Anders Schack-Mulligen
f77f486c6b
Merge pull request #3438 from artem-smotrakov/unsafe-tls
...
Java: Added a query for unsafe TLS versions
2020-06-09 14:07:17 +02:00
Artem Smotrakov
4a83fb8cc1
Java: Simplified MvelInjection test
2020-06-05 17:17:43 +03:00
Artem Smotrakov
df9d10f2ac
Java: Added MVELRuntime.execute() sink for MVEL injections
2020-06-05 17:17:43 +03:00
Artem Smotrakov
fa717b2d86
Java: Added template sinks for MVEL injections
2020-06-05 17:17:43 +03:00
Artem Smotrakov
8fd72659ec
Java: Added JSR 223 sinks for MVEL injections
...
- Updated MvelInjectionLib.qll
- Added tests and stubs for JSR 223 API
2020-06-05 17:17:43 +03:00
Artem Smotrakov
6a6c805048
Java: Added Accessor sink for MVEL injections
2020-06-05 17:13:24 +03:00
Artem Smotrakov
12e0234d40
Java: Added CompiledAccExpression sink for MVEL injections
2020-06-05 17:13:24 +03:00
Artem Smotrakov
32ff5ad496
Java: Added CompiledExpression sink for MVEL injections
2020-06-05 17:13:24 +03:00
Artem Smotrakov
c6c4c2c99b
Java: Add a query for MVEL injections
...
- Added experimental/Security/CWE/CWE-094/MvelInjection.ql
- Added experimental/Security/CWE/CWE-094/MvelInjectionLib.qll
- Added a qhelp file with an example of vulnerable code
- Added tests and stubs for mvel2-2.4.7
2020-06-05 17:13:24 +03:00
Artem Smotrakov
df3adeec36
Java: Add a query for SpEL injections
...
- Added experimental/Security/CWE/CWE-094/SpelInjection.ql
and a couple of libraries
- Added a qhelp file with a few examples
- Added tests and stubs for Spring
2020-05-31 20:52:45 +03:00
Artem Smotrakov
bab6f3788e
Java: Added a query for unsafe TLS versions
...
- Added experimental/Security/CWE/CWE-327/UnsafeTlsVersion.ql
- Added SslLib.qll
- Added a qhelp file with examples
- Added tests in java/ql/test/experimental/Security/CWE/CWE-327
2020-05-10 19:14:52 +02:00
