Owen Mansel-Chan a5d9cb179a Merge pull request #20930 from owen-mc/java/spring-rest-template-request-forgery-sinks ...

Java: add more Spring RestTemplate request forgery sinks

2026-01-15 14:23:15 +00:00

..

CWE-020

[TEST] Java: CWE-020/ExternalAPI: new test based on qhelp

2025-07-17 18:58:52 +02:00

CWE-022/semmle/tests

…

CWE-023/semmle/tests

…

CWE-074

…

CWE-078

…

CWE-079/semmle/tests

…

CWE-089/semmle/examples

Improve model for CWE-089

2026-01-13 21:48:43 +01:00

CWE-090

…

CWE-094

Java: convert ArbitraryApkInstallation test to .qlref

2025-06-26 13:22:05 +02:00

CWE-113/semmle/tests

…

CWE-117

[TEST] Java: LogInjection: convert test to qlref

2025-07-17 18:58:54 +02:00

CWE-129/semmle/tests

…

CWE-134/semmle/tests

…

CWE-190/semmle/tests

…

CWE-200/semmle/tests

Java: fix test failures cause by alert msg change

2025-07-19 13:27:09 -04:00

CWE-209/semmle/tests

…

CWE-266

…

CWE-273

[TEST] Java: UnsafeCertTrust: convert test to qlref

2025-07-17 18:58:56 +02:00

CWE-287

…

CWE-295

…

CWE-297

…

CWE-311

…

CWE-312

Java: add CleartextStorageCookie test

2025-06-24 18:12:19 +02:00

CWE-326

Java: convert InsufficientKeySize test to .qlref

2025-06-24 16:42:02 +02:00

CWE-327/semmle/tests

…

CWE-330

Java: convert InsecureRandomness test to .qlref

2025-06-24 16:42:04 +02:00

CWE-335/semmle/tests

…

CWE-338/semmle/tests

…

CWE-347

Java: convert MissingJWTSignatureCheck test to .qlref

2025-06-24 16:42:06 +02:00

CWE-352

…

CWE-367/semmle/tests

…

CWE-421/semmle

…

CWE-441

Java: convert UnsafeContentUriResolution test to .qlref

2025-06-24 16:42:08 +02:00

CWE-470

Java: convert FragmentInjection test to .qlref

2025-06-24 16:42:10 +02:00

CWE-489

Java: convert WebviewDebuggingEnabled test to .qlref

2025-06-24 16:42:12 +02:00

CWE-501

[TEST] Java: TrustBoundaryViolations: convert test to qlref

2025-07-17 18:58:59 +02:00

CWE-502

Use MaD models for unsafe deserialization sinks when possible

2025-07-16 14:42:07 +01:00

CWE-522

Java: convert CWE-522 tests to .qlref

2025-06-24 16:42:17 +02:00

CWE-524

…

CWE-532

Range library recognises long literals now

2025-11-24 14:10:54 +00:00

CWE-552

Java: convert UrlForward test to .qlref

2025-06-24 16:42:19 +02:00

CWE-601/semmle/tests

…

CWE-611

Update test expectations

2025-07-16 15:25:45 +01:00

CWE-643

Java: convert XPathInjection test to .qlref

2025-06-24 16:42:23 +02:00

CWE-676/semmle/tests

…

CWE-681/semmle/tests

…

CWE-730

Java: convert PolynomialReDoS and RegexInjection tests to .qlref

2025-06-24 16:42:26 +02:00

CWE-732/semmle/tests

…

CWE-749

…

CWE-780

Java: convert RsaWithoutOaep test to .qlref

2025-06-24 16:42:28 +02:00

CWE-798/semmle/tests

Update java/ql/test/query-tests/security/CWE-798/semmle/tests/HardcodedCouchBaseCredentials.java

2026-01-14 11:50:52 +01:00

CWE-807/semmle/tests

[TEST] Java: ConditionalBypass: convert to qlref

2025-07-17 18:59:03 +02:00

CWE-829/semmle/tests

…

CWE-833/semmle/tests

…

CWE-835/semmle/tests

…

CWE-917

Java: convert OgnlInjection test to .qlref

2025-06-24 16:42:30 +02:00

CWE-918

Merge pull request #20930 from owen-mc/java/spring-rest-template-request-forgery-sinks

2026-01-15 14:23:15 +00:00

CWE-925

Java: convert ImproperIntentVerification test to .qlref

2025-06-24 16:42:35 +02:00

CWE-926

…

CWE-927

[TEST] Java: SensitiveCommunication: convert to qlref

2025-07-17 18:59:05 +02:00

CWE-940

…

CWE-1004

Review suggestions - update comments and description

2025-10-14 16:03:40 +01:00

CWE-1104/semmle/tests

…

CWE-1204

…