Tony Torralba 12fa6967dc Merge pull request #8669 from joefarebrother/intent-verification ...

Java: Add query for Improper Verification of Intent by Broadcast Receiver (CWE-925)

2022-06-29 09:43:07 +02:00

..

CWE-020

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

CWE-022

Java: Add support for BarrierGuards as parameterised modules.

2022-05-24 16:36:03 +02:00

CWE-074

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-078

Deduplicate shared body of regular and experimental versions of java/command-line-injection query.

2021-07-01 14:53:56 +01:00

CWE-079

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

CWE-089

Update Sql Injection queries

2022-04-06 10:57:14 +02:00

CWE-090

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-094

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-113

Remove CAPC and add CWE-93

2022-02-09 12:31:53 -05:00

CWE-117

Java: Report log-injection at the source rather than the sink

2022-06-22 13:05:20 +01:00

CWE-129

Java: Make JumpStmt a proper superclass

2022-03-30 00:30:27 +02:00

CWE-134

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-190

Kotlin: Add types for the different kinds of casts that Kotlin has

2022-05-10 19:51:13 +01:00

CWE-200

Add additional File taint value flow models

2022-04-26 10:42:53 -04:00

CWE-209

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-266

Don't capitalize the term content provider

2022-01-20 13:23:52 +01:00

CWE-273

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-295

Update InsecureTrustManager.qhelp

2022-01-20 10:24:46 +01:00

CWE-297

Java: Performance tweaks

2022-02-21 17:05:00 +00:00

CWE-312

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-319

Simplify non-https-url query

2022-05-02 15:43:07 +02:00

CWE-327

Merge pull request #7318 from RasmusWL/java-cwe-328

2021-12-07 11:39:48 +01:00

CWE-335

Java: Add cwe-377 tag to predictable-seed

2022-05-03 12:28:14 +01:00

CWE-338

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-347

Apply suggestions from code review

2021-08-04 13:15:49 +02:00

CWE-352

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-367

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-421

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-470

Update java/ql/src/Security/CWE/CWE-470/FragmentInjection.inc.qhelp

2022-01-17 11:20:39 +01:00

CWE-502

Add change note and update qhelp

2021-10-12 12:35:05 +01:00

CWE-522

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-532

Add security severity

2022-03-15 10:42:41 +00:00

CWE-601

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-611

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

CWE-614

Insecure cookie query: accept ServletRequest.isSecure(), and allow more than one possible input to a setSecure(...) call.

2022-05-11 11:59:37 +01:00

CWE-643

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-676

Add security-severity metadata

2021-06-10 20:11:08 +01:00

CWE-681

Use EqualityTest for either value or ref comparions, and ReferenceEqualityTest for strictly ref comparison.

2022-05-10 19:51:17 +01:00

CWE-730

Fix codescanning alerts

2022-05-04 15:58:30 +01:00

CWE-732

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-749

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-798

Java: Deprecate StringLiteral.getRepresentedString()

2021-10-29 14:50:15 +02:00

CWE-807

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-829

rename existing getUrl predicate to getRepositoryUrl

2022-04-06 15:32:33 +02:00

CWE-833

Java: Performance tweaks

2022-02-21 17:05:00 +00:00

CWE-835

Java: Make JumpStmt a proper superclass

2022-03-30 00:30:27 +02:00

CWE-917

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-918

Update Security-Severity for CWE-918

2021-08-04 12:17:21 +02:00

CWE-925

Fix misspellings

2022-06-14 15:34:08 +01:00

CWE-927

Update java/ql/src/Security/CWE/CWE-927/ImplicitPendingIntents.qhelp

2022-01-21 11:57:11 +01:00

CWE-940

Apply suggestions from code review

2021-11-04 10:08:53 +01:00

CWE-1104

rename existing getUrl predicate to getRepositoryUrl

2022-04-06 15:32:33 +02:00