hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-02-05 01:31:08 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
2dc85e183c56cf381c3f1bc03b589c4ea04bd3f0
codeql/java/ql/lib/semmle/code/java/security
History
Jonathan Leitschuh 3a15678b1e Java: CWE-200: Temp directory local information disclosure vulnerability
2022-02-04 17:10:23 -05:00
..
AndroidIntentRedirection.qll
Apply suggestions from code review
2021-11-04 10:08:53 +01:00
AndroidIntentRedirectionQuery.qll
Add test and check for another edge case
2021-10-18 11:10:23 +02:00
AndroidSensitiveCommunicationQuery.qll
Add ExplicitIntentSanitizer and allowIntentExtrasImplicitRead
2021-10-26 17:11:27 +02:00
CleartextStorageAndroidDatabaseQuery.qll
Fix method name in LocalDatabaseOpenMethodAccess
2022-01-21 16:55:43 +01:00
CleartextStorageAndroidFilesystemQuery.qll
Rename filesystemStore predicate after d9e6e5aa04
2022-01-17 11:13:41 +01:00
CleartextStorageClassQuery.qll
Remove cached property from SensitiveSource::flowsTo
2021-09-23 10:42:30 +02:00
CleartextStorageCookieQuery.qll
Apply code review comments
2021-09-23 15:48:15 +02:00
CleartextStoragePropertiesQuery.qll
Refactored cleartext storage libraries
2021-09-23 10:42:30 +02:00
CleartextStorageQuery.qll
Apply code review comments
2021-09-23 15:48:15 +02:00
CleartextStorageSharedPrefsQuery.qll
Remove unused code
2022-01-11 14:50:48 +01:00
CommandArguments.qll
Work around compiler bug.
2021-10-18 14:04:16 +02:00
CommandLineQuery.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
ConditionalBypassQuery.qll
Fix conditionControlsMethod predicate
2021-09-15 17:51:51 +02:00
ControlledString.qll
Java: Deprecate StringLiteral.getRepresentedString()
2021-10-29 14:50:15 +02:00
Encryption.qll
add explicit this to member call
2022-01-21 11:46:33 +01:00
ExternalAPIs.qll
remove redundant inline casts
2021-10-28 16:35:53 +02:00
ExternalProcess.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
FileReadWrite.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
Files.qll
Fix QLDoc and the qhelp example
2022-01-17 11:11:03 +01:00
FileWritable.qll
Java: CWE-200: Temp directory local information disclosure vulnerability
2022-02-04 17:10:23 -05:00
FragmentInjection.qll
Apply code review suggestions
2022-01-17 12:02:27 +01:00
FragmentInjectionQuery.qll
Apply suggestions from code review
2021-12-15 16:53:47 +01:00
GroovyInjection.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
GroovyInjectionQuery.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
HttpsUrls.qll
Java: Deprecate StringLiteral.getRepresentedString()
2021-10-29 14:50:15 +02:00
HttpsUrlsQuery.qll
Refactored HttpsUrls.ql
2021-09-15 17:20:28 +02:00
ImplicitPendingIntents.qll
Remove PendingIntentAsField step and add SliceProviderLifecycle step
2022-01-20 16:52:07 +01:00
ImplicitPendingIntentsQuery.qll
Fix imports
2022-01-14 12:43:08 +01:00
InformationLeak.qll
C++/C#/Java/JavaScript/Python: Remove singleton set literals.
2021-10-14 11:34:22 +02:00
InsecureBasicAuth.qll
Java: Deprecate StringLiteral.getRepresentedString()
2021-10-29 14:50:15 +02:00
InsecureBasicAuthQuery.qll
Adapt InsecureBasicAuth to the previous commit
2021-09-15 17:20:28 +02:00
InsecureTrustManager.qll
QLDoc
2022-01-20 10:24:46 +01:00
InsecureTrustManagerQuery.qll
Change InsecureTrustManagerConfiguration to DataFlow
2022-01-20 10:24:47 +01:00
IntentUriPermissionManipulation.qll
Fix bitwiseLocalTaintStep
2022-01-20 13:34:32 +01:00
IntentUriPermissionManipulationQuery.qll
Make bitwise taintsteps specific for this query
2022-01-20 13:23:56 +01:00
JexlInjectionQuery.qll
add explicit this qualifier on all of java
2021-10-15 15:27:37 +02:00
JexlInjectionSinkModels.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
JndiInjection.qll
Remove some JNDI Injection sinks
2022-01-21 17:47:15 +01:00
JndiInjectionQuery.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
JWT.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
LdapInjection.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
LogInjection.qll
Refactor into separate libraries
2021-10-29 17:36:02 +02:00
LogInjectionQuery.qll
Minor corrections in QLDoc, qhelp and example code
2021-11-04 08:46:23 +01:00
Mail.qll
Apply suggestions from code review
2021-10-05 09:40:22 +02:00
MissingJWTSignatureCheckQuery.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
MvelInjection.qll
add explicit this qualifier on all of java
2021-10-15 15:27:37 +02:00
MvelInjectionQuery.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
OgnlInjection.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
OgnlInjectionQuery.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
PathCreation.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
QueryInjection.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
RandomDataSource.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
RandomQuery.qll
Fix a couple of typos: clases / clasess
2022-01-14 14:28:29 +00:00
RelativePaths.qll
Java: Deprecate StringLiteral.getRepresentedString()
2021-10-29 14:50:15 +02:00
RequestForgery.qll
Make import private
2021-10-19 11:28:55 +01:00
RequestForgeryConfig.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
ResponseSplitting.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
SecurityFlag.qll
Java: Deprecate StringLiteral.getRepresentedString()
2021-10-29 14:50:15 +02:00
SecurityTests.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
SensitiveActions.qll
Remove unneeded nonSuspicious values
2022-01-21 16:55:43 +01:00
SpelInjection.qll
Move to lib
2021-09-27 11:43:46 +02:00
SpelInjectionQuery.qll
add explicit this qualifier on all of java
2021-10-15 15:27:37 +02:00
SqlUnescapedLib.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
UnsafeAndroidAccess.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
UnsafeAndroidAccessQuery.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
UnsafeCertTrust.qll
Simplify isSslSocket predicate
2022-01-19 17:01:28 +01:00
UnsafeCertTrustQuery.qll
Apply suggestions from code review
2022-01-19 16:43:48 +01:00
UnsafeDeserializationQuery.qll
simplify expressions that could be type-casts
2022-01-20 10:41:35 +01:00
UrlRedirect.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
Validation.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
XmlParsers.qll
Note that FEATURE_SECURE_PROCESSING isn't a sufficient defence against XXE
2021-11-25 12:22:48 +00:00
XPath.qll
Packaging: Java refactoring
2021-08-19 14:09:35 -07:00
XsltInjection.qll
Move to lib
2021-09-27 12:04:14 +02:00
XsltInjectionQuery.qll
Move to lib
2021-09-27 12:04:14 +02:00
XSS.qll
add explicit this qualifier on all of java
2021-10-15 15:27:37 +02:00