Ed Minnix
|
6a0167fa7f
|
Convert to using the new DataFlow modules
|
2023-03-27 12:16:44 -04:00 |
|
Ed Minnix
|
3936aea690
|
Split Ldap query file into libraries
|
2023-03-27 12:16:43 -04:00 |
|
Ed Minnix
|
9275b54e97
|
Refactoring the InsecureLdapUrl constructor
|
2023-03-27 12:16:43 -04:00 |
|
Ed Minnix
|
938d953789
|
Refactor getLeftmostOperand method
|
2023-03-27 12:16:43 -04:00 |
|
Ed Minnix
|
5ff4fcbc76
|
Replace exists with any
|
2023-03-27 12:16:43 -04:00 |
|
Ed Minnix
|
57886e1713
|
Moved files from experimental to src/
|
2023-03-27 12:16:43 -04:00 |
|
Ed Minnix
|
1bf4dd9649
|
Update to DataFlow::Global
|
2023-03-24 09:54:53 -04:00 |
|
Ed Minnix
|
d68bec98bc
|
Refactor CWE-940/AndroidIntentRedirection
|
2023-03-24 09:47:50 -04:00 |
|
Ed Minnix
|
1e0c6811a4
|
Refactor UnsafeAndroidAccess
|
2023-03-24 09:47:50 -04:00 |
|
Ed Minnix
|
768102ee92
|
Refactor java/android/webview-debugging-enabled
|
2023-03-24 09:47:50 -04:00 |
|
Anders Schack-Mulligen
|
978c5f7bd8
|
Java/C++: Autoformat
|
2023-03-23 13:06:19 +01:00 |
|
Anders Schack-Mulligen
|
ec34d44359
|
Java: Rename references.
|
2023-03-23 13:06:19 +01:00 |
|
Edward Minnix III
|
e91165bc01
|
Merge pull request #12531 from aschackmull/java/autoformat
Java: Autoformat.
|
2023-03-21 14:10:40 -04:00 |
|
Anders Schack-Mulligen
|
225ed1e220
|
Java: Autoformat.
|
2023-03-21 13:35:02 +01:00 |
|
Ed Minnix
|
b64ca5dcaa
|
Remove "private" marker from configurations
|
2023-03-20 12:26:54 -04:00 |
|
Ed Minnix
|
c7816ea180
|
Conform Config modules to naming convention
|
2023-03-20 12:26:54 -04:00 |
|
Ed Minnix
|
8856730843
|
Refactor CWE-614/InsecureCookie
|
2023-03-20 12:26:54 -04:00 |
|
Ed Minnix
|
de6959c688
|
Refactor CWE-209/StackTraceExposure
|
2023-03-20 12:26:54 -04:00 |
|
Ed Minnix
|
73a17536f5
|
Refactor CWE-129 queries
|
2023-03-20 12:26:54 -04:00 |
|
Ed Minnix
|
ae57807359
|
Refactor CWE-089 Sql queries
|
2023-03-20 12:26:54 -04:00 |
|
Ed Minnix
|
e6e974a752
|
Refactor CWE-079/SqlConcatenated
|
2023-03-20 12:26:54 -04:00 |
|
Ed Minnix
|
c1ee2dce61
|
Refactor CWE-078/ExecTaintedLocal
|
2023-03-20 12:26:54 -04:00 |
|
Edward Minnix III
|
ac58299d9e
|
Merge pull request #12541 from egregius313/egregius313/refactor-queries-to-new-dataflow-api
Java: Refactor more queries to the new DataFlow module API
|
2023-03-20 12:24:26 -04:00 |
|
Ed Minnix
|
83b0d073f0
|
Fix typo in QLDoc
|
2023-03-20 08:11:01 -04:00 |
|
Ed Minnix
|
84fd5f7ee0
|
Fix naming of ZipSlip configuration
|
2023-03-20 07:55:23 -04:00 |
|
Ed Minnix
|
60a4a79537
|
Make the Config module of public Flow modules public
This is to make things easier for the CodeML/ATM team once these
configurations are moved from `src/` to `lib/`.
|
2023-03-20 07:47:55 -04:00 |
|
Ed Minnix
|
2d5944fb0e
|
Refactor DataFlow configurations to use "Config" naming convention
|
2023-03-19 17:44:07 -04:00 |
|
Ed Minnix
|
7eb3fd2ff7
|
Conform queries to Config naming convention
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
310af99843
|
Refactor Security.CWE.CWE-807.TaintedPermissionsCheck
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
a9561a97c3
|
Refactor Security.CWE.CWE-643.XPathInjection
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
271d50ba99
|
Refactor Security.CWE.CWE-611 Xxe queries
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
80012b190d
|
Refactor Security.CWE.CWE-601.UrlRedirect
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
481d1f9b15
|
Refactor Security.CWE.CWE-297.UnsafeHostnameVerification
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
7bd7ecd9e6
|
Refactor Security.CWE.CWE-190 Arithmetic queries
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
4a202b430f
|
Security.CWE.CWE-200.AndroidWebViewSettingsAllowsContentAccess
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
d34dbbc96f
|
Refactor Security.CWE.CWE-134.ExternallyControlledFormatString
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
ac223ea57f
|
Refactor Security.CWE.CWE-094.InsecureBeanValidation
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
7aecefc4aa
|
Refactor Security.CWE.CWE-090.LdapInjectionLib
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
07fdcf2d04
|
Refactor Security.CWE.CWE-022.ZipSlip
|
2023-03-17 15:17:18 -04:00 |
|
Ed Minnix
|
e60e1a2ba9
|
Refactor Security.CWE.CWE-022.TaintedPathLocal
|
2023-03-17 15:17:18 -04:00 |
|
Anders Schack-Mulligen
|
6408d7cbbe
|
Java: Refactor RsaWithoutOaep.
|
2023-03-15 10:37:54 +01:00 |
|
Anders Schack-Mulligen
|
b3b5c2c767
|
Java: Refactor UnsafeContentUriResolution.
|
2023-03-15 10:32:58 +01:00 |
|
Anders Schack-Mulligen
|
4b814ec71c
|
Java: Refactor SensitiveCommunication.ql.
|
2023-03-15 10:32:35 +01:00 |
|
Anders Schack-Mulligen
|
ca8e013618
|
Java: Refactor FragmentInjection.
|
2023-03-15 10:23:21 +01:00 |
|
Anders Schack-Mulligen
|
5bd530f570
|
Java: Refactor IntentUriPermissionManipulation.
|
2023-03-15 10:13:28 +01:00 |
|
Anders Schack-Mulligen
|
b14b95cd79
|
Java: Refactor LogInjection
|
2023-03-15 10:10:02 +01:00 |
|
Anders Schack-Mulligen
|
e8a7139020
|
Merge pull request #12476 from aschackmull/java/refactor-dataflow-queries-2
Java: Refactor more dataflow queries to the new API
|
2023-03-15 09:40:32 +01:00 |
|
Edward Minnix III
|
de1ecf943e
|
Merge pull request #11915 from egregius313/egregius313/arbitrary-apk-installation
Java: Arbitrary APK installation
|
2023-03-14 06:23:51 -04:00 |
|
Anders Schack-Mulligen
|
7c0e89ffdd
|
Java: Refactor ArithmeticTainted.ql, TempDirLocalInformationDisclosure.ql
|
2023-03-13 11:27:14 +01:00 |
|
Anders Schack-Mulligen
|
da273269cb
|
Java: Refactor PolynomialReDoS.ql
|
2023-03-13 11:27:14 +01:00 |
|