15 Commits

Author	SHA1	Message	Date
Owen Mansel-Chan	5745969462	Set subtypes=false when it has no meaning	2024-11-16 19:34:23 +00:00
Owen Mansel-Chan	dfd8e7d397	Set subtypes column to True in models ... This is almost always what we want.	2024-11-12 11:21:52 +00:00
Owen Mansel-Chan	49f3959405	Convert url-redirection sinks to MaD	2024-08-11 00:29:53 +01:00
Owen Mansel-Chan	8536e7eb02	Convert path-injection sinks to use MaD	2024-08-08 17:03:53 +01:00
Owen Mansel-Chan	93c9910e6f	Convert go/request-forgery sinks to MaD	2024-07-25 12:53:15 +01:00
Owen Mansel-Chan	6b52cd4957	Do not use "request" threat model kind ... It is not supported yet.	2024-07-17 12:12:00 +01:00
Owen Mansel-Chan	cfdd48711b	Convert Fasthttp::RequestHeader::RemoteFlowSource to MaD	2024-07-17 12:11:59 +01:00
Owen Mansel-Chan	abeca3d9f9	Convert Fasthttp::RequestCtx::RemoteFlowSource to MaD	2024-07-17 12:11:58 +01:00
Owen Mansel-Chan	729069e3d9	Convert Fasthttp::Request::RemoteFlowSource to MaD	2024-07-17 12:11:57 +01:00
Owen Mansel-Chan	c3169d258f	Convert Fasthttp::Args::RemoteFlowSource to MaD	2024-07-17 12:11:57 +01:00
Owen Mansel-Chan	5a00b5ec96	Convert Fasthttp::URI::RemoteFlowSource to MaD	2024-07-17 12:11:56 +01:00
Owen Mansel-Chan	18fa454d33	Replace Argument[-1] with Argument[receiver]	2024-06-04 11:45:59 +01:00
amammad	accc09fd8c	Lists of strings should be in alphabetical order. In a QLDoc, there should be a full stop at the end of each sentence. shorter model summary. change target from getACall() to getACall().getResult(.). better tests	2023-11-25 13:36:06 +01:00
amammad	2ad59a5403	fix SSRF sinks	2023-11-21 18:46:35 +01:00
amammad	9f8871746b	add flow summary instead of additional flow steps	2023-11-02 20:12:50 +01:00