Jami Cogswell
5dbb698481
Java: update open/jdbc-url sink kinds to request-forgery
2023-05-31 15:50:31 -04:00
Jami Cogswell
cb10f4976b
Java: update create/read-file sink kinds to path-injection
2023-05-31 15:49:07 -04:00
Jami Cogswell
eb1a8e2189
Java: update write-file sink kind to file-system-store
2023-05-31 15:49:07 -04:00
Jami Cogswell
ac8d985a63
Java: update xss sink kind to html-injection and js-injection
2023-05-31 15:49:07 -04:00
Jami Cogswell
041caa7405
Java: update header-splitting sink kind to response-splitting
2023-05-31 15:49:07 -04:00
Jami Cogswell
51df84ed1c
Java: update set-hostname-verifier sink kind to hostname-verification
2023-05-31 15:49:07 -04:00
Jami Cogswell
b23f384a50
Java: update intent-start sink kind to intent-redirection
2023-05-31 15:49:07 -04:00
Jami Cogswell
5aa3e57ff3
Java: update pending-intent-sent sink kind to pending-intents
2023-05-31 15:49:07 -04:00
Jami Cogswell
3ff4c7de8f
Java: update ldap sink kind to ldap-injection
2023-05-31 15:49:07 -04:00
Jami Cogswell
6d2d25406c
Java: update xslt sink kind to xslt-injection
2023-05-31 15:49:07 -04:00
Jami Cogswell
cea97b3f2a
Java: update mvel sink kind to mvel-injection
2023-05-31 15:49:06 -04:00
Jami Cogswell
6cee0c4c75
Java: update jexl sink kind to jexl-injection
2023-05-31 15:49:06 -04:00
Jami Cogswell
6431d370c1
Java: update groovy sink kind to groovy-injection
2023-05-31 15:49:06 -04:00
Jami Cogswell
430010daa3
Java: update logging sink kind to log-injection
2023-05-31 15:49:06 -04:00
Jami Cogswell
8c4b394e1a
Java: update ssti sink kind to template-injection
2023-05-31 15:49:06 -04:00
Jami Cogswell
fc58d10a4e
Java: update xpath sink kind to xpath-injection
2023-05-31 15:49:06 -04:00
Jami Cogswell
55be2e5b67
Java: update url-redirect sink kind to url-redirection
2023-05-31 15:49:06 -04:00
Jami Cogswell
d24d8b1626
Java: update sql sink kind to sql-injection
2023-05-31 15:49:06 -04:00
Taus
b39a5a64af
Merge pull request #13317 from github/java/update-mad-decls-after-triage-2023-05-30T14-11-29
...
Java: Update MaD Declarations after Triage
2023-05-31 11:40:49 +02:00
Tony Torralba
482bb94ad9
Merge pull request #13179 from pwntester/java_gson
...
[Java] Add basic support for Google's Gson library
2023-05-31 11:16:19 +02:00
Tony Torralba
6f302a43ea
Merge pull request #13297 from atorralba/atorralba/java/playmvc-models
...
Java: Add models for the Play Framework
2023-05-31 09:02:17 +02:00
Tony Torralba
977263a126
Use container flow for more precision
2023-05-30 17:51:41 +02:00
Taus
00e4c455b5
Update MaD Declarations after Triage
2023-05-30 16:11:30 +02:00
Andrew Eisenberg
2d81e30d81
Fix addsTo.pack references
...
This change is a prerequisite for a CLI change where there will be
strict testing of the `addsTo.pack` values. It must resolve to a pack
reference that is a transitive dependency of the current query's pack.
2023-05-29 13:45:41 -07:00
Jami Cogswell
f255b6acb8
Java: fix typos
2023-05-26 18:55:13 -04:00
Jami Cogswell
7e6913af62
Java: update provenance to 'hq-manual'
2023-05-26 18:55:13 -04:00
Jami Cogswell
60b07083c3
Java: add 'sink' kind
2023-05-26 18:55:13 -04:00
Jami Cogswell
65dd7eb8e7
Java: add neutral models discovered with path-inj and ssrf heuristics
2023-05-26 18:55:13 -04:00
Tony Torralba
903fdb0cb8
Java: Add models for the Play Framework
2023-05-26 10:23:43 +02:00
Tony Torralba
a276cc3094
Convert all command injection sinks to MaD format
2023-05-25 11:41:32 +02:00
Tony Torralba
654bb00946
Java: Tweak java.nio.files.Files.copy models
2023-05-23 10:27:19 +02:00
Tony Torralba
b58eb3a92c
Java: Add TemplateEngine.createTemplate as a groovy injection sink
2023-05-19 17:45:47 +02:00
Tony Torralba
2c54996499
Apply @jcogs33's suggestions from code review
2023-05-18 08:51:19 +02:00
Alvaro Muñoz
b235b1cbb9
improve yaml models
2023-05-17 16:40:28 +02:00
Alvaro Muñoz
d17199a9e1
add gson models
2023-05-16 15:00:26 +02:00
Tony Torralba
a48fa652ce
Java: Add SQLi sinks for Spring JDBC
2023-05-12 10:57:49 +02:00
Stephan Brandauer
61b0514b53
Merge pull request #13122 from github/java/update-mad-decls-after-triage-2023-05-11T08-52-07
...
Java: Update MaD Declarations after Triage
2023-05-11 16:04:36 +02:00
Tony Torralba
ca6ae26aad
Change provenance to ai-manual
2023-05-11 14:56:16 +02:00
Stephan Brandauer
9b35a9f74a
Update java/ql/lib/ext/org.apache.hadoop.fs.model.yml
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-05-11 14:01:25 +02:00
Stephan Brandauer
b0ec089a3a
Update MaD Declarations after Triage
2023-05-11 10:52:09 +02:00
Tony Torralba
e1f868b976
Merge pull request #12965 from atorralba/atorralba/java/apache-commons-net-models
...
Java: Add manual models for `org.apache.commons.net`
2023-05-10 16:28:19 +02:00
Tony Torralba
3f8a56722f
Remove auto-generated models
2023-05-10 10:35:34 +02:00
Michael Nebel
f2f9944a1c
Merge pull request #12931 from michaelnebel/neutralkinds
...
Java/C#: Introduce kind for neutrals.
2023-05-09 08:42:38 +02:00
Michael Nebel
bd23814e7c
Java: Update existing neutrals to include kind information.
2023-05-08 16:18:59 +02:00
Ed Minnix
0c604b1c34
Remove generated model
2023-05-04 16:56:14 -04:00
Ed Minnix
7a295b554b
Remove Map rows
2023-05-04 16:52:40 -04:00
Edward Minnix III
a34a51737f
Add SyntheticFields for JwsHeader
...
Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com >
2023-05-04 16:52:40 -04:00
Ed Minnix
a4f4ff15ce
Change method resolveSigningKey from class to interface
...
The resolveSigningKey method of SigningKeyResolverAdapter is an
implementation of that defined in SigningKeyResolver. So this changes
the type from the class to the interface it implements
2023-05-04 16:52:40 -04:00
Ed Minnix
a38466b0f3
Erase generics in generated model
2023-05-04 16:52:40 -04:00
Ed Minnix
26cdf24bf0
Added MaD models for io.jsonwebtoken
2023-05-04 16:52:39 -04:00
