2431 Commits

Author	SHA1	Message	Date
Anders Schack-Mulligen	43d1b0ab27	Java: Update qltests.	2021-06-01 11:47:52 +02:00
Anders Schack-Mulligen	a40880af70	Java: Add read-as-taint and config-dependent store-as-taint.	2021-06-01 11:47:52 +02:00
Anders Schack-Mulligen	2f087e17cb	Java: Allow <> in types for now.	2021-06-01 11:47:52 +02:00
Anders Schack-Mulligen	3f538e7fac	Java: Update some models.	2021-06-01 11:47:52 +02:00
Anders Schack-Mulligen	9e313d0cf6	Java: Remove container taint steps.	2021-06-01 11:47:52 +02:00
Anders Schack-Mulligen	3b6cef4f74	Java: Add container flow models.	2021-06-01 11:47:52 +02:00
Anders Schack-Mulligen	ffd52bb673	Java: Fix bug in matching generic signatures.	2021-06-01 11:47:52 +02:00
Anders Schack-Mulligen	1001dd84e6	Java: Switch array steps and one containerstep.	2021-06-01 11:47:52 +02:00
Anders Schack-Mulligen	ce509eb7e1	Merge pull request #5927 from aschackmull/dataflow/flowthrough-dispatch-perf ... Dataflow: Improve performance in flow-through pruning	2021-06-01 11:46:22 +02:00
Anders Schack-Mulligen	a4661e1aca	Merge pull request #5704 from edvraa/regexj ... Java: Regex injection	2021-06-01 11:45:59 +02:00
Artem Smotrakov	8dc1451d42	Better recommendation in UnsafeDeserializationRmi.qhelp ... Co-authored-by: Chris Smowton <smowton@github.com>	2021-06-01 12:16:09 +03:00
Anders Schack-Mulligen	5d21c64247	Dataflow: qldoc fix.	2021-06-01 10:49:47 +02:00
Anders Schack-Mulligen	4f9a6c151b	Dataflow: Code review fixes.	2021-06-01 10:29:17 +02:00
Anders Schack-Mulligen	683f853fa5	Dataflow: Fix another bad join order.	2021-05-31 15:14:13 +02:00
Alvaro Muñoz	41d034d5a0	Attempt to use information-leak sink category	2021-05-30 00:22:40 +02:00
Artem Smotrakov	b28d639166	Fixed errors in UnsafeDeserializationRmi.qhelp	2021-05-29 09:32:08 +02:00
Artem Smotrakov	62c6bee5f8	Simplified UnsafeDeserializationRmi.ql	2021-05-29 09:21:20 +02:00
Alvaro Muñoz	f60df3b26a	Update java/change-notes/2021-05-28-remove-senderror-xss-sink.md ... Co-authored-by: Chris Smowton <smowton@github.com>	2021-05-28 15:13:19 +02:00
Alvaro Muñoz	5a894ac7f7	update java library coverage documentation	2021-05-28 15:13:19 +02:00
Alvaro Muñoz	db2f05ac24	Updated Java change notes	2021-05-28 15:13:18 +02:00
Alvaro Muñoz	735e4e4b7b	update failing tests	2021-05-28 15:13:18 +02:00
Alvaro Muñoz	706874491b	Remove XSS sink for Java	2021-05-28 15:13:18 +02:00
Erik Krogh Kristensen	79989cc3f4	CPP/Java: Fix getAPrimaryQlClass implementations	2021-05-27 21:36:27 +02:00
Tamás Vajk	1997f500c2	Merge pull request #5832 from tamasvajk/feature/csv-coverage-report ... Java: github action for CSV coverage report	2021-05-25 14:51:19 +02:00
Anders Schack-Mulligen	d05f524759	Merge pull request #5941 from aschackmull/java/virt-disp-perf ... Java: Improve performance of virtual dispatch calculation.	2021-05-25 14:44:51 +02:00
Tamas Vajk	70b3066bb8	Add regenerated CSV reports	2021-05-25 13:38:22 +02:00
Tamas Vajk	d4f1cbe8d8	Add updated coverage report	2021-05-25 13:33:26 +02:00
Tamas Vajk	3db22ba482	Add Java coverage report files	2021-05-25 13:33:26 +02:00
Tamas Vajk	f1911e338d	Move and generate files to documentation folder + clean up after the script is executed	2021-05-25 13:33:26 +02:00
Anders Schack-Mulligen	4884da363f	Java: Bugfix.	2021-05-25 11:48:35 +02:00
Anders Schack-Mulligen	017bf68906	Dataflow: Fix bad join order.	2021-05-25 11:40:53 +02:00
Artem Smotrakov	1b51dd47ec	Added an example with deserialization filter to UnsafeDeserializationRmi.qhelp	2021-05-23 13:24:42 +02:00
Artem Smotrakov	c837605c85	Added test cases with sanitizers for UnsafeDeserializationRmi.ql	2021-05-23 13:01:22 +02:00
Artem Smotrakov	d2e29fc72c	Renamed RmiUnsafeDeserialization.ql -> UnsafeDeserializationRmi.ql	2021-05-23 10:21:05 +02:00
Artem Smotrakov	2d93eeae33	Covered deserialization filters in RmiUnsafeDeserialization.ql	2021-05-23 10:21:05 +02:00
Artem Smotrakov	e28f919f3d	Look for remote callable method only in RmiUnsafeDeserialization.ql	2021-05-23 10:21:05 +02:00
Artem Smotrakov	0182dfe1c0	Added RmiUnsafeDeserialization.qhelp	2021-05-23 10:21:04 +02:00
Artem Smotrakov	5ffe04d6a5	Updated expected output for RmiUnsafeDeserialization.java test	2021-05-23 10:21:04 +02:00
Artem Smotrakov	3d20330a92	More tests for RmiUnsafeDeserialization	2021-05-23 10:21:04 +02:00
Artem Smotrakov	ec6186a1c5	Draft of tests for RmiUnsafeDeserialization.ql	2021-05-23 10:21:04 +02:00
Artem Smotrakov	efa4b4f414	Cover Registry in RmiUnsafeDeserialization.ql	2021-05-23 10:21:04 +02:00
Artem Smotrakov	8b96ff9601	First draft of RmiUnsafeDeserialization.ql	2021-05-23 10:21:04 +02:00
Anders Schack-Mulligen	d00618f4f4	Java: Improve performance of virtual dispatch calculation.	2021-05-21 15:04:08 +02:00
Sebastian Bauersfeld	ffcca4d5e9	Add change note.	2021-05-20 20:07:14 +07:00
Sebastian Bauersfeld	28f597440f	Add method invocations of Spring's SavedRequest as a remote sources.	2021-05-20 20:00:14 +07:00
Anders Schack-Mulligen	4406b8e339	Dataflow: Sync.	2021-05-19 19:22:36 +02:00
Anders Schack-Mulligen	bb258813a1	Dataflow: Improve performance for dispatch-join in flow-through.	2021-05-19 19:20:57 +02:00
luchua-bc	02aa9c6fc7	Optimize the sink and update qldoc	2021-05-18 16:12:23 +00:00
luchua-bc	d4323a4a54	Update qldoc	2021-05-18 16:12:23 +00:00
luchua-bc	9d392263a5	Refactor inconsistent method names	2021-05-18 16:12:23 +00:00