hohn/codeql
1
0
Fork 0
mirror of https://github.com/github/codeql.git synced 2026-04-24 08:15:14 +02:00
Code Issues Packages Projects Releases Wiki Activity
Files
af0f361ac8af79120b38af2da4ef1293f3f9637a
codeql/java/ql/test/stubs
History
Artem Smotrakov af0f361ac8 Updated JexlInjection.ql to check for sandboxes 
- Added a dataflow config to track setting a sandbox
  on JexlBuilder
- Added SandboxedJexl3.java test
2021-02-10 22:19:45 +01:00
..
amazon-aws-sdk-1.11.700
Hardcoded AWS credentials
2020-06-17 02:46:02 +00:00
android/android
Java: add stubs for some android database classes
2020-09-30 12:33:33 +02:00
apache-commons-codec-1.14
Add test case
2020-04-28 11:26:43 +02:00
apache-commons-email-1.6.0
Add all dependent class stubs
2020-06-09 20:12:05 +00:00
apache-commons-io-2.6
Java: Add LICENSE.txt
2020-02-05 09:38:16 +01:00
apache-commons-jexl-2.1.1/org/apache/commons/jexl2
Java: Query for detecting JEXL injections
2021-01-17 14:19:26 +01:00
apache-commons-jexl-3.1/org/apache/commons/jexl3
Updated JexlInjection.ql to check for sandboxes
2021-02-10 22:19:45 +01:00
apache-commons-lang3-3.7
Java: QL Query Detector for JHipster Generated CVE-2019-16303
2020-09-21 18:46:13 -04:00
apache-http-4.4.13/org/apache/http
Enhance the query
2020-07-27 18:50:47 +00:00
apache-ldap-1.0.2/org/apache/directory
Java: Adjust stubs and unit test.
2020-01-30 11:27:33 +01:00
commons-exec-1.3/org/apache/commons/exec
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
dom4j-2.1.1/org/dom4j
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
esapi-2.0.1/org/owasp/esapi
Java: Adjust stubs and unit test.
2020-01-30 11:27:33 +01:00
fastjson-1.2.74/com/alibaba/fastjson
Java: Adjust reference to static method and add test.
2020-11-16 11:47:58 +01:00
google-android-9.0.0
Query for cleartext storage using Android SharedPreferences
2020-11-16 17:23:01 +00:00
guava-30.0/com/google/common/base
Java: Update Guava version in test stubs and change note
2020-10-19 11:56:28 +01:00
guice-4.2.2/com/google/inject
Java: add test for Guice framework support
2019-02-15 20:01:08 -05:00
guice-servlet-4.2.2/com/google/inject/servlet
Java: add test for Guice framework support
2019-02-15 20:01:08 -05:00
hamcrest-2.2
Java: Respect Hamcrest assertThat(X, notNullValue())
2019-10-29 17:52:13 +00:00
j2objc
Add j2objc license
2019-08-17 16:31:18 +01:00
jackson-databind-2.10
Java: Add tests for Jackson taint steps.
2020-03-24 12:59:24 -07:00
javamail-api-1.6.2
Add all dependent class stubs
2020-06-09 20:12:05 +00:00
jdom-1.1.3/org/jdom
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
jsr223-api/javax/script
Java: Added JSR 223 sinks for MVEL injections
2020-06-05 17:17:43 +03:00
jsr311-api-1.1.1/javax/ws/rs
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
junit-4.11/org/junit
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
junit-jupiter-api-5.2.0
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
kryo-4.0.2/com/esotericsoftware/kryo
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
mongodbClient
Java : add MongoDB injection sinks
2020-08-31 02:24:23 +05:30
mvel2-2.4.7/org/mvel2
Java: Added MVELRuntime.execute() sink for MVEL injections
2020-06-05 17:17:43 +03:00
servlet-api-2.4/javax/servlet
Merge pull request #3839 from luchua-bc/uncaught-servlet-exception
2020-12-02 15:12:59 +01:00
shiro-core-1.4.0
Add Apache Shiro third-party notice
2019-08-17 16:31:18 +01:00
simple-xml-2.7.1/org/simpleframework/xml
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
snakeyaml-1.21/org/yaml/snakeyaml
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
spring-ldap-2.3.2/org/springframework/ldap
Java: Consolidate spring-ldap-2.3.2 stubs.
2020-07-08 10:08:44 +02:00
springframework-5.2.3
Java: Added a source and a taint step for JexlInjectionConfig
2021-01-17 22:28:42 +01:00
unboundid-ldap-4.0.14/com/unboundid/ldap/sdk
Java: Adjust stubs and unit test.
2020-01-30 11:27:33 +01:00
validation-api-2.0.1.Final/javax/validation
remove compiled classes from stubs
2020-10-27 15:56:26 +01:00
xstream-1.4.10/com/thoughtworks/xstream
Migrate Java code to separate QL repo.
2018-08-30 10:48:05 +01:00
README.md
Add Java stubs readme
2019-08-17 18:57:50 +01:00

README.md

The stubs in this directory are derived from various open-source projects, and used to test that the relevant APIs are correctly modelled. Where a disclaimer or third-party-notice is required, this is included in the top-level directory for each particular library.