Jami d889e3cf98 Merge pull request #14854 from jcogs33/jcogs33/unsafe-url-forward-promotion ...

Java: Promote Unsafe URL Forward query from experimental

2024-03-29 16:34:06 -04:00

..

CWE-020

Refactor ExternalAPIs.qll

2023-03-29 22:33:08 -04:00

CWE-022

Migrate path injection sinks to MaD

2024-01-26 12:19:54 +01:00

CWE-023

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-074

Java: fix typo in JndiInjection.qhelp

2024-02-06 15:17:30 +01:00

CWE-078

Reduce severity of java/relative-path-command

2024-02-06 15:43:19 -05:00

CWE-079

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-089

Add SqlTaintedLocalQuery

2023-05-04 10:14:59 -04:00

CWE-090

Move LdapInjectionLib to LdapInjectionQuery.qll

2023-03-29 17:59:33 -04:00

CWE-094

Move InsecureBeanValidation configuration to Query.qll

2023-03-29 17:59:33 -04:00

CWE-113

Fix typo in NettyRequestSplitting.java

2024-02-14 14:03:33 -05:00

CWE-117

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-129

Privacy markers and fixed imports

2023-05-04 10:25:17 -04:00

CWE-134

Privacy markers and fixed imports

2023-05-04 10:25:17 -04:00

CWE-190

Privacy markers and fixed imports

2023-05-04 10:25:17 -04:00

CWE-200

Remove period from 'name'

2024-02-22 10:50:45 +00:00

CWE-209

Privacy markers and fixed imports

2023-05-04 10:25:17 -04:00

CWE-266

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-273

Refactor UnsafeCertTrustQuery

2023-03-29 22:33:08 -04:00

CWE-287

Apply suggestions from documentation review

2024-02-22 10:11:49 +00:00

CWE-295

Refactor InsecureTrustManager

2023-03-29 22:33:09 -04:00

CWE-297

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-312

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-319

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-326

Refactor InsufficientKeySize

2023-03-29 22:33:09 -04:00

CWE-327

Java: Generelize MaybeBrokenCryptoAlgorithmQuery.qll

2023-12-22 10:15:40 +01:00

CWE-330

Docs review suggestions

2023-12-11 11:18:40 -05:00

CWE-335

Mass rename L/RValue -> VarWrite/Read

2023-10-24 10:58:29 +01:00

CWE-338

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-347

Java: Further alert message improvement

2023-09-18 12:25:31 +02:00

CWE-352

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-367

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-421

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-441

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-470

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-489

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-501

Apply docs review suggestions

2023-08-17 13:05:38 -04:00

CWE-502

Java: Add JMS sink to java/unsafe-deserialization

2023-10-26 16:46:19 +02:00

CWE-522

Refactor InsecureBasicAuth

2023-03-29 22:33:09 -04:00

CWE-524

Apply suggestion from docs review

2022-11-16 10:54:14 +00:00

CWE-532

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-552

docs wording updates

2024-03-28 16:15:05 -04:00

CWE-601

fix typo

2024-03-13 22:37:13 +01:00

CWE-611

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-614

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-643

Add XPathInjectionQuery

2023-05-04 10:14:59 -04:00

CWE-676

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-681

Add NumericCastTaintedQuery

2023-05-04 10:25:13 -04:00

CWE-730

Update dead link.

2023-11-07 09:26:07 +00:00

CWE-732

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-749

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-780

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-798

Add aliases for public, importable renamed classes and predicates.

2023-10-24 10:54:35 +01:00

CWE-807

Autoformat

2023-10-24 11:06:19 +01:00

CWE-829

Handle disabled Maven repositories

2022-11-21 10:11:57 +01:00

CWE-833

Autoformat

2023-10-24 11:06:19 +01:00

CWE-835

Java: Make JumpStmt a proper superclass

2022-03-30 00:30:27 +02:00

CWE-917

Refactor to DataFlow::Global

2023-03-24 10:04:46 -04:00

CWE-918

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-925

spelling: receiver

2022-10-12 04:40:26 -04:00

CWE-926

Reword first sentence of documentation

2022-10-11 11:02:37 -04:00

CWE-927

Deprecate sensitiveResultReceiver

2023-04-13 23:06:16 -04:00

CWE-940

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-1104

rename existing getUrl predicate to getRepositoryUrl

2022-04-06 15:32:33 +02:00

CWE-1204

Refactor StaticInitializationVector

2023-03-29 22:33:09 -04:00