Chris Smowton 0a7350f3bf Merge pull request #10041 from smowton/AddSensitiveApiCalls ...

Java: support more libraries in hardcoded-credentials queries

2022-08-23 10:51:04 +01:00

..

CWE-020

rename query to overly-large-range, and rewrite the @description

2022-07-12 16:02:46 +02:00

CWE-022/semmle/tests

Make reporting locations consistent with PathCreation; add test

2022-08-03 10:42:09 +01:00

CWE-023/semmle/tests

Autoformat ql

2022-08-11 09:55:46 +01:00

CWE-074

Remove some JNDI Injection sinks

2022-01-21 17:47:15 +01:00

CWE-078

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-079/semmle/tests

patch upper-case acronyms to be PascalCase

2022-03-11 11:10:33 +01:00

CWE-089/semmle/examples

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-090

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-094

Java: Update java models with provenance column information.

2022-06-20 16:20:02 +02:00

CWE-113/semmle/tests

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-117

Add stubs & tests

2021-11-03 17:26:13 +01:00

CWE-129/semmle/tests

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-134/semmle/tests

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-190/semmle/tests

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-200/semmle/tests

Add additional File taint value flow models

2022-04-26 10:42:53 -04:00

CWE-209/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-266

Add Intent URI Permission Manipulation query

2022-01-20 13:23:14 +01:00

CWE-273

Decouple UnsafeCertTrust.qll to reuse the taint tracking configuration

2022-01-19 16:43:43 +01:00

CWE-295

Fix test

2022-08-05 12:56:19 +01:00

CWE-297

Java: Fix tests.

2021-10-29 14:25:43 +02:00

CWE-311

Insecure cookie query: accept ServletRequest.isSecure(), and allow more than one possible input to a setSecure(...) call.

2022-05-11 11:59:37 +01:00

CWE-312

Merge pull request #9129 from atorralba/atorralba/get-underlying-expr

2022-07-27 11:42:28 +02:00

CWE-327/semmle/tests

Java: Address feedback and fix test failures

2021-09-16 14:10:48 +01:00

CWE-335/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-338/semmle/tests

Update JHipster CodeQL query from code review

2020-10-01 15:38:56 -04:00

CWE-347

Refactor to path query

2021-08-04 13:05:18 +02:00

CWE-367/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-421/semmle

Java: fix javac errors in test code

2021-02-09 09:16:57 -05:00

CWE-470

Fix Fragment tests after androidx stubs update

2022-08-22 11:13:19 +02:00

CWE-489

remove extraneous unit test

2022-08-15 15:50:00 -04:00

CWE-502

Fix tests disrupted by re-modelling and stubbing Android 9:

2021-10-12 12:35:05 +01:00

CWE-522

Adapt InsecureBasicAuth to the previous commit

2021-09-15 17:20:28 +02:00

CWE-532

Stop considering usernames sensitive info

2022-05-12 11:46:52 +02:00

CWE-601/semmle/tests

Dataflow: Update test expected outputs.

2021-09-07 13:02:20 +02:00

CWE-611

Update java/ql/test/query-tests/security/CWE-611/DocumentBuilderTests.java

2021-11-25 12:52:08 +00:00

CWE-643

Mark a MISSING test result as suggested in code review

2021-05-07 11:17:51 +02:00

CWE-676/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-681/semmle/tests

Merge branch 'main' into charSeqSubSeq

2021-09-09 16:04:36 +02:00

CWE-730

rename ReDoSUtil to NfaUtils, and rename the "performance" folder to "regexp"

2022-06-23 14:36:25 +02:00

CWE-732/semmle/tests

Java: fix javac errors in test code

2021-02-09 09:16:57 -05:00

CWE-749

Add Kotlin test for UnsafeAndroidAccess

2022-05-25 10:56:18 +02:00

CWE-780

Use a full dataflow config rather than local flow

2022-08-17 10:35:48 +01:00

CWE-798/semmle/tests

Convert tests to inline expectations and fix one bug revealed doing so

2022-08-13 14:02:05 +01:00

CWE-807/semmle/tests

Improve handling of the 'author' word as an exception

2021-09-16 11:57:28 +02:00

CWE-829/semmle/tests

java: fixup whitespace/tabs in test

2020-01-24 11:01:38 +01:00

CWE-833/semmle/tests

Java: accept changes in expected output

2021-02-09 09:17:35 -05:00

CWE-835/semmle/tests

Java: Adjust toString() for statements

2021-06-03 16:27:36 +02:00

CWE-917

Decouple OgnlInjection.qll to reuse the taint tracking configuration

2021-07-20 17:21:10 +02:00

CWE-918

Java: Add JDBC connection SSRF sinks

2022-03-12 16:35:32 +04:00

CWE-925

Remove checks for dynamically registered recievers

2022-06-14 14:56:24 +01:00

CWE-927

Refactor to use FlowState

2022-01-14 12:24:35 +01:00

CWE-940

Fix Intent Redirection sanitizer

2022-04-29 12:19:49 +02:00

CWE-1104/semmle/tests

Fix typo in test output

2021-02-22 13:26:51 -05:00

CWE-1204

Add additional test case

2022-08-17 10:35:15 +01:00