Owen Mansel-Chan 87c35e6401 Merge pull request #21654 from MarkLee131/fix/sensitive-log-hash-sanitizer ...

Java: treat hash/encrypt/digest methods as sensitive-log sanitizers

2026-04-30 13:21:03 +01:00

..

CWE-020

[TEST] Java: CWE-020/ExternalAPI: new test based on qhelp

2025-07-17 18:58:52 +02:00

CWE-022/semmle/tests

Java: recognize Path.toRealPath() as path normalization sanitizer

2026-04-04 20:59:45 +08:00

CWE-023/semmle/tests

Fix bug so += File.separator is recognized

2026-04-19 07:18:42 +01:00

CWE-074

…

CWE-078

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-079/semmle/tests

…

CWE-089/semmle/examples

Model additional Hibernate query sinks

2026-04-23 13:41:03 +00:00

CWE-090

…

CWE-094

Java: convert ArbitraryApkInstallation test to .qlref

2025-06-26 13:22:05 +02:00

CWE-113/semmle/tests

…

CWE-117

Update test results (remove SPURIOUS annotations)

2026-02-16 12:03:02 +00:00

CWE-129/semmle/tests

…

CWE-134/semmle/tests

…

CWE-190/semmle/tests

Address review: update QLDoc comment and fix expected test output

2026-03-29 11:53:06 +08:00

CWE-200/semmle/tests

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-209/semmle/tests

…

CWE-266

…

CWE-273

[TEST] Java: UnsafeCertTrust: convert test to qlref

2025-07-17 18:58:56 +02:00

CWE-287

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-295

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-297

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-311

…

CWE-312

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-326

…

CWE-327/semmle/tests

Address PR review: add Signature.getInstance sink, HMAC/PBKDF2 whitelist, fix test APIs

2026-03-28 16:53:46 +08:00

CWE-330

…

CWE-335/semmle/tests

…

CWE-338/semmle/tests

…

CWE-347

…

CWE-352

…

CWE-367/semmle/tests

…

CWE-421/semmle

…

CWE-441

…

CWE-470

…

CWE-489

…

CWE-501

Add @Pattern annotation test case and javax-validation-constraints stub

2026-04-04 22:04:05 +08:00

CWE-502

Use MaD models for unsafe deserialization sinks when possible

2025-07-16 14:42:07 +01:00

CWE-522

…

CWE-524

Add space before $ in xml test file

2026-03-04 15:03:24 +00:00

CWE-532

Merge remote-tracking branch 'origin/main' into fix/sensitive-log-hash-sanitizer

2026-04-29 20:59:59 +08:00

CWE-552

…

CWE-601/semmle/tests

…

CWE-611

Java: Add XXE sink model for Woodstox WstxInputFactory

2026-04-17 18:46:51 +04:00

CWE-643

…

CWE-676/semmle/tests

Java: Pin CWE-676 test to --release 25

2026-04-07 09:28:22 +02:00

CWE-681/semmle/tests

…

CWE-730

…

CWE-732/semmle/tests

…

CWE-749

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-780

…

CWE-798/semmle/tests

Update java/ql/test/query-tests/security/CWE-798/semmle/tests/HardcodedCouchBaseCredentials.java

2026-01-14 11:50:52 +01:00

CWE-807/semmle/tests

[TEST] Java: ConditionalBypass: convert to qlref

2025-07-17 18:59:03 +02:00

CWE-829/semmle/tests

…

CWE-833/semmle/tests

…

CWE-835/semmle/tests

…

CWE-917

…

CWE-918

Update models in test output

2026-03-05 13:32:52 +00:00

CWE-925

…

CWE-926

…

CWE-927

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-940

…

CWE-1004

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

CWE-1104/semmle/tests

…

CWE-1204

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00