Tony Torralba d7feaf4098 Merge pull request #12685 from atorralba/atorralba/java/command-injection-mad ...

Java: Add command-injection sink kind and refactor command injection queries

2023-04-13 11:38:14 +02:00

..

CWE-020

Refactor ExternalAPIs.qll

2023-03-29 22:33:08 -04:00

CWE-022

Move ZipSlip configurations to Query.qll library

2023-03-29 17:59:33 -04:00

CWE-023

Update java/ql/src/Security/CWE/CWE-023/PartialPathTraversalRemainder.inc.qhelp

2023-03-31 23:36:07 -04:00

CWE-074

Refactor to DataFlow::Global

2023-03-24 10:04:46 -04:00

CWE-078

Make LocalUserInputToArgumentToExecFlowConfig and LocalUserInputToArgumentToExecFlow importable

2023-03-30 10:24:23 +02:00

CWE-079

Move XssConfig to XssQuery.qll

2023-03-29 17:59:33 -04:00

CWE-089

Fix SqlConcatenated

2023-03-27 13:06:31 -04:00

CWE-090

Move LdapInjectionLib to LdapInjectionQuery.qll

2023-03-29 17:59:33 -04:00

CWE-094

Move InsecureBeanValidation configuration to Query.qll

2023-03-29 17:59:33 -04:00

CWE-113

Move ResponseSplitting configuration to ResponseSplittingQuery.qll

2023-03-29 17:59:33 -04:00

CWE-117

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-129

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-134

Fix StringFormat import

2023-03-30 11:20:35 -04:00

CWE-190

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-200

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-209

Java/C++: Autoformat

2023-03-23 13:06:19 +01:00

CWE-266

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-273

Refactor UnsafeCertTrustQuery

2023-03-29 22:33:08 -04:00

CWE-295

Refactor InsecureTrustManager

2023-03-29 22:33:09 -04:00

CWE-297

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-312

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-319

Refactor HttpsUrlsQuery.qll

2023-03-29 22:33:09 -04:00

CWE-326

Refactor InsufficientKeySize

2023-03-29 22:33:09 -04:00

CWE-327

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-335

Java: Add cwe-377 tag to predictable-seed

2022-05-03 12:28:14 +01:00

CWE-338

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-347

Refactor MissingJWTSignatureCheck

2023-03-29 22:33:09 -04:00

CWE-352

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-367

update two more queries to better follow the style-guide

2022-10-01 10:59:59 +02:00

CWE-421

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-441

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-470

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-489

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-502

Refactor CWE-502/UnsafeDeserialization

2023-03-29 22:33:08 -04:00

CWE-522

Refactor InsecureBasicAuth

2023-03-29 22:33:09 -04:00

CWE-524

Apply suggestion from docs review

2022-11-16 10:54:14 +00:00

CWE-532

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-601

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-611

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-614

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-643

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-676

Add security-severity metadata

2021-06-10 20:11:08 +01:00

CWE-681

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-730

Refactor to DataFlow::Global

2023-03-24 10:04:46 -04:00

CWE-732

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-749

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-780

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-798

Refactor HardcodedCredentialsApiCall.qll

2023-03-29 22:33:08 -04:00

CWE-807

Refactor ConditionalBypass

2023-03-29 22:33:08 -04:00

CWE-829

Handle disabled Maven repositories

2022-11-21 10:11:57 +01:00

CWE-833

Java: Performance tweaks

2022-02-21 17:05:00 +00:00

CWE-835

Java: Make JumpStmt a proper superclass

2022-03-30 00:30:27 +02:00

CWE-917

Refactor to DataFlow::Global

2023-03-24 10:04:46 -04:00

CWE-918

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-925

spelling: receiver

2022-10-12 04:40:26 -04:00

CWE-926

Reword first sentence of documentation

2022-10-11 11:02:37 -04:00

CWE-927

Refactor ImplicitPendingIntents

2023-03-29 22:33:09 -04:00

CWE-940

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-1104

rename existing getUrl predicate to getRepositoryUrl

2022-04-06 15:32:33 +02:00

CWE-1204

Refactor StaticInitializationVector

2023-03-29 22:33:09 -04:00