44 Commits

Author	SHA1	Message	Date
Anders Schack-Mulligen	e9e445b2ba	Java: Add empty provenance column to expected files.	2024-02-09 11:32:00 +01:00
Tony Torralba	2a146405ac	Adjust tests	2024-01-26 12:38:32 +01:00
Tony Torralba	19cb7adb6d	Migrate path injection sinks to MaD ... Deprecate and stop using PathCreation Path creation sinks are now summaries	2024-01-26 12:19:54 +01:00
Tony Torralba	282632c33b	Add new snippets as tests	2024-01-25 15:11:11 +01:00
Max Schaefer	a5e7ef424e	Revert "Add additional example." ... This reverts commit 947b094387.	2023-11-16 11:54:16 +00:00
Max Schaefer	947b094387	Add additional example.	2023-11-16 10:06:19 +00:00
Max Schaefer	009d58034f	Address suggestions from review.	2023-11-16 10:05:54 +00:00
Max Schaefer	a46a7fadb2	Java: Improve QHelp for java/path-injection to mention less disruptive fixes.	2023-11-15 11:25:13 +00:00
Tony Torralba	2448bc8ce2	Java: Add new Apache CXF models	2023-08-25 11:17:51 +02:00
Tony Torralba	fb0102b763	Java: New models for JAX-RS	2023-08-07 11:52:23 +02:00
Anders Schack-Mulligen	ae24d68b5d	C/C++/C#/Java/Python/Ruby/Swift: Adjust expected output.	2023-07-19 11:41:15 +02:00
Tony Torralba	654bb00946	Java: Tweak java.nio.files.Files.copy models	2023-05-23 10:27:19 +02:00
Tony Torralba	e3d93c3581	Fix FileCopyUtils models	2023-04-24 15:07:19 +02:00
Tony Torralba	5bc606753e	org.openjdk.jmh.runner.options tests	2023-03-15 14:47:27 +01:00
Tony Torralba	341590f9ad	org.kohsuke.stapler.framework.io tests	2023-03-15 11:43:52 +01:00
Tony Torralba	7455c27086	org.apache.tools.ant.taskdefs tests	2023-03-14 17:28:35 +01:00
Tony Torralba	6aa9726223	org.apache.tools.ant tests	2023-03-14 17:20:31 +01:00
Tony Torralba	31667b4478	org.apache.commons.io tests	2023-03-14 12:50:09 +01:00
Tony Torralba	3db95f3ac9	javax.xml.transform.stream tests	2023-03-14 12:28:04 +01:00
Tony Torralba	d54abddab1	java.nio.file tests	2023-03-14 12:22:56 +01:00
Tony Torralba	cad5cd4037	java.io tests	2023-03-14 11:21:33 +01:00
Tony Torralba	f07f0888aa	Fix tests	2023-03-10 12:35:13 +01:00
Tony Torralba	8065714ebe	Add tests	2023-03-10 12:35:13 +01:00
Tony Torralba	0439eb640d	Add tests	2023-03-01 09:49:28 +01:00
Tony Torralba	f19eb783be	Generalize file/path taint steps ... This is needed by PathSanitizer but also helps simplify ZipSlip.ql	2022-10-04 12:27:01 +02:00
erik-krogh	46b5bf32f9	update alert-messsages of java queries	2022-09-26 12:15:25 +02:00
Tony Torralba	fdc8453a59	Introduce TaintedPathAdditionalTaintStep ... Use separate configurations for tainted path and tainted path local again.	2022-09-16 10:42:15 +02:00
Sebastian Bauersfeld	20d78972f5	Address review comments.	2022-09-15 16:44:36 +07:00
Sebastian Bauersfeld	0468b3a361	Java: Track taint through constructor arguments of java.net.URI.	2022-09-13 11:35:04 +07:00
Chris Smowton	84a4b6a866	Make reporting locations consistent with PathCreation; add test	2022-08-03 10:42:09 +01:00
Anders Schack-Mulligen	f30dad7705	Dataflow: Update test expected outputs.	2021-09-07 13:02:20 +02:00
Anders Schack-Mulligen	175c71221a	Java: Adjust some test output with more edges/nodes.	2021-04-19 14:06:27 +02:00
Anders Schack-Mulligen	29aec0d770	Java: Adjust expected output.	2021-04-19 13:16:46 +02:00
Anders Schack-Mulligen	c5193cf03f	Apply suggestions from code review	2021-04-19 13:14:56 +02:00
Anders Schack-Mulligen	daad62c4e0	Java: Add TaintedPath test.	2021-04-19 10:07:03 +02:00
yo-h	e194411cfa	Java: fix javac errors in test code	2021-02-09 09:16:57 -05:00
Tom Hvitved	7f6e253425	Java: Update expected test output	2019-10-04 11:09:44 +02:00
Anders Schack-Mulligen	2d620698d8	Java: Adjust qltest expected output.	2019-09-12 11:00:49 +02:00
Robin Neatherway	409733838b	Java: Add a flow step for Path::toFile in ZipSlip	2019-02-11 10:33:44 +00:00
Anders Schack-Mulligen	deb61d6f29	Java: Update test output.	2018-11-16 13:48:50 +01:00
Anders Schack-Mulligen	c3f71c2d42	Java: Change main ZipSlip location to the source.	2018-10-31 11:38:28 +01:00
Anders Schack-Mulligen	4953e4923a	Java: Add test for sanitization using toAbsolutePath().	2018-10-31 11:38:27 +01:00
Anders Schack-Mulligen	bf6b7c4734	Java: Add ZipSlip query.	2018-10-31 11:38:27 +01:00
Pavel Avgustinov	846c9d5860	Migrate Java code to separate QL repo.	2018-08-30 10:48:05 +01:00