadoc belonging to multiple elements
2023-03-14 13:42:22 +00:00
Anders Schack-Mulligen
a9d2b936af
Java: Add qldoc.
2023-03-14 14:15:15 +01:00
Tony Torralba
31667b4478
org.apache.commons.io tests
2023-03-14 12:50:09 +01:00
