452 Commits

Author	SHA1	Message	Date
Stephan Brandauer	8802fbdfe7	Update java/ql/lib/ext/java.nio.file.model.yml ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-03-20 17:09:48 +01:00
Stephan Brandauer	bc227179c7	Update java/ql/lib/ext/org.geogebra.web.full.main.model.yml ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-03-20 17:09:48 +01:00
Tony Torralba	bc99a44f3a	Apply suggestions from code review	2023-03-20 17:09:48 +01:00
Stephan Brandauer	12bb0d98c0	move toFile back to its original location	2023-03-20 17:09:48 +01:00
Stephan Brandauer	4761c3a328	remove duplicates	2023-03-20 17:09:48 +01:00
Stephan Brandauer	bd21dc9460	remove nonexploitable sinks	2023-03-20 17:09:48 +01:00
Stephan Brandauer	b7ce0c2d96	fix: taint flow of ctor goes to Argument[-1], instead of ReturnValue	2023-03-20 17:09:48 +01:00
Stephan Brandauer	2236db43ec	sort the changed MaD declarations	2023-03-20 17:09:46 +01:00
Stephan Brandauer	74e261738f	remove predicate	2023-03-20 17:06:40 +01:00
Stephan Brandauer	ec1762e015	Update MaD Declarations after Triage	2023-03-20 17:06:37 +01:00
Tony Torralba	fa60fa0ae2	Merge pull request #12572 from github/java/update-mad-decls-after-triage-2023-03-17T15-01-35 ... Java: Update MaD Declarations after Triage	2023-03-20 17:02:27 +01:00
Stephan Brandauer	39726a54ec	fix suggestion	2023-03-20 14:12:46 +01:00
Stephan Brandauer	116108851f	Update MaD Declarations after Triage	2023-03-20 13:45:39 +01:00
Tony Torralba	bff8bbfe33	Apply suggestions from code review	2023-03-20 10:43:46 +01:00
Michael Nebel	9039a468cb	Java: Update models that uses -1 in a range.	2023-03-20 10:14:20 +01:00
Michael Nebel	e86f1e4961	Java: Replace Argument[-1] with Argument[this].	2023-03-20 10:14:20 +01:00
Stephan Brandauer	8f565f5023	Update MaD Declarations after Triage	2023-03-17 16:01:36 +01:00
Tony Torralba	3b4980ba2f	org.kohsuke.stapler.model tests	2023-03-15 14:36:45 +01:00
Tony Torralba	44f239f4a4	Fix org.kohsuke.stapler.framework.adjunct models	2023-03-14 18:21:19 +01:00
Tony Torralba	db9e305a56	org.apache.commons.jelly tests	2023-03-14 17:04:14 +01:00
Tony Torralba	d54abddab1	java.nio.file tests	2023-03-14 12:22:56 +01:00
Tony Torralba	2e7ad99059	Fix java.nio.file models	2023-03-14 11:51:44 +01:00
Tony Torralba	db83fe6f42	Fix incorrect java.io models	2023-03-14 11:21:17 +01:00
Stephan Brandauer	ccf7d9beec	Update MaD Declarations after Triage	2023-03-14 10:32:19 +01:00
Stephan Brandauer	05b0cc2231	Update MaD Declarations after Triage	2023-03-13 14:21:29 +01:00
Tony Torralba	698dfa46fc	Minor fixes to the models	2023-03-10 12:35:13 +01:00
Stephan Brandauer	0c19da926c	Update MaD Declarations after Triage	2023-03-10 12:35:13 +01:00
Tony Torralba	59bd1e5ab1	Merge pull request #12228 from github/java/mad-decls-triage-request-2276 ... Java: Update MaD sink decls after triage	2023-03-01 17:08:38 +01:00
Tony Torralba	0439eb640d	Add tests	2023-03-01 09:49:28 +01:00
Tony Torralba	db6cb1ffe3	Remove dubious model after investigating it	2023-02-27 14:57:56 +01:00
Tony Torralba	4a9f63ea1a	Fix toASCIIString casing	2023-02-27 09:32:42 +01:00
Alvaro Muñoz	f393a3c549	Add toExternalForm	2023-02-24 18:50:31 +01:00
Alvaro Muñoz	f1d765aa27	Missing taintstep for java.net.URL.toURI()	2023-02-24 18:45:52 +01:00
Stephan Brandauer	7714acea82	delete a model that should pbly be a summary step	2023-02-20 15:44:58 +01:00
Stephan Brandauer	cf5a651b1f	use provenance ai-generated for triage data and use the read-file MaD label	2023-02-20 11:33:18 +01:00
Stephan Brandauer	8d7031c166	Update Java MaD sink decls after triage ... Triage request: 2276	2023-02-20 11:33:18 +01:00
Jami Cogswell	ad8849c6b8	Java: fix typo	2023-02-12 16:33:26 -05:00
Jami Cogswell	2d7e71dfce	Java: add read-file sink kind for first arg of copy	2023-02-03 17:28:46 -05:00
Jami Cogswell	30b1a2edbc	Java: add first argument to copy sink	2023-02-02 16:20:54 -05:00
Jami Cogswell	61a8f5e425	Java: add signature to createTempDirectory sink	2023-02-02 16:19:20 -05:00
Jami Cogswell	85c228a0cd	Java: remove old sinks	2023-01-27 10:40:17 -05:00
Jami Cogswell	9bf43483db	Java: update package for QueryProducer sinks	2023-01-27 10:16:42 -05:00
Jami	babdee36aa	Merge pull request #11779 from jcogs33/jcogs33/model-more-top-jdk-apis ... Java: model top JDK APIs	2023-01-17 10:20:32 -05:00
Jami Cogswell	10f0975812	Java: remove models for System.[get|set]Property	2023-01-17 08:51:48 -05:00
Jami Cogswell	fb6725ddaa	Java: add WithoutElement comment for clear methods	2023-01-13 13:20:45 -05:00
Jami Cogswell	a43f3cf95f	Java: remove Supplier.get model	2023-01-12 17:09:13 -05:00
Jami Cogswell	e0444449c8	Java: remove Function.apply model	2023-01-12 09:58:53 -05:00
Jami Cogswell	ce74c9d959	Java: Date models as neutral	2023-01-11 22:15:41 -05:00
Jami Cogswell	6bb865ad05	Java: make numeric flow models neutral	2023-01-11 18:04:43 -05:00
Jami Cogswell	0c7ffb0554	Java: update System.getProperty model	2023-01-11 12:04:22 -05:00