Tony Torralba b58eb3a92c Java: Add TemplateEngine.createTemplate as a groovy injection sink

2023-05-19 17:45:47 +02:00

..

CWE-020

rename query to overly-large-range, and rewrite the @description

2022-07-12 16:02:46 +02:00

CWE-022/semmle/tests

Fix FileCopyUtils models

2023-04-24 15:07:19 +02:00

CWE-023/semmle/tests

Fix partial path traversal Java example Again

2023-03-31 23:36:07 -04:00

CWE-074

Refactor to DataFlow::Global

2023-03-24 10:04:46 -04:00

CWE-078

Java: Update expected output.

2023-04-26 14:45:40 +02:00

CWE-079/semmle/tests

Refactor XSS and SpringJDBC tests to lib configurations

2023-04-17 23:48:06 -04:00

CWE-089/semmle/examples

Apply @jcogs33's suggestions from code review

2023-05-18 08:51:19 +02:00

CWE-090

get a few more queries in sync with other languages

2022-10-01 11:17:48 +02:00

CWE-094

Java: Add TemplateEngine.createTemplate as a groovy injection sink

2023-05-19 17:45:47 +02:00

CWE-113/semmle/tests

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-117

Address review comment

2023-04-17 09:33:44 +02:00

CWE-129/semmle/tests

Java: undo changes to tests that were affected by numeric-flow summary models

2023-01-11 22:34:19 -05:00

CWE-134/semmle/tests

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-190/semmle/tests

Java: Update one more expected output.

2023-04-27 12:00:32 +02:00

CWE-200/semmle/tests

Rename files to say "Allow" instead of "Permit"

2023-01-09 10:11:03 -05:00

CWE-209/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-266

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-273

Refactor UnsafeCertTrustQuery

2023-03-29 22:33:08 -04:00

CWE-295

Refactor InsecureTrustManager

2023-03-29 22:33:09 -04:00

CWE-297

spelling: across

2022-10-11 00:23:35 -04:00

CWE-311

Fix stubs and test expectations

2023-03-15 11:33:02 +01:00

CWE-312/android

Updated expectations file with new message

2022-09-09 11:35:48 -04:00

CWE-326

Refactor InsufficientKeySize

2023-03-29 22:33:09 -04:00

CWE-327/semmle/tests

Java: Address feedback and fix test failures

2021-09-16 14:10:48 +01:00

CWE-335/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-338/semmle/tests

Update JHipster CodeQL query from code review

2020-10-01 15:38:56 -04:00

CWE-347

Refactor MissingJWTSignatureCheck

2023-03-29 22:33:09 -04:00

CWE-367/semmle/tests

update two more queries to better follow the style-guide

2022-10-01 10:59:59 +02:00

CWE-421/semmle

Java: fix javac errors in test code

2021-02-09 09:16:57 -05:00

CWE-441

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-470

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-489

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-502

Refactor CWE-502/UnsafeDeserialization

2023-03-29 22:33:08 -04:00

CWE-522

Refactor InsecureBasicAuth

2023-03-29 22:33:09 -04:00

CWE-524

Java: Update test expectations

2023-02-17 15:20:21 +01:00

CWE-532

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-601/semmle/tests

org.kohsuke.stapler.model tests

2023-03-15 14:36:45 +01:00

CWE-611

Merge branch 'main' into atorralba/java/promote-xxe-experimental-sinks

2023-05-16 09:49:34 +02:00

CWE-643

Privacy markers and fixed imports

2023-05-04 10:25:17 -04:00

CWE-676/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-681/semmle/tests

Java: undo changes to tests that were affected by numeric-flow summary models

2023-01-11 22:34:19 -05:00

CWE-730

Refactor to DataFlow::Global

2023-03-24 10:04:46 -04:00

CWE-732/semmle/tests

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-749

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-780

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-798/semmle/tests

flow(_, sink) to flowTo(sink)

2023-04-13 23:06:16 -04:00

CWE-807/semmle/tests

Refactor ConditionalBypass

2023-03-29 22:33:08 -04:00

CWE-829/semmle/tests

Handle disabled Maven repositories

2022-11-21 10:11:57 +01:00

CWE-833/semmle/tests

Java: accept changes in expected output

2021-02-09 09:17:35 -05:00

CWE-835/semmle/tests

Java: Adjust toString() for statements

2021-06-03 16:27:36 +02:00

CWE-917

Refactor to DataFlow::Global

2023-03-24 10:04:46 -04:00

CWE-918

Java: update options file

2023-04-13 09:57:44 -04:00

CWE-925

Remove checks for dynamically registered recievers

2022-06-14 14:56:24 +01:00

CWE-926

Java: Update test expectations

2023-02-17 15:20:21 +01:00

CWE-927

Fix SensitiveResultReceiver test case

2023-04-13 23:06:16 -04:00

CWE-940

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-1104/semmle/tests

Fix typo in test output

2021-02-22 13:26:51 -05:00

CWE-1204

Refactor StaticInitializationVector

2023-03-29 22:33:09 -04:00