Owen Mansel-Chan a5d9cb179a Merge pull request #20930 from owen-mc/java/spring-rest-template-request-forgery-sinks ...

Java: add more Spring RestTemplate request forgery sinks

2026-01-15 14:23:15 +00:00

..

CWE-020

[TEST] Java: CWE-020/ExternalAPI: new test based on qhelp

2025-07-17 18:58:52 +02:00

CWE-022/semmle/tests

Java: Convert TaintedPath test to .qlref

2025-06-24 16:41:35 +02:00

CWE-023/semmle/tests

Java: convert PartialPathTraversalFromRemote test to .qlref

2025-06-24 16:41:39 +02:00

CWE-074

Java: convert XsltInjection test to .qlref

2025-06-24 16:41:43 +02:00

CWE-078

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-079/semmle/tests

Java: convert XSS test to .qlref

2025-06-24 16:41:46 +02:00

CWE-089/semmle/examples

Improve model for CWE-089

2026-01-13 21:48:43 +01:00

CWE-090

Java: rename springframework stubs directory from 5.3.8 to 5.8.x

2025-03-11 15:20:58 -04:00

CWE-094

Java: convert ArbitraryApkInstallation test to .qlref

2025-06-26 13:22:05 +02:00

CWE-113/semmle/tests

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-117

[TEST] Java: LogInjection: convert test to qlref

2025-07-17 18:58:54 +02:00

CWE-129/semmle/tests

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-134/semmle/tests

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-190/semmle/tests

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-200/semmle/tests

Java: fix test failures cause by alert msg change

2025-07-19 13:27:09 -04:00

CWE-209/semmle/tests

Now alerts about exposing exception.getMessage() in servlet responses are split out of java/stack-trace-exposure into its own alert java/error-message-exposure because this is a better fit.

2024-07-25 18:12:45 +02:00

CWE-266

Java: convert IntentUriPermissionManipulation test to .qlref

2025-06-24 16:41:58 +02:00

CWE-273

[TEST] Java: UnsafeCertTrust: convert test to qlref

2025-07-17 18:58:56 +02:00

CWE-287

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-295

Java: convert InsecureTrustManager test to .qlref

2025-06-24 16:42:00 +02:00

CWE-297

Java: Diff-informed UnsafeHostnameVerification.ql

2024-12-20 12:58:59 +01:00

CWE-311

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-312

Java: add CleartextStorageCookie test

2025-06-24 18:12:19 +02:00

CWE-326

Java: convert InsufficientKeySize test to .qlref

2025-06-24 16:42:02 +02:00

CWE-327/semmle/tests

Java: fix comma splice in alert message

2025-03-21 14:23:32 +00:00

CWE-330

Java: convert InsecureRandomness test to .qlref

2025-06-24 16:42:04 +02:00

CWE-335/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-338/semmle/tests

Update JHipster CodeQL query from code review

2020-10-01 15:38:56 -04:00

CWE-347

Java: convert MissingJWTSignatureCheck test to .qlref

2025-06-24 16:42:06 +02:00

CWE-352

Java: rename springframework stubs directory from 5.3.8 to 5.8.x

2025-03-11 15:20:58 -04:00

CWE-367/semmle/tests

Fix test output

2025-03-14 11:44:00 +00:00

CWE-421/semmle

Java: fix javac errors in test code

2021-02-09 09:16:57 -05:00

CWE-441

Java: convert UnsafeContentUriResolution test to .qlref

2025-06-24 16:42:08 +02:00

CWE-470

Java: convert FragmentInjection test to .qlref

2025-06-24 16:42:10 +02:00

CWE-489

Java: convert WebviewDebuggingEnabled test to .qlref

2025-06-24 16:42:12 +02:00

CWE-501

[TEST] Java: TrustBoundaryViolations: convert test to qlref

2025-07-17 18:58:59 +02:00

CWE-502

Use MaD models for unsafe deserialization sinks when possible

2025-07-16 14:42:07 +01:00

CWE-522

Java: convert CWE-522 tests to .qlref

2025-06-24 16:42:17 +02:00

CWE-524

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-532

Range library recognises long literals now

2025-11-24 14:10:54 +00:00

CWE-552

Java: convert UrlForward test to .qlref

2025-06-24 16:42:19 +02:00

CWE-601/semmle/tests

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-611

Update test expectations

2025-07-16 15:25:45 +01:00

CWE-643

Java: convert XPathInjection test to .qlref

2025-06-24 16:42:23 +02:00

CWE-676/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-681/semmle/tests

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-730

Java: convert PolynomialReDoS and RegexInjection tests to .qlref

2025-06-24 16:42:26 +02:00

CWE-732/semmle/tests

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-749

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-780

Java: convert RsaWithoutOaep test to .qlref

2025-06-24 16:42:28 +02:00

CWE-798/semmle/tests

Update java/ql/test/query-tests/security/CWE-798/semmle/tests/HardcodedCouchBaseCredentials.java

2026-01-14 11:50:52 +01:00

CWE-807/semmle/tests

[TEST] Java: ConditionalBypass: convert to qlref

2025-07-17 18:59:03 +02:00

CWE-829/semmle/tests

Handle disabled Maven repositories

2022-11-21 10:11:57 +01:00

CWE-833/semmle/tests

Java: accept changes in expected output

2021-02-09 09:17:35 -05:00

CWE-835/semmle/tests

Java: Adjust toString() for statements

2021-06-03 16:27:36 +02:00

CWE-917

Java: convert OgnlInjection test to .qlref

2025-06-24 16:42:30 +02:00

CWE-918

Merge pull request #20930 from owen-mc/java/spring-rest-template-request-forgery-sinks

2026-01-15 14:23:15 +00:00

CWE-925

Java: convert ImproperIntentVerification test to .qlref

2025-06-24 16:42:35 +02:00

CWE-926

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-927

[TEST] Java: SensitiveCommunication: convert to qlref

2025-07-17 18:59:05 +02:00

CWE-940

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

CWE-1004

Review suggestions - update comments and description

2025-10-14 16:03:40 +01:00

CWE-1104/semmle/tests

Fix typo in test output

2021-02-22 13:26:51 -05:00

CWE-1204

Java: StaticInitializationVector with postprocess

2025-02-24 13:33:02 +01:00