2192 Commits

Author	SHA1	Message	Date
Timo Mueller	c22eeacbfc	Fixed accidential double init of variable	2021-04-30 16:28:56 +02:00
Timo Mueller	61d053f6b3	Fixed missing metadata description	2021-04-30 16:28:17 +02:00
Timo Mueller	15a3068f8a	Added query for insecure environment configuration RMI JMX (CVE-2016-8735)	2021-04-30 16:23:17 +02:00
intrigus	08731fc6cf	Fix typo.	2021-04-29 20:26:34 +02:00
Chris Smowton	ad9ea40954	Merge pull request #5597 from intrigus-lgtm/java/jwt-insecure-parse ... [Java] JWT without signature check.	2021-04-29 14:41:11 +01:00
Anders Schack-Mulligen	404a6c1506	Merge pull request #5805 from smowton/smowton/admin/spring-setter-method-docs ... Document `SpringProperty::getSetterMethod`.	2021-04-29 15:10:58 +02:00
Anders Schack-Mulligen	c78285e557	Merge pull request #5784 from Marcono1234/marcono1234/switch-expr-stmt-parent ... Java: Add StmtParent as superclass of SwitchExpr	2021-04-29 15:02:05 +02:00
Chris Smowton	2787c2f874	Document SpringProperty::getSetterMethod.	2021-04-29 12:28:26 +01:00
intrigus	a8865e2fa2	Java: Cleanup jwt stubs.	2021-04-28 20:46:09 +02:00
Tom Hvitved	37377644c9	Merge pull request #5781 from hvitved/java/predictable-seed-df6 ... Java: Use separate data-flow copy for `PredictableSeedFlowConfiguration`	2021-04-27 19:01:55 +02:00
Tamás Vajk	4cc88662e2	Merge pull request #5557 from tamasvajk/feature/java-sinks-csv ... Java: convert sinks to CSV	2021-04-27 15:58:09 +02:00
Marcono1234	05ce49adaf	Java: Add StmtParent as superclass of SwitchExpr ... Database type `@stmtparent` already includes `@switchexpr`, this commit merely changes the class SwitchExpr to also accordingly extend StmtParent.	2021-04-27 15:17:55 +02:00
Tamas Vajk	5b79094f34	Fix naming in HTTPS URL check	2021-04-27 14:59:52 +02:00
Tamas Vajk	e08b629cb5	Add documentation for URL opening sinks	2021-04-27 10:32:41 +02:00
Tom Hvitved	017beb6786	Java: Use separate data-flow copy for PredictableSeedFlowConfiguration	2021-04-27 10:07:33 +02:00
intrigus	b1a3633495	Java: Remove redundant condition + docs.	2021-04-23 22:06:04 +02:00
Chris Smowton	455b840712	Fix all dead qhelp links ... For those documents with no obvious new home I've pointed the links to the Internet Archive.	2021-04-23 15:20:21 +01:00
Anders Schack-Mulligen	bc8c55836a	Merge pull request #5743 from aschackmull/java/flow-summary-tweaks ... Java/C#: Move a couple of flow summary tweaks to the shared implementation.	2021-04-23 13:46:04 +02:00
Tamás Vajk	43dc9bbc94	Merge pull request #5744 from tamasvajk/feature/java-loc ... Java: Introduce LoC summary metric query	2021-04-23 11:39:42 +02:00
intrigus	98dcd4e52b	Java: Tighten definition of sink.	2021-04-23 00:14:48 +02:00
intrigus	a385b30c29	Java: Factor common expr into class.	2021-04-22 23:51:27 +02:00
intrigus-lgtm	958e2fab05	Apply suggestions from code review ... Co-authored-by: Chris Smowton <smowton@github.com>	2021-04-22 23:36:17 +02:00
Tamás Vajk	cb28bc80b7	Merge branch 'main' into feature/java-sinks-csv	2021-04-22 11:41:18 +02:00
Tamas Vajk	7134eb9079	Improve documentation of csv sink models	2021-04-22 11:37:41 +02:00
Tamas Vajk	1caa5c4780	Adjust hostname verifier sink identifier name	2021-04-22 11:22:18 +02:00
Tamas Vajk	6c78a247f2	Revert erroneous refactoring in header splitting sink base class	2021-04-22 11:20:39 +02:00
Tamas Vajk	9b1c54e81b	Add argument indices to HTTP header splitting sinks	2021-04-22 11:17:25 +02:00
Tamas Vajk	180904e9f6	Revert "Java: Convert Google HTTP client API parseAs sink to CSV format" ... This reverts commit 3e53484bb3.	2021-04-22 11:14:51 +02:00
Owen Mansel-Chan	fea9f5f431	Merge pull request #5746 from owen-mc/java/refactor-exec-tainted ... Make ExecTainted easier to extend	2021-04-22 10:14:28 +01:00
Owen Mansel-Chan	8a01799fb8	Make imports private ... Co-authored-by: Anders Schack-Mulligen <aschackmull@users.noreply.github.com>	2021-04-22 09:46:49 +01:00
Owen Mansel-Chan	4b8d4f5bbd	Update docs	2021-04-22 09:30:50 +01:00
Owen Mansel-Chan	e448dcb725	Avoid bad join order ... We want to avoid joining on `i` first.	2021-04-22 09:30:49 +01:00
Owen Mansel-Chan	9f1704560b	Include constructors in abstract class	2021-04-22 09:30:48 +01:00
Tamás Vajk	9c936867fa	Exclude code from XML files ... Co-authored-by: yo-h <55373593+yo-h@users.noreply.github.com>	2021-04-22 09:00:31 +02:00
Chris Smowton	94f0a1532d	Merge pull request #5682 from smowton/smowton/docs/fix-has-modifier-comment ... Fix documentation of Modifier.qll	2021-04-21 15:41:29 +01:00
Owen Mansel-Chan	9c72e73a82	Make ExecTainted easier to extend ... To add a method that executes a command, you can now define a class extending ExecMethod.	2021-04-21 14:55:37 +01:00
Tamas Vajk	e25305e3cc	Java: Introduce LoC summary metric query	2021-04-21 14:27:00 +02:00
Anders Schack-Mulligen	f9599da32d	Java/C#: Move a couple of flow summary tweaks to the shared implementation.	2021-04-21 14:24:15 +02:00
Anders Schack-Mulligen	9362ae0687	Merge pull request #5422 from tamasvajk/feature/sink-migration-ldap ... Java: Migrate LDAP injection sinks to CSV format	2021-04-21 10:05:28 +02:00
intrigus	231b07795c	Java: Ignore results in test directories.	2021-04-20 23:25:13 +02:00
intrigus	fcaf5e7657	Java: Plural type name -> singular type name.	2021-04-20 23:09:44 +02:00
intrigus	3acec94773	Java: Fix typos.	2021-04-20 23:04:06 +02:00
intrigus	149c4491ce	Java: Simplify qldoc.	2021-04-20 23:03:10 +02:00
intrigus	9e4fa90f6e	Java: Refer to Java types in qldoc instead of ql types.	2021-04-20 23:02:18 +02:00
intrigus	26502881d7	Java: Consistently use this in charpred.	2021-04-20 22:56:58 +02:00
yo-h	00137f2905	Merge pull request #5721 from github/yo-h/java-diagnostic-queries ... Java: add extractor `diagnostic` queries	2021-04-20 13:36:49 -04:00
Tamas Vajk	583513bafd	Fix review findings	2021-04-20 16:28:47 +02:00
Chris Smowton	9bfb0d93ca	Autoformat QL	2021-04-20 13:59:09 +01:00
Chris Smowton	0ec3ee29e4	Style last use of SecureASTCustomizer	2021-04-20 12:44:49 +01:00
Hayk Andriasyan	bb58a50503	Update GroovyInjection.qhelp	2021-04-20 15:41:58 +04:00