Chris Smowton
dcebcc35b6
Rename getPatternAtIndex
2024-03-25 16:36:38 +00:00
Chris Smowton
17193ac11b
Distinguish record patterns that do or don't declare identifiers
2024-03-25 16:31:40 +00:00
Chris Smowton
a4401963f5
Use getAPattern
2024-03-25 16:31:39 +00:00
Chris Smowton
5cb5ee026c
Fix pretty-printing of anonymous vars and multiple patterns; add test
2024-03-25 16:31:38 +00:00
Chris Smowton
ee36e3b72b
autoformat
2024-03-25 16:31:38 +00:00
Chris Smowton
403e86878c
Don't mistake a rule case for a fall-through edge
2024-03-25 16:31:37 +00:00
Chris Smowton
c0874ab04b
Fix pattern-case variable pretty-printer
2024-03-25 16:31:37 +00:00
Chris Smowton
f66811048d
Fix next-normal-statement predicate
2024-03-25 16:31:37 +00:00
Chris Smowton
d5443b3f10
Remove dead code
2024-03-25 16:31:37 +00:00
Chris Smowton
29e93edf90
Dataflow: restrict pattern-case flow to unique patterns.
2024-03-25 16:31:37 +00:00
Chris Smowton
00c7dd5f92
Fix a stray use of getPattern
2024-03-25 16:31:36 +00:00
Chris Smowton
e59487a324
Don't regard cases with multiple patterns as conducting a type test
2024-03-25 16:31:36 +00:00
Chris Smowton
c7cb885e71
Add missing javadoc and getUniquePattern predicate
2024-03-25 16:31:36 +00:00
Chris Smowton
f44becea7f
Implement multiple pattern case and fall-through pattern case support
2024-03-25 16:31:36 +00:00
Chris Smowton
c283894b4b
Fix typo
2024-03-25 16:31:36 +00:00
Chris Smowton
33b807f3bb
Parameters and local variables: add isAnonymous predicate
2024-03-25 16:31:36 +00:00
Owen Mansel-Chan
f2db9ce312
Merge pull request #16028 from owen-mc/java/sensitive-log-whitelist-tokenimage
...
Java: whitelist variable name `tokenImage` for `java/sensitive-log` as it's used in code generated by JavaCC
2024-03-25 10:02:19 +00:00
Owen Mansel-Chan
ac6c4add14
Apply suggestions from code review
...
Co-authored-by: Chris Smowton <smowton@github.com >
2024-03-24 20:20:37 +00:00
Owen Mansel-Chan
4832dc51ed
Whitelist variable name tokenImage
2024-03-23 21:33:02 +00:00
Michael Nebel
6619be3137
Merge pull request #15940 from michaelnebel/csharp/sourcesinktests
...
C#: Source- and sink tests.
2024-03-21 08:12:16 +01:00
Michael Nebel
70c6744944
Java/Go/Swift: Sync changes.
2024-03-19 14:20:43 +01:00
Tom Hvitved
fc55567d90
Merge pull request #15853 from hvitved/dataflow/get-location
...
Data flow: Replace `hasLocationInfo` with `getLocation`
2024-03-18 20:21:46 +01:00
Tom Hvitved
02ae2d1520
Java: Implement new data flow interface
2024-03-13 14:41:57 +01:00
Erik Krogh Kristensen
863e3f79e5
Merge pull request #15731 from erik-krogh/java-url
...
Java: More sanitizers for request-forgery
2024-03-12 19:31:52 +01:00
erik-krogh
f613823047
add explicit QLDoc that any method named "contains" is matched
2024-03-12 15:25:27 +01:00
erik-krogh
52f71e4553
small fixes based on review
2024-03-12 15:07:29 +01:00
Tom Hvitved
da66281fef
Sync files
2024-03-11 13:02:04 +01:00
Owen Mansel-Chan
279605b486
Merge pull request #15786 from owen-mc/java/sensitive-logging-query-exclude-null-in-variable-name
...
Java: sensitive logging query exclude null in variable name
2024-03-04 12:14:42 +00:00
Owen Mansel-Chan
c7efde3b7a
Remove variables with "null" in their name as sources
2024-03-03 20:55:04 +00:00
Owen Mansel-Chan
114c17ad57
Add more methods of java.util.Comparator
2024-03-02 20:55:30 +00:00
Owen Mansel-Chan
bb97df1d71
do not generate models for lambda flow methods
2024-03-01 12:11:40 +00:00
Owen Mansel-Chan
bbf3fa7506
do not generate models for toString
2024-03-01 09:59:27 +00:00
Chris Smowton
051d63a5a9
Merge pull request #15740 from smowton/smowton/feature/call-and-type-telemetry
...
Java: add extraction quality telemetry; improve stringification of some erroneous expressions
2024-02-29 16:51:51 +00:00
Tony Torralba
47bf556223
Merge pull request #15709 from atorralba/atorralba/java/enable-widget-taint-steps
...
Java: Re-enable Widget.qll flow steps
2024-02-29 17:33:05 +01:00
Chris Smowton
551006c15e
Make predicate private
2024-02-29 14:59:46 +00:00
Chris Smowton
1fd459e8fc
Improve stringification of some erroneous expressions
2024-02-29 14:59:45 +00:00
Anders Schack-Mulligen
df5e753ee0
Merge pull request #15570 from aschackmull/java/cache-interpretelement
...
Java: Cache interpretElement.
2024-02-27 13:39:56 +01:00
erik-krogh
b4b5ae2a2c
add some request-forgery sanitizers, inspired from C#
2024-02-27 10:05:26 +01:00
Tony Torralba
759b74791c
Java: Re-enable Widget.qll flow steps
...
The library Widget.qll was accidentally removed from the global context when its sources were migrated to models-as-data in #13136 . This re-adds it so that its flow steps are enabled again.
2024-02-23 13:07:35 +01:00
Joe Farebrother
2ebb80b632
Merge pull request #15548 from joefarebrother/android-local-auth-keys
...
Java: Add query for insecurely generated keys for local authentication.
2024-02-22 14:04:17 +00:00
Anders Schack-Mulligen
71f8ccf45f
Merge pull request #15654 from aschackmull/java/static-init-vec-query-perf
...
Java: Switch helper flow from Global to SimpleGlobal in StaticInitializationVectorQuery.
2024-02-21 10:51:16 +01:00
Anders Schack-Mulligen
66010b5c96
Java: Switch helper flow from Global to SimpleGlobal in StaticInitializationVectorQuery.
2024-02-19 14:04:43 +01:00
Owen Mansel-Chan
22692b9d55
Simplify definition of source and improve QLDoc
...
This is also slightly faster to evaluate (217s instead of 228s on apache/geode on my machine).
2024-02-16 16:47:41 +00:00
Tony Torralba
90a9d82b9d
Java: Expand ExactPathSanitizer to work on the argument of 'equals' too
2024-02-15 10:00:24 +01:00
Anders Schack-Mulligen
fb2d36ddac
Merge pull request #15451 from Marcono1234/marcono1234/java-assignment-doc
...
Java: Document which assignment type is covered by which class
2024-02-14 08:59:50 +01:00
Joe Farebrother
2eb93b7a3b
Add unit tests
2024-02-12 13:49:45 +00:00
Joe Farebrother
d8985f9f5b
Move tests for local auth to a folder
2024-02-12 13:49:45 +00:00
Joe Farebrother
c79a3eb6ae
Add query for insecure key generation
2024-02-12 13:49:44 +00:00
Joe Farebrother
75a2b9415c
Merge pull request #15481 from joefarebrother/android-local-auth
...
Java: Add query for insecure local authentication
2024-02-12 13:48:53 +00:00
Tony Torralba
cf7091ae5f
Merge branch 'main' into atorralba/java/open-redirect-sanitizer
2024-02-12 10:31:52 +01:00
