Tony Torralba
|
f2888dcb1e
|
Add sinks and tests for the AEXML library.
|
2022-11-14 15:46:44 +01:00 |
|
Tony Torralba
|
52bd140213
|
Fix test expectations
|
2022-11-14 12:41:13 +01:00 |
|
Tony Torralba
|
c03eab2410
|
Add XMLDocument sinks
|
2022-11-14 12:41:13 +01:00 |
|
Tony Torralba
|
a21db3b3c2
|
Merge pull request #11086 from atorralba/atorralba/swift/xxe-query
Swift: Add new query for XML External Entities (XML) vulnerabilities
|
2022-11-14 12:34:30 +01:00 |
|
Karim Ali
|
b209cac2e2
|
Merge pull request #11063 from karimhamdanali/swift-pbe-constant-password
Swift: detect the use of constant passwords for password-based encryption
|
2022-11-10 16:36:27 +02:00 |
|
Karim Ali
|
e18b2cfa39
|
Merge pull request #11084 from karimhamdanali/swift-static-iv
Swift: detect the use of static initialization vectors
|
2022-11-10 16:35:21 +02:00 |
|
Karim Ali
|
5766ff21d0
|
Merge pull request #10993 from karimhamdanali/swift-pbe-constant-salts
Swift: detect the use of constant salts
|
2022-11-07 16:22:41 +02:00 |
|
Karim Ali
|
2a22c69a64
|
remove unused variable from test + updated expected output
|
2022-11-07 13:31:55 +02:00 |
|
Geoffrey White
|
7b62bed9db
|
Merge pull request #10947 from karimhamdanali/swift-pbe-iterations
Swift: detect hash functions with low # of iterations
|
2022-11-07 10:38:29 +00:00 |
|
Tony Torralba
|
3e1819f25d
|
Model XMLParser constructor init(contentsOf:)
|
2022-11-03 12:01:42 +01:00 |
|
Tony Torralba
|
fe138dc0a1
|
Add explicitly safe test cases
|
2022-11-03 12:01:42 +01:00 |
|
Tony Torralba
|
0c6957ea78
|
Adjust test expectations of a query affected by new summaries
|
2022-11-03 12:01:42 +01:00 |
|
Tony Torralba
|
dc6f60a501
|
Add new XXE query
Only XMLParser sinks for the time being
|
2022-11-03 12:01:42 +01:00 |
|
Karim Ali
|
27d2dc6d9e
|
update expected results
|
2022-11-02 16:13:50 +02:00 |
|
Karim Ali
|
eefda61445
|
add a query that checks for the use of static IVs
|
2022-11-02 16:09:00 +02:00 |
|
Karim Ali
|
fe408cfb41
|
add a query that detects the use of constant passwords
|
2022-11-01 14:03:27 +02:00 |
|
Geoffrey White
|
c3577b2256
|
Swift: Rename test directory.
|
2022-11-01 09:21:50 +00:00 |
|
Geoffrey White
|
7d80c5c7f7
|
Swift: Rename query directory.
|
2022-11-01 09:21:10 +00:00 |
|
Mathias Vorreiter Pedersen
|
062a0abceb
|
Swift: Fix flow out of summarized callables.
|
2022-10-28 12:09:05 +02:00 |
|
Karim Ali
|
420c35d4a2
|
add a query that detects the use of constant salts
|
2022-10-26 15:32:59 +02:00 |
|
Karim Ali
|
18dd0f650c
|
update iterations threshold to most recent OWASP recommendation
which is at least 120,000 iterations for secure password hashing
|
2022-10-25 14:01:40 +02:00 |
|
Karim Ali
|
408c7bebe5
|
fix .expected file
|
2022-10-25 13:24:37 +02:00 |
|
Karim Ali
|
0d2e7d43b9
|
add expected output
|
2022-10-25 13:24:37 +02:00 |
|
Karim Ali
|
5179a99abb
|
fix test cases to use the correct class name
|
2022-10-25 13:24:37 +02:00 |
|
Karim Ali
|
c4b2519e6c
|
initial draft of the Swift query for CWE-916
|
2022-10-25 13:24:37 +02:00 |
|
Paolo Tranquilli
|
408968a417
|
Swift: fix swift compilation in QL tests
|
2022-10-21 15:20:38 +02:00 |
|
Geoffrey White
|
138643519c
|
Merge pull request #10757 from geoffw0/sqlinject
Swift: Query for SQL injection
|
2022-10-20 18:55:38 +01:00 |
|
Geoffrey White
|
027b71381a
|
Swift: annotate all cases.
|
2022-10-18 16:38:02 +01:00 |
|
Geoffrey White
|
0281bfedda
|
Merge pull request #10689 from d10c/swift/cleartext-storage-nsuserdefaults
Swift: Query for CWE-312: Exposure of sensitive information using NSUserDefaults
|
2022-10-17 14:05:17 +01:00 |
|
Geoffrey White
|
9767064310
|
Swift: Fix bug for sqlite3_prepare_v3.
|
2022-10-17 13:40:35 +01:00 |
|
Geoffrey White
|
1221cbaee7
|
Swift: Updated results after merge with main.
|
2022-10-17 13:35:46 +01:00 |
|
Geoffrey White
|
13018150ed
|
Merge branch 'main' into sqlinject
|
2022-10-17 13:30:14 +01:00 |
|
Karim Ali
|
bbc03a1578
|
add false negatives to the test case
|
2022-10-17 12:54:34 +02:00 |
|
Karim Ali
|
d56c82ff75
|
add a query that detects hardcoded keys
|
2022-10-17 12:54:34 +02:00 |
|
Geoffrey White
|
f96e4eb87e
|
Swift: One more go at getting the query message how ql-for-ql wants it.
|
2022-10-14 15:28:14 +01:00 |
|
Geoffrey White
|
24c6bb4c52
|
Swift: More modern (?) phrasing.
|
2022-10-14 14:41:02 +01:00 |
|
Geoffrey White
|
3da3a278ab
|
Swift: Query metadata.
|
2022-10-14 14:31:38 +01:00 |
|
Geoffrey White
|
76ff593cc5
|
Swift: Bring it all together into a query.
|
2022-10-13 16:06:44 +01:00 |
|
Geoffrey White
|
7d78df25bf
|
Swift: Define SQL sinks.
|
2022-10-13 15:50:57 +01:00 |
|
Geoffrey White
|
ce5631e7cb
|
Swift: Complete the rename.
|
2022-10-13 15:22:36 +01:00 |
|
Geoffrey White
|
12cb099376
|
Swift: Rename to match other languages (except Java).
|
2022-10-13 15:21:39 +01:00 |
|
Geoffrey White
|
398b2a392f
|
Swift: Add more test variants.
|
2022-10-13 15:13:29 +01:00 |
|
Geoffrey White
|
5496b11153
|
Swift: Update tests based on feedback.
|
2022-10-12 14:52:14 +01:00 |
|
Nora Dimitrijević
|
b7ad287cb1
|
Swift: rename stub parameters to match docs.
|
2022-10-10 18:46:39 +02:00 |
|
Geoffrey White
|
4258147edf
|
Swift: Test SQL injection via the SQLite.swift library.
|
2022-10-10 17:40:22 +01:00 |
|
Geoffrey White
|
964c92418c
|
Swift: Test SQL injection via the C API.
|
2022-10-10 17:40:22 +01:00 |
|
Geoffrey White
|
bcab9d8e7c
|
Swift: Add framework for SQL Injection query.
|
2022-10-10 17:25:08 +01:00 |
|
Nora Dimitrijević
|
8664017fe4
|
Swift: Working tests
|
2022-10-10 14:08:04 +02:00 |
|
Mathias Vorreiter Pedersen
|
10eb548156
|
Merge pull request #10699 from MathiasVP/swift-mad-summaries
|
2022-10-06 17:44:35 +01:00 |
|
Mathias Vorreiter Pedersen
|
0065a5af96
|
Swift: Accept path-explanation test changes.
|
2022-10-06 10:30:18 +01:00 |
|