13 Commits

Author	SHA1	Message	Date
Tony Torralba	292395b80e	Update test expectations	2024-06-04 10:35:16 +02:00
Anders Schack-Mulligen	a74cf6501a	Java: update qltest expected files.	2024-05-22 11:13:06 +02:00
Anders Schack-Mulligen	c2f5731e8d	Java: Update expected output (uninteresting).	2024-04-12 09:20:26 +02:00
Anders Schack-Mulligen	e9e445b2ba	Java: Add empty provenance column to expected files.	2024-02-09 11:32:00 +01:00
Tony Torralba	e2bf9ea2eb	Consider File.exists() et al a path-injection sink	2024-01-30 14:51:36 +01:00
Tony Torralba	2a146405ac	Adjust tests	2024-01-26 12:38:32 +01:00
Tony Torralba	527fe523a8	Add PathCreation.qll sinks to models-as-data ... The old PathCreation sinks can't be removed because doing so would cause alert wobble in the path injection queries. See their getReportingNode predicates.	2023-06-02 09:14:35 +02:00
luchua-bc	35a924292b	Model value passing between a setter and a getter call as a value step	2022-02-14 14:08:55 +00:00
luchua-bc	78630f25dd	Match attribute name to reduce FP	2022-02-11 23:53:31 +00:00
luchua-bc	ce03aeb4d9	Fixed an issue related to normalized path	2022-02-09 23:19:40 +00:00
luchua-bc	4609227e76	Use data model for request/session attribute operations	2022-02-09 03:24:46 +00:00
luchua-bc	ff4826d203	Correct the data model and update qldoc	2022-02-08 04:02:27 +00:00
luchua-bc	27043a09b3	File path injection with the JFinal framework	2022-01-23 18:07:48 +00:00