7 Commits

Author	SHA1	Message	Date
Tony Torralba	527fe523a8	Add PathCreation.qll sinks to models-as-data ... The old PathCreation sinks can't be removed because doing so would cause alert wobble in the path injection queries. See their getReportingNode predicates.	2023-06-02 09:14:35 +02:00
luchua-bc	35a924292b	Model value passing between a setter and a getter call as a value step	2022-02-14 14:08:55 +00:00
luchua-bc	78630f25dd	Match attribute name to reduce FP	2022-02-11 23:53:31 +00:00
luchua-bc	ce03aeb4d9	Fixed an issue related to normalized path	2022-02-09 23:19:40 +00:00
luchua-bc	4609227e76	Use data model for request/session attribute operations	2022-02-09 03:24:46 +00:00
luchua-bc	ff4826d203	Correct the data model and update qldoc	2022-02-08 04:02:27 +00:00
luchua-bc	27043a09b3	File path injection with the JFinal framework	2022-01-23 18:07:48 +00:00