Owen Mansel-Chan 883301938b Merge pull request #18161 from owen-mc/java/weak-crypto-algo-more-informative ...

Java: Make `java/weak-cryptographic-algorithm` give  a reason why the algo is insecure

2025-01-13 23:43:04 +00:00

..

CWE-020

Refactor ExternalAPIs.qll

2023-03-29 22:33:08 -04:00

CWE-022

delete imports to a deleted file

2024-09-03 20:31:00 +02:00

CWE-023

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-074

Java: fix typo in JndiInjection.qhelp

2024-02-06 15:17:30 +01:00

CWE-078

Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.

2024-05-01 13:07:20 +02:00

CWE-079

Java: Deprecate the content of XssLocalQuery and remove the Xss local query variant.

2024-05-01 08:59:50 +02:00

CWE-089

Java: Deprecate the content of SqlTaintedLocalQuery and remove the local query variant.

2024-05-01 13:07:21 +02:00

CWE-090

Move LdapInjectionLib to LdapInjectionQuery.qll

2023-03-29 17:59:33 -04:00

CWE-094

Move InsecureBeanValidation configuration to Query.qll

2023-03-29 17:59:33 -04:00

CWE-113

Java: Deprecate the content of ResponseSplittingLocalQuery and remove local query variant.

2024-05-01 13:07:21 +02:00

CWE-117

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-129

Java: Deprecate the content of ImproperValidationOrArray and remove local query variants.

2024-05-01 13:07:21 +02:00

CWE-134

Java: Deprecate the content of ExternallyControlledFormatStringLocalQuery and remove the externally controlled format string local query variant.

2024-05-01 13:07:21 +02:00

CWE-190

Merge pull request #16362 from michaelnebel/java/removelocalqueries

2024-05-16 14:34:04 +02:00

CWE-200

Remove period from 'name'

2024-02-22 10:50:45 +00:00

CWE-209

Minor changes to formulations for java/error-message-exposure

2024-07-29 16:48:15 +02:00

CWE-266

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-273

Refactor UnsafeCertTrustQuery

2023-03-29 22:33:08 -04:00

CWE-287

Apply suggestions from documentation review

2024-02-22 10:11:49 +00:00

CWE-295

Java: Deprecate RefType.nestedName(), and add RefType.getNestedName()

2024-09-16 17:16:25 +01:00

CWE-297

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-312

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-319

Java: Tag java/non-https-url with CWE-345

2024-07-11 13:37:09 +01:00

CWE-326

Refactor InsufficientKeySize

2023-03-29 22:33:09 -04:00

CWE-327

Give reason why crypto algorithm is insecure

2024-11-29 11:54:27 +00:00

CWE-330

Docs review suggestions

2023-12-11 11:18:40 -05:00

CWE-335

Mass rename L/RValue -> VarWrite/Read

2023-10-24 10:58:29 +01:00

CWE-338

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-347

Java: Further alert message improvement

2023-09-18 12:25:31 +02:00

CWE-352

Java: remove unnecessary anchor and update page name

2024-10-18 09:26:56 -04:00

CWE-367

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-421

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-441

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-470

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-489

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-501

Switch source and sink in TrustBoundaryViolation.ql

2024-05-23 15:53:12 +02:00

CWE-502

Java: Add JMS sink to java/unsafe-deserialization

2023-10-26 16:46:19 +02:00

CWE-522

Refactor InsecureBasicAuth

2023-03-29 22:33:09 -04:00

CWE-524

Apply suggestion from docs review

2022-11-16 10:54:14 +00:00

CWE-532

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-552

docs wording updates

2024-03-28 16:15:05 -04:00

CWE-601

Java: Deprecate the local content of UrlRedirectLocalQuery and remove the local query variant.

2024-05-01 13:07:21 +02:00

CWE-611

Java: Reword recommendation section of XXE query

2024-05-22 11:34:19 +02:00

CWE-614

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-643

Add XPathInjectionQuery

2023-05-04 10:14:59 -04:00

CWE-676

Java: Clean up some instances of getQualifiedName.

2024-05-13 13:06:44 +02:00

CWE-681

Java: Deprecate the content of NumericCastTaintedLocalQuery, remove the local query variant and update the non-local query variant.

2024-05-01 13:07:21 +02:00

CWE-730

Update dead link.

2023-11-07 09:26:07 +00:00

CWE-732

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-749

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-780

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-798

Add aliases for public, importable renamed classes and predicates.

2023-10-24 10:54:35 +01:00

CWE-807

Autoformat

2023-10-24 11:06:19 +01:00

CWE-829

Handle disabled Maven repositories

2022-11-21 10:11:57 +01:00

CWE-833

Java: IPA the CFG

2024-12-10 15:26:11 +00:00

CWE-835

Java: Make JumpStmt a proper superclass

2022-03-30 00:30:27 +02:00

CWE-917

Refactor to DataFlow::Global

2023-03-24 10:04:46 -04:00

CWE-918

Java: Rename references.

2023-03-23 13:06:19 +01:00

CWE-925

spelling: receiver

2022-10-12 04:40:26 -04:00

CWE-926

Reword first sentence of documentation

2022-10-11 11:02:37 -04:00

CWE-927

Deprecate sensitiveResultReceiver

2023-04-13 23:06:16 -04:00

CWE-940

Update to DataFlow::Global

2023-03-24 09:54:53 -04:00

CWE-1104

rename existing getUrl predicate to getRepositoryUrl

2022-04-06 15:32:33 +02:00

CWE-1204

Refactor StaticInitializationVector

2023-03-29 22:33:09 -04:00