54887 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Ed Minnix	c7fd216c3c	Documentation for RsaWithoutOaepQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	11d72ffc1f	Documentation for UnsafeContentUriResolutionQuery	2023-03-29 22:33:10 -04:00
Ed Minnix	59b1460c49	Documentation for UnsafeCertTrustQuery	2023-03-29 22:33:09 -04:00
Ed Minnix	a798b1959f	Replace flow(_, sink) with flowTo(sink)	2023-03-29 22:33:09 -04:00
Ed Minnix	d24c5071d8	Move private helper method out of module	2023-03-29 22:33:09 -04:00
Ed Minnix	a119b99f92	Documentation additions	2023-03-29 22:33:09 -04:00
Ed Minnix	6a3eadf6cb	Refactor ImplicitPendingIntents	2023-03-29 22:33:09 -04:00
Ed Minnix	8621a49645	Remove unnecessary private markers	2023-03-29 22:33:09 -04:00
Ed Minnix	42b582da2f	Refactor StaticInitializationVector	2023-03-29 22:33:09 -04:00
Ed Minnix	469ac80d40	Refactor PartialPathTraversal	2023-03-29 22:33:09 -04:00
Ed Minnix	f8e26f1571	Refactor MissingJWTSignatureCheck	2023-03-29 22:33:09 -04:00
Ed Minnix	cae5637d8d	Refactor InsufficientKeySize	2023-03-29 22:33:09 -04:00
Ed Minnix	fa2f0dbc3b	Refactor InsecureBasicAuth	2023-03-29 22:33:09 -04:00
Ed Minnix	dcd46c2236	Refactor InsecureTrustManager	2023-03-29 22:33:09 -04:00
Ed Minnix	3b2eea2d44	Refactor XxeQuery	2023-03-29 22:33:09 -04:00
Ed Minnix	7262c6a097	Refactor XmlParsers.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	da718610e8	Refactor HttpsUrlsQuery.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	c67b984fff	Refactor RandomQuery.qll	2023-03-29 22:33:09 -04:00
Ed Minnix	2698b61514	Refactor HardcodedCredentialsApiCall.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	e8f7e3fcf1	Refactor ExternalAPIs.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	ac8dec740a	Refactor UnsafeCertTrustQuery	2023-03-29 22:33:08 -04:00
Ed Minnix	a040ff6997	Refactor ConditionalBypass	2023-03-29 22:33:08 -04:00
Ed Minnix	aa7934161a	Refactor CleartextStorage libraries	2023-03-29 22:33:08 -04:00
Ed Minnix	b4130e650d	Refactor RegexFlowConfigs.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	6681c1a3a8	Refactor SnakeYaml.qll	2023-03-29 22:33:08 -04:00
Ed Minnix	e5f11d00a7	Refactor CWE-502/UnsafeDeserialization	2023-03-29 22:33:08 -04:00
Ed Minnix	9afa051621	Move ExternallyControlledFormatStringFlow to Query.qll	2023-03-29 17:59:34 -04:00
Ed Minnix	7d9fad5733	Add change note	2023-03-29 17:59:33 -04:00
Ed Minnix	3eaa94a5d2	Move ResponseSplitting configuration to ResponseSplittingQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	e3af8b2c7f	Move LdapInjectionLib to LdapInjectionQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	1add692643	Move XssConfig to XssQuery.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	19a94a5c13	Move InsecureBeanValidation configuration to Query.qll	2023-03-29 17:59:33 -04:00
Ed Minnix	367042bcff	Move ZipSlip configurations to Query.qll library	2023-03-29 17:59:33 -04:00
Ed Minnix	ce2cab0d2e	Move TaintedPath configurations to Query.qll	2023-03-29 17:59:33 -04:00
Edward Minnix III	434b1b35d8	Merge pull request #12698 from egregius313/egregius313/java/refactor-commandline-query-and-request-forgery ... Java: Refactor CommandLineQuery.qll and RequestForgeryConfig.qll	2023-03-29 17:49:51 -04:00
Tom Hvitved	6af973a8a6	Merge pull request #12704 from github/hvitved-patch-1	2023-03-29 21:18:23 +02:00
Ed Minnix	744f2653f0	Add QLdoc for RemoteUserInputToArgumentToExecFlow	2023-03-29 11:45:09 -04:00
Ed Minnix	a3c1d08a59	Fix ExecUnescaped	2023-03-29 11:45:09 -04:00
Ed Minnix	25359d2218	Deprecate execTainted	2023-03-29 11:45:09 -04:00
Ed Minnix	dcd703f1a9	Update to the TaintTracking::Global api	2023-03-29 11:45:09 -04:00
Ed Minnix	bbf7c67f9b	Remove unnecessary private markers (CommandLine and Request forgery)	2023-03-29 11:45:09 -04:00
Ed Minnix	0249890747	Refactor CommandLineQuery.qll	2023-03-29 11:45:09 -04:00
Gulshan Singh	abec99badb	C++: Add getSizeExpr and getSizeMult predicates to BufferAccess	2023-03-29 08:26:00 -07:00
Edward Minnix III	117a983423	Merge pull request #12639 from egregius313/egregius313/java/refactor-injection-queries ... Java: Refactor injection queries to new dataflow API	2023-03-29 11:02:18 -04:00
Geoffrey White	fcefd03b14	Swift: Fill out the upgrade/downgrade scripts.	2023-03-29 15:54:08 +01:00
Geoffrey White	d5928e150d	Swift: Prepare upgrade/downgrade scripts.	2023-03-29 15:51:42 +01:00
Geoffrey White	704e42cf22	Swift: Accept integration test changes (not sure what caused this exactly but it looks OK to me).	2023-03-29 15:49:44 +01:00
Geoffrey White	8e4c7a9d89	Swift: Test expectations.	2023-03-29 15:49:36 +01:00
Geoffrey White	4ba8de4802	Swift: Update codegen.	2023-03-29 15:49:26 +01:00
Geoffrey White	f042195e5c	Swift: Connect it up.	2023-03-29 15:49:17 +01:00