Anders Schack-Mulligen df2e2e503a Merge pull request #17901 from aschackmull/java/allowlist-sanitizer ...

Java: Add a default taint sanitizer for contains-checks on lists of constants

2024-11-27 11:09:05 +01:00

..

CWE-020

rename query to overly-large-range, and rewrite the @description

2022-07-12 16:02:46 +02:00

CWE-022/semmle/tests

Update expected test output

2024-09-18 13:51:02 +02:00

CWE-023/semmle/tests

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-074

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-078

Update expected test output

2024-09-24 14:21:38 +02:00

CWE-079/semmle/tests

Merge pull request #13235 from atorralba/atorralba/java/hudson-models

2023-06-14 12:33:18 +02:00

CWE-089/semmle/examples

Java: Fix semantic merge conflict in expected file.

2024-11-27 08:53:41 +01:00

CWE-090

Update expected test output

2024-11-04 12:07:06 +01:00

CWE-094

Update expected test output

2024-11-04 12:07:06 +01:00

CWE-113/semmle/tests

Update expected test output

2024-11-04 12:07:06 +01:00

CWE-117

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-129/semmle/tests

Java: use post-process provenance pretty-printing in query-tests

2024-07-28 18:12:17 -04:00

CWE-134/semmle/tests

Update expected test output

2024-09-18 13:51:02 +02:00

CWE-190/semmle/tests

Java: use post-process provenance pretty-printing in query-tests

2024-07-28 18:12:17 -04:00

CWE-200/semmle/tests

Update expected test output

2024-11-04 12:07:06 +01:00

CWE-209/semmle/tests

Now alerts about exposing exception.getMessage() in servlet responses are split out of java/stack-trace-exposure into its own alert java/error-message-exposure because this is a better fit.

2024-07-25 18:12:45 +02:00

CWE-266

Consolidate all InlineFlowTest libraries in the dataflow qlpack

2023-08-24 21:38:46 +02:00

CWE-273

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-287

Address reveiws - Add BAD example to doc, add doc example to tests and fix typo.

2024-02-16 12:00:51 +00:00

CWE-295

Update tests so they still work

2024-07-07 00:24:28 +01:00

CWE-297

Update expected test output

2024-09-18 13:51:02 +02:00

CWE-311

Update expected test output

2024-09-18 13:51:02 +02:00

CWE-312/android

Java: Re-enable Widget.qll flow steps

2024-02-23 13:07:35 +01:00

CWE-326

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-327/semmle/tests

Java: add SHA384 to list of secure algorithms

2024-11-25 09:27:53 -05:00

CWE-330

Rename test

2023-12-13 11:15:27 +01:00

CWE-335/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-338/semmle/tests

Update JHipster CodeQL query from code review

2020-10-01 15:38:56 -04:00

CWE-347

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-352

Disable csrf for ServerHttpSecurity

2024-05-30 23:08:57 +02:00

CWE-367/semmle/tests

update two more queries to better follow the style-guide

2022-10-01 10:59:59 +02:00

CWE-421/semmle

Java: fix javac errors in test code

2021-02-09 09:16:57 -05:00

CWE-441

Consolidate all InlineFlowTest libraries in the dataflow qlpack

2023-08-24 21:38:46 +02:00

CWE-470

Consolidate all InlineFlowTest libraries in the dataflow qlpack

2023-08-24 21:38:46 +02:00

CWE-489

Consolidate all InlineFlowTest libraries in the dataflow qlpack

2023-08-24 21:38:46 +02:00

CWE-501

Consolidate all InlineFlowTest libraries in the dataflow qlpack

2023-08-24 21:38:46 +02:00

CWE-502

Java: Add JMS sink to java/unsafe-deserialization

2023-10-26 16:46:19 +02:00

CWE-522

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-524

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-532

Add "tokenizer" to sensitive variable name FPs

2024-07-30 15:38:32 +01:00

CWE-552

Java: use InlineFlowTest instead of InlineExpectationsTest

2024-03-27 08:44:17 -04:00

CWE-601/semmle/tests

Update expected test output

2024-11-04 12:07:06 +01:00

CWE-611

Java: Add missing flow step for ThreadLocal.initialValue.

2023-09-22 13:33:45 +02:00

CWE-643

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-676/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-681/semmle/tests

Java: use post-process provenance pretty-printing in query-tests

2024-07-28 18:12:17 -04:00

CWE-730

Java: Fix test comment.

2023-09-13 17:58:31 +01:00

CWE-732/semmle/tests

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-749

Add failing test

2023-07-10 17:40:15 +02:00

CWE-780

Java: Remove redundant inline expectation test imports

2023-08-25 00:18:55 +02:00

CWE-798/semmle/tests

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-807/semmle/tests

Java: use post-process provenance pretty-printing in query-tests

2024-07-28 18:12:17 -04:00

CWE-829/semmle/tests

Handle disabled Maven repositories

2022-11-21 10:11:57 +01:00

CWE-833/semmle/tests

Java: accept changes in expected output

2021-02-09 09:17:35 -05:00

CWE-835/semmle/tests

Java: Adjust toString() for statements

2021-06-03 16:27:36 +02:00

CWE-917

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-918

Java: Update request forgery expected output.

2024-10-21 15:19:30 +02:00

CWE-925

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-926

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00

CWE-927

Java: use MISSING inline annotation

2024-08-21 13:40:40 +02:00

CWE-940

Java: Post-processing query for inline test expectations

2024-10-29 13:35:32 +01:00

CWE-1104/semmle/tests

Fix typo in test output

2021-02-22 13:26:51 -05:00

CWE-1204

Java: Rewrite inline expectation tests to use parameterized module

2023-06-09 10:42:17 +02:00