Tony Torralba 2ec53bf78c Merge pull request #9873 from luchua-bc/java/permissive-dot-regex ...

Java: CWE-625 Query to detect regex dot bypass

2022-08-31 10:24:18 +02:00

..

CWE-016

Rename springframework-5.2.3 to 5.3.8

2021-06-28 08:26:39 -07:00

CWE-020

Sinks for CloseableThreadContext

2021-12-17 09:17:04 +01:00

CWE-073

Remove the same callable constraint

2022-02-15 12:44:23 +00:00

CWE-078

Adjust test to moved and expanded stubs

2022-08-15 12:08:14 +01:00

CWE-089/src/main

Update MyBatisAnnotationSqlInjection.qlref

2022-03-16 10:12:38 +01:00

CWE-094

Make *.java non-executable

2022-08-24 16:38:03 +01:00

CWE-200

Make *.xml non-executable

2022-08-24 16:53:48 +01:00

CWE-208

Adjust test expectation

2022-02-25 20:05:06 +00:00

CWE-295

Move from experimental

2022-01-20 10:23:18 +01:00

CWE-297

Updated IgnoredHostnameVerification.ql to cover more uses of HostnameVerifier.verify()

2022-02-06 11:23:20 +00:00

CWE-299

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00

CWE-321

Query to detect hardcoded JWT secret keys

2022-05-04 23:09:48 +00:00

CWE-326

Java: fix javac errors in test code

2021-02-09 09:16:57 -05:00

CWE-327

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00

CWE-346

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00

CWE-348

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-352

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00

CWE-400

Add local input test case and update qldoc

2021-11-24 13:30:50 +00:00

CWE-470

Java: Implement ContentSet

2022-04-04 13:51:44 +02:00

CWE-489

Update qldoc and method name

2021-02-22 14:15:41 +00:00

CWE-502

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00

CWE-522

Moved from experimental

2021-09-15 17:20:27 +02:00

CWE-548

Java: Add empty file to test.

2021-02-17 13:23:18 +01:00

CWE-552

Put back the taint step removed during merge

2022-04-29 20:29:04 +00:00

CWE-555

update expected output of tests

2022-08-22 21:41:47 +02:00

CWE-598

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00

CWE-600

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00

CWE-601

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-611

Remove org.dom4j.DocumentHelper:parseText as XXE sink

2022-05-20 14:45:26 +02:00

CWE-625

Move pattern check to MatchRegexConfiguration::isSink

2022-08-30 22:48:12 +00:00

CWE-652

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00

CWE-665

Merged simplified query

2021-06-04 16:07:15 +02:00

CWE-730

update expected output of tests

2022-08-22 21:41:47 +02:00

CWE-755

Make *.xml non-executable

2022-08-24 16:53:48 +01:00

CWE-759

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-1004

Dataflow: Update more tests.

2021-09-07 13:02:20 +02:00