Ahmed Farid
|
c207294dfc
|
Update zipslip_good.py
|
2022-02-26 18:31:22 +01:00 |
|
Ahmed Farid
|
d0d14be693
|
Update ZipSlip.qhelp
|
2022-02-26 18:25:13 +01:00 |
|
luchua-bc
|
88d9694628
|
Query to detect insecure WebResourceResponse implementation
|
2022-02-26 02:03:35 +00:00 |
|
jorgectf
|
67b672a467
|
Merge remote-tracking branch 'origin/main' into jty/python/emailInjection
|
2022-02-26 01:22:55 +01:00 |
|
jorgectf
|
2f2cf2c1f6
|
Use StrConst.getText() instead of Str_.getS()
|
2022-02-26 01:19:50 +01:00 |
|
Chris Smowton
|
958fd9b3ea
|
Merge pull request #7867 from ahmed532009/timing-attacks
Java: Timing attacks while comparing the headers value
|
2022-02-25 21:55:13 +00:00 |
|
Chris Smowton
|
f981fee37d
|
Adjust test expectation
|
2022-02-25 20:05:06 +00:00 |
|
Chris Smowton
|
ff5d680837
|
Add missing substitution description
|
2022-02-25 19:12:25 +00:00 |
|
Ian Lynagh
|
0bf1370cd5
|
Java: Autoformat QL
|
2022-02-25 19:08:08 +00:00 |
|
Alexander Eyers-Taylor
|
d38cd4a0d7
|
Merge pull request #8156 from alexet/alexet/expression-pragma-doc
QLSpeciifcation: Add documentation for expression pragmas
|
2022-02-25 18:59:49 +00:00 |
|
Arthur Baars
|
0c23f5815f
|
Add change note
|
2022-02-25 18:43:43 +01:00 |
|
Arthur Baars
|
5044f89105
|
Ruby/Python re-introduce normalCharacterSequence
|
2022-02-25 18:43:43 +01:00 |
|
Chris Smowton
|
8fbd8c52dd
|
Fix test expectations
|
2022-02-25 17:35:52 +00:00 |
|
Chris Smowton
|
ff303db034
|
Autoformat and fix qhelp
|
2022-02-25 17:33:08 +00:00 |
|
Chris Smowton
|
303927c9c9
|
Fix qhelp
|
2022-02-25 17:33:08 +00:00 |
|
Chris Smowton
|
e02a3d0ddd
|
Rename qlref file
|
2022-02-25 17:33:08 +00:00 |
|
Ahmed Farid
|
3a2d514b18
|
Create ComparingValueOfSensetiveHeader.qlref
|
2022-02-25 17:33:08 +00:00 |
|
Ahmed Farid
|
0d278f6d61
|
Create Test.java
|
2022-02-25 17:33:08 +00:00 |
|
Ahmed Farid
|
1bc5fe13eb
|
Update and rename java/ql/test/experimental/query-tests/security/CWE-208/TimingAttackAgainstHeader.expected to java/ql/test/experimental/query-tests/security/CWE-208/TimingAttackAgainstHeader/TimingAttackAgainstHeader.expected
|
2022-02-25 17:33:08 +00:00 |
|
Ahmed Farid
|
63133f7e8b
|
Update TimingAttackAgainstHeader.expected
|
2022-02-25 17:33:08 +00:00 |
|
Ahmed Farid
|
f2457dafb5
|
Create TimingAttackAgainstHeader.expected
|
2022-02-25 17:33:08 +00:00 |
|
Ahmed Farid
|
35abc3f9a3
|
Update and rename ComparingValueOfSensetiveHeader.java to Test.java
|
2022-02-25 17:33:08 +00:00 |
|
Chris Smowton
|
091227982c
|
Delete unnecessary test files
|
2022-02-25 17:33:08 +00:00 |
|
Ahmed Farid
|
899b8d03b2
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
308f86f66f
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
2eee6b4f69
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
7859288040
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
d83444cb18
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
e79c0eaa71
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
36cf1010f8
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
8e6f76d47a
|
Update TimingAttackAgainstHeader.qhelp
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
fa8af6bf70
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
19d0e1f4a7
|
Create ComparingValueOfSensetiveHeader.qlref
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
f96e47db09
|
Update ComparingValueOfSensetiveHeader.java
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
09e054ace6
|
Update ComparingValueOfSensetiveHeader.java
|
2022-02-25 17:33:07 +00:00 |
|
Ahmed Farid
|
f758ed0d85
|
Update ComparingValueOfSensetiveHeader.java
|
2022-02-25 17:33:07 +00:00 |
|
ahmed532009
|
4a9ee5826d
|
Update TimingAttackAgainstHeader.qhelp
|
2022-02-25 17:33:07 +00:00 |
|
ahmed532009
|
6da9bc593f
|
Rename csrfComparison.java to ComparingValueOfSensetiveHeader.java
|
2022-02-25 17:33:07 +00:00 |
|
ahmed532009
|
a0a1c587e5
|
Create ComparingValueOfSensetiveHeader.java
|
2022-02-25 17:33:07 +00:00 |
|
ahmed532009
|
aa488e532f
|
Update csrfComparison.java
|
2022-02-25 17:33:07 +00:00 |
|
Chris Smowton
|
333130b2a4
|
Abbreviate isSink
|
2022-02-25 17:33:07 +00:00 |
|
Chris Smowton
|
80a2b388bf
|
Update TimingAttackAgainstHeader.qhelp
|
2022-02-25 17:33:07 +00:00 |
|
ahmed532009
|
fa81f43694
|
Update TimingAttackAgainstHeader.qhelp
|
2022-02-25 17:33:06 +00:00 |
|
ahmed532009
|
39e07cbc9c
|
Update and rename UnsafecsrfComparison.java to csrfComparison.java
|
2022-02-25 17:33:06 +00:00 |
|
ahmed532009
|
c6c67b907b
|
Update TimingAttackAgainstHeader.qhelp
|
2022-02-25 17:33:06 +00:00 |
|
ahmed532009
|
98b06d35af
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:06 +00:00 |
|
ahmed532009
|
bf95e59b24
|
Update TimingAttackAgainstHeader.qhelp
|
2022-02-25 17:33:06 +00:00 |
|
ahmed532009
|
ab6a7bb3d8
|
Update TimingAttackAgainstHeader.ql
|
2022-02-25 17:33:06 +00:00 |
|
root
|
49feeb1c36
|
Timing attacks while comparing the headers value
|
2022-02-25 17:33:06 +00:00 |
|
Erik Krogh Kristensen
|
4fba5e4dfb
|
step through parentheses in barrier functions
|
2022-02-25 17:47:12 +01:00 |
|