hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2025-12-24 12:46:34 +01:00
Code Issues Packages Projects Releases Wiki Activity
Files
a07be192fa30cacd85bbd7e49355fb90d2fe8998
codeql/java/ql/test/stubs
History
Chris Smowton 0a7350f3bf Merge pull request #10041 from smowton/AddSensitiveApiCalls 
Java: support more libraries in hardcoded-credentials queries
2022-08-23 10:51:04 +01:00
..
akka-2.6.x/akka/util
…
amazon-aws-sdk-1.11.700
…
amqp-client-5.12.0/com/rabbitmq/client
Consider setSslContextFactory and fix tests
2022-01-19 16:43:01 +01:00
android
…
apache-commons-codec-1.14
…
apache-commons-collections4-4.4/org
…
apache-commons-digester3-3.2/org/apache/commons/digester3
…
apache-commons-email-1.6.0
…
apache-commons-fileupload-1.4/org/apache/commons/fileupload2
Use value step to optimize the taint step and add a test case for Apache file upload listener
2021-11-23 17:15:28 +00:00
apache-commons-io-2.6
Make reporting locations consistent with PathCreation; add test
2022-08-03 10:42:09 +01:00
apache-commons-jexl-2.1.1/org/apache/commons/jexl2
…
apache-commons-jexl-3.1/org/apache/commons/jexl3
…
apache-commons-lang3-3.7
Review fixup and add test for apache SystemUtils
2022-03-02 12:50:38 -05:00
apache-commons-logging-1.2/org/apache/commons/logging
Add stubs & tests
2021-11-03 17:26:13 +01:00
apache-commons-net-3.8.0/org/apache/commons/net
Add stubs and tests for new hardcoded-credential sinks
2022-08-13 12:39:15 +01:00
apache-commons-text-1.9/org/apache/commons/text
…
apache-http-4.4.13/org/apache/http
…
apache-http-5/org/apache/hc/core5
…
apache-ldap-1.0.2/org/apache/directory
…
apache-log4j-1.2.17/org/apache/log4j
Add stubs & tests
2021-11-03 17:26:13 +01:00
apache-log4j-2.14.1
Sinks for CloseableThreadContext
2021-12-17 09:17:04 +01:00
apache-mina-sshd-2.8.0/org
Add stubs and tests for new hardcoded-credential sinks
2022-08-13 12:39:15 +01:00
auth0-jwt-2.3/com/auth0/jwt
Query to detect hardcoded JWT secret keys
2022-05-04 23:09:48 +00:00
azure-sdk-for-java/com/azure
…
bsh-2.0b5/bsh
…
castor-1.4.1/org/exolab/castor
…
commons-exec-1.3/org/apache/commons/exec
…
dom4j-2.1.1/org/dom4j
…
ejb-3.2/javax
…
esapi-2.0.1/org/owasp/esapi
…
fastjson-1.2.74/com/alibaba/fastjson
…
flexjson-2.1/flexjson
…
flogger-0.7.1/com/google/common/flogger
Add stubs & tests
2021-11-03 17:26:13 +01:00
ganymed-ssh-2-260/ch/ethz/ssh2
Add stubs and tests for new hardcoded-credential sinks
2022-08-13 12:39:15 +01:00
google-android-9.0.0
Fix Fragment tests after androidx stubs update
2022-08-22 11:13:19 +02:00
groovy-all-3.0.7
…
gson-2.8.6/com/google/gson
…
guava-30.0
Add test cases for PolynomialRedos dataflow logic; make fixes
2022-05-04 15:41:35 +01:00
guice-4.2.2/com/google/inject
…
guice-servlet-4.2.2/com/google/inject/servlet
…
hamcrest-2.2
…
hessian-4.0.38/com/caucho
…
HikariCP-3.4.5/com/zaxxer/hikari
Java: Add JDBC connection SSRF sinks
2022-03-12 16:35:32 +04:00
j2objc
…
j2ssh-1.5.5/com/sshtools/j2ssh/authentication
Add stubs and tests for new hardcoded-credential sinks
2022-08-13 12:39:15 +01:00
jabsorb-1.3.2/org/jabsorb
…
jackson-core-2.12/com/fasterxml/jackson/core
…
jackson-databind-2.12
…
jakarta-json-2.0.1/jakarta/json
…
jakarta-mail-2.0.1/jakarta/mail
…
java-ee-el/javax/el
…
javamail-api-1.6.2
…
javax-faces-2.3/javax/faces
…
javax-json-api-1.1.4/javax/json
…
javax-servlet-2.5/javax/servlet
…
javax-ws-rs-api-2.1.1/javax/ws/rs
…
javax-ws-rs-api-3.0.0/jakarta/ws/rs
…
jaxb-api-2.3.1/javax/xml/bind
…
jaxen-1.2.0/org/jaxen
…
jaxws-api-2.0
…
jboss-logging-3.4.2/org/jboss/logging
Add stubs & tests
2021-11-03 17:26:13 +01:00
jboss-vfs-3.2/org/jboss/vfs
Add more test cases
2022-04-29 02:31:43 +00:00
jdbi3-core-3.27.2/org/jdbi/v3/core
Java: Add JDBC connection SSRF sinks
2022-03-12 16:35:32 +04:00
jdom-1.1.3/org/jdom
…
jfinal-4.9.15/com/jfinal
Correct the data model and update qldoc
2022-02-08 04:02:27 +00:00
jms-api-1/javax/jms
Added sources and steps for JMS API
2022-04-26 13:34:21 +01:00
joddjson-6.0.3/jodd/json
…
jsch-0.1.55/com/jcraft/jsch
Add stubs and tests for new hardcoded-credential sinks
2022-08-13 12:39:15 +01:00
json-io-4.10.0/com/cedarsoftware/util/io
…
json-java-20210307/org/json
…
jsr181-api
…
jsr223-api/javax/script
…
jsr311-api-1.1.1/javax/ws/rs
…
juel-2.2/de/odysseus/el
…
junit-4.11/org/junit
…
junit-jupiter-api-5.2.0
[Java]: Add precondition support for testing library asserts
2022-03-18 20:39:24 -04:00
jwtk-jjwt-0.11.2
…
jyaml-1.3/org/ho/yaml
…
jython-2.7.2/org/python
…
kryo-4.0.2/com/esotericsoftware/kryo
…
mongodbClient
Remove non-ascii char
2022-08-15 12:08:14 +01:00
mvel2-2.4.7/org/mvel2
…
netty-4.1.x
…
ognl-3.2.14/ognl
…
okhttp-4.9.3
Add models for OkHttp and Retrofit
2022-05-02 15:42:15 +02:00
org.mybatis-3.5.4/org/apache/ibatis
Add tests
2022-03-14 21:31:51 +01:00
playframework-2.6.x/play
…
postgresql-42.3.3/org/postgresql
Java: Add JDBC connection SSRF sinks
2022-03-12 16:35:32 +04:00
projectreactor-3.4.3/reactor/core/publisher
…
rabbitmq-4.12.0/com/rabbitmq/client
Removed non-ASCII characters
2022-04-26 13:34:24 +01:00
ratpack-1.9.x
Java: Ratpack HTTP Framework Additional Modeling
2021-11-25 12:55:32 -05:00
retrofit-2.9.0
Add models for OkHttp and Retrofit
2022-05-02 15:42:15 +02:00
rundeck-api-java-client-13.2/org/rundeck/api/parser
…
Saxon-HE-9.9.1-7/net/sf/saxon
…
saxon-xqj-9.x
…
scijava-common-2.87.1/org/scijava/log
Add stubs & tests
2021-11-03 17:26:13 +01:00
scriptengine
…
servlet-api-2.4/javax/servlet
Query to detect unsafe request dispatcher usage
2021-12-02 04:00:29 +00:00
shiro-core-1.4.0
…
shiro-core-1.5.2/org/apache/shiro/jndi
Remove some JNDI Injection sinks
2022-01-21 17:47:15 +01:00
simple-xml-2.7.1/org/simpleframework/xml
…
slf4j-2.0.0/org/slf4j
Add stubs & tests
2021-11-03 17:26:13 +01:00
snakeyaml-1.21/org/yaml/snakeyaml
…
spring-data-commons-2.5.1/org/springframework/data
…
spring-jdbc-5.3.8/org/springframework/jdbc/datasource
Java: Add JDBC connection SSRF sinks
2022-03-12 16:35:32 +04:00
spring-ldap-2.3.2/org/springframework
Fix stubs
2022-01-24 09:34:43 +01:00
springframework-5.3.8
Add tests for SpringController
2022-04-07 18:17:50 +02:00
sshj-0.33.0
Add stubs and tests for new hardcoded-credential sinks
2022-08-13 12:39:15 +01:00
struts2-core-2.5.22/com/opensymphony/xwork2/ognl
…
trilead-ssh2-212/com/trilead/ssh2
Add stubs and tests for new hardcoded-credential sinks
2022-08-13 12:39:15 +01:00
unboundid-ldap-4.0.14/com/unboundid/ldap/sdk
…
undertow-io-2.2/io/undertow/server/handlers/resource
Add more test cases
2022-04-29 02:31:43 +00:00
validation-api-2.0.1.Final/javax/validation
…
xstream-1.4.10/com/thoughtworks/xstream
…
yamlbeans-1.09/com/esotericsoftware/yamlbeans
…
README.md
…

README.md

The stubs in this directory are derived from various open-source projects, and used to test that the relevant APIs are correctly modelled. Where a disclaimer or third-party-notice is required, this is included in the top-level directory for each particular library.