hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-26 13:46:31 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
785c21f462bcbdbbb92b65c17b2c4e896ddd6638
codeql/java/ql/test/query-tests/security
History
Chris Smowton 45c732a6f9 Java: improve naming and description of SqlUnescaped.ql 
Since the main thing it's objecting to is concatenation not lack of escaping (in particular it doesn't look for escaping sanitizers), rename and re-describe it accordingly.
2023-01-09 10:56:13 +00:00
..
CWE-020
rename query to overly-large-range, and rewrite the @description
2022-07-12 16:02:46 +02:00
CWE-022/semmle/tests
Generalize file/path taint steps
2022-10-04 12:27:01 +02:00
CWE-023/semmle/tests
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-074
Remove some JNDI Injection sinks
2022-01-21 17:47:15 +01:00
CWE-078
get a few more queries in sync with other languages
2022-10-01 11:17:48 +02:00
CWE-079/semmle/tests
Merge pull request #11282 from egregius313/egregiu313/webview-addjavascriptinterface
2022-12-19 11:28:45 -05:00
CWE-089/semmle/examples
Java: improve naming and description of SqlUnescaped.ql
2023-01-09 10:56:13 +00:00
CWE-090
get a few more queries in sync with other languages
2022-10-01 11:17:48 +02:00
CWE-094
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-113/semmle/tests
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-117
Add stubs & tests
2021-11-03 17:26:13 +01:00
CWE-129/semmle/tests
Java: update tests affected by Integer.parseInt model
2022-12-18 19:43:32 -05:00
CWE-134/semmle/tests
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-190/semmle/tests
Java: update tests affected by Integer.parseInt model
2022-12-18 19:43:32 -05:00
CWE-200/semmle/tests
Java: add negative test cases for WebView file access query
2022-11-15 13:50:31 -05:00
CWE-209/semmle/tests
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
CWE-266
Make *.xml non-executable
2022-08-24 16:53:48 +01:00
CWE-273
Decouple UnsafeCertTrust.qll to reuse the taint tracking configuration
2022-01-19 16:43:43 +01:00
CWE-295
Small simplification
2022-12-21 09:58:13 +01:00
CWE-297
spelling: across
2022-10-11 00:23:35 -04:00
CWE-311
Update Test.java
2022-12-02 18:01:10 +01:00
CWE-312/android
Updated expectations file with new message
2022-09-09 11:35:48 -04:00
CWE-326
use CompileTimeConstantExpr instead of StringLiteral
2022-10-27 17:11:07 -04:00
CWE-327/semmle/tests
Java: Address feedback and fix test failures
2021-09-16 14:10:48 +01:00
CWE-335/semmle/tests
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
CWE-338/semmle/tests
Update JHipster CodeQL query from code review
2020-10-01 15:38:56 -04:00
CWE-347
Refactor to path query
2021-08-04 13:05:18 +02:00
CWE-367/semmle/tests
update two more queries to better follow the style-guide
2022-10-01 10:59:59 +02:00
CWE-421/semmle
Java: fix javac errors in test code
2021-02-09 09:16:57 -05:00
CWE-441
Revert "Decouple from #10177"
2022-10-06 16:30:23 +02:00
CWE-470
Fix Fragment tests after androidx stubs update
2022-08-22 11:13:19 +02:00
CWE-489
Add tests
2022-09-21 13:57:29 +01:00
CWE-502
Make *.xml non-executable
2022-08-24 16:53:48 +01:00
CWE-522
Adapt InsecureBasicAuth to the previous commit
2021-09-15 17:20:28 +02:00
CWE-524
Add tests and fix issues
2022-11-16 10:54:14 +00:00
CWE-532
Stop considering usernames sensitive info
2022-05-12 11:46:52 +02:00
CWE-601/semmle/tests
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-611
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-643
Mark a MISSING test result as suggested in code review
2021-05-07 11:17:51 +02:00
CWE-676/semmle/tests
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
CWE-681/semmle/tests
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-730
Merge pull request #11070 from jcogs33/java-regex-injection
2022-11-21 15:04:26 -05:00
CWE-732/semmle/tests
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-749
Make *.xml non-executable
2022-08-24 16:53:48 +01:00
CWE-780
Use a full dataflow config rather than local flow
2022-08-17 10:35:48 +01:00
CWE-798/semmle/tests
Convert tests to inline expectations and fix one bug revealed doing so
2022-08-13 14:02:05 +01:00
CWE-807/semmle/tests
update alert-messsages of java queries
2022-09-26 12:15:25 +02:00
CWE-829/semmle/tests
Handle disabled Maven repositories
2022-11-21 10:11:57 +01:00
CWE-833/semmle/tests
Java: accept changes in expected output
2021-02-09 09:17:35 -05:00
CWE-835/semmle/tests
Java: Adjust toString() for statements
2021-06-03 16:27:36 +02:00
CWE-917
Decouple OgnlInjection.qll to reuse the taint tracking configuration
2021-07-20 17:21:10 +02:00
CWE-918
Java: Add JDBC connection SSRF sinks
2022-03-12 16:35:32 +04:00
CWE-925
Remove checks for dynamically registered recievers
2022-06-14 14:56:24 +01:00
CWE-926
Move files from CWE-276 to CWE-926
2022-10-04 10:40:34 -04:00
CWE-927
Consider taint through bitwise operations on PendingIntent flags
2022-11-22 11:39:30 +01:00
CWE-940
Fix Intent Redirection sanitizer
2022-04-29 12:19:49 +02:00
CWE-1104/semmle/tests
Fix typo in test output
2021-02-22 13:26:51 -05:00
CWE-1204
Add additional test case
2022-08-17 10:35:15 +01:00