121 Commits

Author	SHA1	Message	Date
Jami Cogswell	b8ceb7112d	Java: update ordering of Path.getFileName model	2023-03-23 18:07:06 -04:00
Jami Cogswell	8046ec2f78	Java: update -1 to this	2023-03-23 18:01:28 -04:00
Jami Cogswell	0f3a0a1e81	Java: remove ArrayElement from listFiles	2023-03-23 18:00:21 -04:00
Jami Cogswell	29999d7bc8	Java: add WithoutElement comment	2023-03-23 18:00:21 -04:00
Jami Cogswell	62d64d5828	Java: add comments for reflection-related models	2023-03-23 18:00:21 -04:00
Jami Cogswell	e0c0c973a7	Java: remove Format and MessageFormat	2023-03-23 18:00:21 -04:00
Jami Cogswell	702ca19c3c	Java: added comment about second order sql injection	2023-03-23 18:00:20 -04:00
Jami Cogswell	db545e4981	Java: switch StringBuilder.delete to AbstractStringBuilder.delete	2023-03-23 18:00:20 -04:00
Jami Cogswell	56d14820e4	Java: change taint to value for Class.cast	2023-03-23 18:00:20 -04:00
Jami Cogswell	79ce46a221	Java: remove FileInputStream summary model since causing issues in DCA	2023-03-23 18:00:20 -04:00
Jami Cogswell	bdd7f18e35	Java: remove some comments	2023-03-23 18:00:20 -04:00
Jami Cogswell	17e0920325	Java: resolve more conflicts	2023-03-23 18:00:14 -04:00
Jami Cogswell	c213d56d2c	Java: resolve some more -1 to this conflicts	2023-03-23 17:56:46 -04:00
Jami Cogswell	44c3a41194	Java: resolve more -1 to this conflicts	2023-03-23 17:53:27 -04:00
Jami Cogswell	971b0e8814	Java: -1 to this conflict	2023-03-23 17:50:08 -04:00
Jami Cogswell	82daf50ed4	Java: add signature	2023-03-22 10:05:55 -04:00
Jami Cogswell	974f4bc371	Java: remove nativeSql sink	2023-03-22 10:05:55 -04:00
Jami Cogswell	ea626a03b6	Java: add nativeSQL as summary model	2023-03-22 10:05:55 -04:00
Tony Torralba	1258812428	Fix Argument[this]	2023-03-20 17:13:44 +01:00
Tony Torralba	a66b7ed54a	Fix incorrect model, add missing model	2023-03-20 17:09:48 +01:00
Stephan Brandauer	0cab45e4b9	update old data to current standard (stream creation arg is a sink)	2023-03-20 17:09:48 +01:00
Stephan Brandauer	8802fbdfe7	Update java/ql/lib/ext/java.nio.file.model.yml ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-03-20 17:09:48 +01:00
Stephan Brandauer	bc227179c7	Update java/ql/lib/ext/org.geogebra.web.full.main.model.yml ... Co-authored-by: Tony Torralba <atorralba@users.noreply.github.com>	2023-03-20 17:09:48 +01:00
Tony Torralba	bc99a44f3a	Apply suggestions from code review	2023-03-20 17:09:48 +01:00
Stephan Brandauer	12bb0d98c0	move toFile back to its original location	2023-03-20 17:09:48 +01:00
Stephan Brandauer	4761c3a328	remove duplicates	2023-03-20 17:09:48 +01:00
Stephan Brandauer	bd21dc9460	remove nonexploitable sinks	2023-03-20 17:09:48 +01:00
Stephan Brandauer	b7ce0c2d96	fix: taint flow of ctor goes to Argument[-1], instead of ReturnValue	2023-03-20 17:09:48 +01:00
Stephan Brandauer	2236db43ec	sort the changed MaD declarations	2023-03-20 17:09:46 +01:00
Stephan Brandauer	74e261738f	remove predicate	2023-03-20 17:06:40 +01:00
Stephan Brandauer	ec1762e015	Update MaD Declarations after Triage	2023-03-20 17:06:37 +01:00
Tony Torralba	fa60fa0ae2	Merge pull request #12572 from github/java/update-mad-decls-after-triage-2023-03-17T15-01-35 ... Java: Update MaD Declarations after Triage	2023-03-20 17:02:27 +01:00
Stephan Brandauer	39726a54ec	fix suggestion	2023-03-20 14:12:46 +01:00
Tony Torralba	bff8bbfe33	Apply suggestions from code review	2023-03-20 10:43:46 +01:00
Michael Nebel	9039a468cb	Java: Update models that uses -1 in a range.	2023-03-20 10:14:20 +01:00
Michael Nebel	e86f1e4961	Java: Replace Argument[-1] with Argument[this].	2023-03-20 10:14:20 +01:00
Stephan Brandauer	8f565f5023	Update MaD Declarations after Triage	2023-03-17 16:01:36 +01:00
Tony Torralba	3b4980ba2f	org.kohsuke.stapler.model tests	2023-03-15 14:36:45 +01:00
Tony Torralba	44f239f4a4	Fix org.kohsuke.stapler.framework.adjunct models	2023-03-14 18:21:19 +01:00
Tony Torralba	db9e305a56	org.apache.commons.jelly tests	2023-03-14 17:04:14 +01:00
Tony Torralba	d54abddab1	java.nio.file tests	2023-03-14 12:22:56 +01:00
Tony Torralba	2e7ad99059	Fix java.nio.file models	2023-03-14 11:51:44 +01:00
Tony Torralba	db83fe6f42	Fix incorrect java.io models	2023-03-14 11:21:17 +01:00
Stephan Brandauer	ccf7d9beec	Update MaD Declarations after Triage	2023-03-14 10:32:19 +01:00
Tony Torralba	698dfa46fc	Minor fixes to the models	2023-03-10 12:35:13 +01:00
Stephan Brandauer	0c19da926c	Update MaD Declarations after Triage	2023-03-10 12:35:13 +01:00
Tony Torralba	59bd1e5ab1	Merge pull request #12228 from github/java/mad-decls-triage-request-2276 ... Java: Update MaD sink decls after triage	2023-03-01 17:08:38 +01:00
Tony Torralba	0439eb640d	Add tests	2023-03-01 09:49:28 +01:00
Tony Torralba	db6cb1ffe3	Remove dubious model after investigating it	2023-02-27 14:57:56 +01:00
Tony Torralba	4a9f63ea1a	Fix toASCIIString casing	2023-02-27 09:32:42 +01:00