13 Commits

Author	SHA1	Message	Date
MarkLee131	75162bb9eb	Update java/ql/test/query-tests/security/CWE-532/Test.java ... Co-authored-by: Owen Mansel-Chan <62447351+owen-mc@users.noreply.github.com>	2026-04-29 20:53:58 +08:00
MarkLee131	f338ded349	Java: treat hash/encrypt/digest methods as sensitive-log sanitizers ... The sensitive-log query (CWE-532) lacked sanitizers for hashed or encrypted data, while the sibling cleartext-storage query (CWE-312) already recognized methods with "encrypt", "hash", or "digest" in their names as sanitizers (CleartextStorageQuery.qll:86). This adds an EncryptionBarrier to SensitiveLoggingQuery that applies the same name-based heuristic, making the two queries consistent. Calls like DigestUtils.sha256Hex(password) or hashPassword(secret) are no longer flagged when their results are logged.	2026-04-04 21:35:36 +08:00
Owen Mansel-Chan	1a59839f3c	Range library recognises long literals now	2025-11-24 14:10:54 +00:00
Owen Mansel-Chan	ec381e4ec5	Use range analysis and improve tests	2025-11-21 10:31:50 +00:00
aegilops	62ee6d3a33	Made changes requested by reviewers - bounded() for range checking, style and better comments	2025-11-20 11:46:42 +00:00
aegilops	fa703e3e60	Test cases for sensitive logging sanitizer	2025-11-14 16:53:46 +00:00
Nora Dimitrijević	6134518d60	[TEST] Java: SensitiveLogInfo: convert to qlref	2025-07-17 18:59:01 +02:00
Owen Mansel-Chan	e259b25428	Add "tokenizer" to sensitive variable name FPs	2024-07-30 15:38:32 +01:00
Owen Mansel-Chan	bdff0fdcc5	Add test for "tokenizer"	2024-07-30 15:37:46 +01:00
Owen Mansel-Chan	0d71072f94	Make test more compact	2024-07-30 15:36:59 +01:00
Owen Mansel-Chan	19ac9e089a	Add test	2024-03-03 21:03:41 +00:00
Tony Torralba	5db8306fef	Stop considering usernames sensitive info ... Require variables to be static to be considered constants	2022-05-12 11:46:52 +02:00
Joe Farebrother	06f2c03828	Add tests	2022-03-11 17:44:52 +00:00