Mauro Baluda d335f039ef Improve model for CWE-089

2026-01-13 21:48:43 +01:00

..

CONSISTENCY

Java: Accept consistency failure.

2024-11-26 13:25:44 +01:00

mad

Fix Apache Commons HTTP Client and SQL Injection tests

2023-03-13 09:36:53 +01:00

AllowListSanitizerWithJavaUtilList.java

Java: Adjust expected output.

2024-11-26 13:25:44 +01:00

AllowListSanitizerWithJavaUtilSet.java

Java: Adjust expected output.

2024-11-26 13:25:44 +01:00

controlledString.expected

Include switch and instanceof binding in Variable.getAnAssignedValue, and test via endsInQuote

2023-11-30 11:24:05 +00:00

controlledString.ql

Java: Adjust a few qltests.

2020-09-01 12:49:09 +02:00

CouchBase.java

Improve model for CWE-089

2026-01-13 21:48:43 +01:00

endsInQuote.expected

Include switch and instanceof binding in Variable.getAnAssignedValue, and test via endsInQuote

2023-11-30 11:24:05 +00:00

endsInQuote.ql

Java: Adjust a few qltests.

2020-09-01 12:49:09 +02:00

getAnAppend.expected

Java: Add missing SQL query APIs.

2019-08-30 10:40:49 +01:00

getAnAppend.ql

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

getToStringCall.expected

Java: Add missing SQL query APIs.

2019-08-30 10:40:49 +01:00

getToStringCall.ql

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

JakartaPersistence.java

Add basic test for SQL injection vs Jakarta Persistence

2025-04-01 17:13:23 +01:00

Mongo.java

Java : add MongoDB injection sinks

2020-08-31 02:24:23 +05:30

options

SQLi test case

2025-12-24 20:30:21 +01:00

sbQuery.expected

Java: Add missing SQL query APIs.

2019-08-30 10:40:49 +01:00

sbQuery.ql

Java: improve naming and description of SqlUnescaped.ql

2023-01-09 10:56:13 +00:00

springjdbc.expected

Java: Update expected test results

2024-12-03 19:18:59 +01:00

SpringJdbc.java

Apply @jcogs33's suggestions from code review

2023-05-18 08:51:19 +02:00

springjdbc.ql

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

SqlConcatenated.expected

Java: Cherry-pick test from https://github.com/github/codeql/pull/17051

2024-11-26 13:25:43 +01:00

SqlConcatenated.qlref

Java: improve naming and description of SqlUnescaped.ql

2023-01-09 10:56:13 +00:00

SqlTainted.expected

Improve model for CWE-089

2026-01-13 21:48:43 +01:00

SqlTainted.ext.yml

Java: Deprecate the content of SqlTaintedLocalQuery and remove the local query variant.

2024-05-01 13:07:21 +02:00

SqlTainted.qlref

Java: Update all test util paths to point to the new location.

2024-12-12 13:21:25 +01:00

taintedString.expected

Include switch and instanceof binding in Variable.getAnAssignedValue, and test via endsInQuote

2023-11-30 11:24:05 +00:00

taintedString.ql

Refactor taintedString.ql test

2023-04-13 23:06:16 -04:00

Test.java

Include switch and instanceof binding in Variable.getAnAssignedValue, and test via endsInQuote

2023-11-30 11:24:05 +00:00

ValidatedVariable.expected

Java: Add missing SQL query APIs.

2019-08-30 10:40:49 +01:00

ValidatedVariable.ql

Java: Replace ValidatedVariable with guarded accesses.

2019-05-20 16:46:11 +02:00

Validation.java

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

validationMethod.expected

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

validationMethod.ql

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00