Jami 029e1d47fe Merge pull request #12081 from jcogs33/jcogs33/update-some-Files-sinks ...

Java: update `createTempDirectory` and `copy` "create-file" sinks

2023-02-14 10:53:17 -05:00

..

CWE-020

port the Java regex/redos queries to use the shared pack

2022-11-14 21:29:41 +01:00

CWE-022

Java: update path-injection query to use new 'read-file' sink kind

2023-02-11 17:10:58 -05:00

CWE-023

Fix partial path traversal Java example

2023-01-16 21:14:29 +01:00

CWE-074

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-078

get a few more queries in sync with other languages

2022-10-01 11:17:48 +02:00

CWE-079

Fix new Android queries' IDs

2022-12-21 09:36:57 +01:00

CWE-089

Replace one more mention of escaping

2023-01-09 10:56:13 +00:00

CWE-090

get a few more queries in sync with other languages

2022-10-01 11:17:48 +02:00

CWE-094

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-113

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-117

make a few more queries consistent with the other languages

2022-10-02 22:38:25 +02:00

CWE-129

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-134

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-190

Java: Sync files and update other relavant files related to the new naming of shift.

2023-01-12 19:06:29 +01:00

CWE-200

Rename files to say "Allow" instead of "Permit"

2023-01-09 10:11:03 -05:00

CWE-209

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-266

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-273

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-295

Update java/ql/src/Security/CWE/CWE-295/AndroidMissingCertificatePinning1.java

2022-12-19 18:11:54 +01:00

CWE-297

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-312

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-319

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-326

remove unnecessary 'exists'

2022-10-20 23:52:31 -04:00

CWE-327

Fix small typo in good/bad code sample.

2023-01-13 19:16:11 -06:00

CWE-335

Java: Add cwe-377 tag to predictable-seed

2022-05-03 12:28:14 +01:00

CWE-338

add all remaining explicit this

2021-11-26 13:50:10 +01:00

CWE-347

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-352

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-367

update two more queries to better follow the style-guide

2022-10-01 10:59:59 +02:00

CWE-421

Update security-severity scores

2021-06-15 13:25:17 +01:00

CWE-441

Apply suggestions from code review

2022-10-17 14:14:38 +02:00

CWE-470

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-489

Remove 'here'.

2022-09-26 13:36:14 +01:00

CWE-502

Spelling

2023-01-12 17:46:00 +00:00

CWE-522

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-524

Apply suggestion from docs review

2022-11-16 10:54:14 +00:00

CWE-532

Add security severity

2022-03-15 10:42:41 +00:00

CWE-601

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-611

Further refactoring

2023-02-13 09:18:05 +01:00

CWE-614

Update InsecureCookie.ql

2022-12-05 12:55:53 +01:00

CWE-643

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-676

Add security-severity metadata

2021-06-10 20:11:08 +01:00

CWE-681

Java: Sync files and update other relavant files related to the new naming of shift.

2023-01-12 19:06:29 +01:00

CWE-730

Merge pull request #11070 from jcogs33/java-regex-injection

2022-11-21 15:04:26 -05:00

CWE-732

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-749

Add missing security-severity scores

2022-03-14 09:50:14 +01:00

CWE-780

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-798

Convert tests to inline expectations and fix one bug revealed doing so

2022-08-13 14:02:05 +01:00

CWE-807

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-829

Handle disabled Maven repositories

2022-11-21 10:11:57 +01:00

CWE-833

Java: Performance tweaks

2022-02-21 17:05:00 +00:00

CWE-835

Java: Make JumpStmt a proper superclass

2022-03-30 00:30:27 +02:00

CWE-917

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-918

make a few more queries consistent with the other languages

2022-10-02 22:38:25 +02:00

CWE-925

spelling: receiver

2022-10-12 04:40:26 -04:00

CWE-926

Reword first sentence of documentation

2022-10-11 11:02:37 -04:00

CWE-927

Update java/ql/src/Security/CWE/CWE-927/SensitiveResultReceiver.ql

2023-02-01 15:26:26 +01:00

CWE-940

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-1104

rename existing getUrl predicate to getRepositoryUrl

2022-04-06 15:32:33 +02:00

CWE-1204

Apply doc suggestions

2022-08-17 10:35:16 +01:00