Owen Mansel-Chan 066db766ef Merge pull request #18153 from owen-mc/java/resttemplate-getforobject ...

Java: add SSRF sink model for the third parameter of `RestTemplate.getForObject`

2024-12-11 16:37:35 +00:00

..

CWE-020

rename query to overly-large-range, and rewrite the @description

2022-07-12 16:02:46 +02:00

CWE-022/semmle/tests

Java: add File.getName as a path injection sanitizer

2024-12-04 18:57:51 -05:00

CWE-023/semmle/tests

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-074

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-078

Update expected test output

2024-09-24 14:21:38 +02:00

CWE-079/semmle/tests

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-089/semmle/examples

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-090

Update expected test output

2024-11-04 12:07:06 +01:00

CWE-094

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-113/semmle/tests

Update expected test output

2024-11-04 12:07:06 +01:00

CWE-117

Mass-rename MethodAccess -> MethodCall

2023-10-24 10:30:26 +01:00

CWE-129/semmle/tests

Java: use post-process provenance pretty-printing in query-tests

2024-07-28 18:12:17 -04:00

CWE-134/semmle/tests

Update expected test output

2024-09-18 13:51:02 +02:00

CWE-190/semmle/tests

Java: use post-process provenance pretty-printing in query-tests

2024-07-28 18:12:17 -04:00

CWE-200/semmle/tests

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-209/semmle/tests

Now alerts about exposing exception.getMessage() in servlet responses are split out of java/stack-trace-exposure into its own alert java/error-message-exposure because this is a better fit.

2024-07-25 18:12:45 +02:00

CWE-266

Consolidate all InlineFlowTest libraries in the dataflow qlpack

2023-08-24 21:38:46 +02:00

CWE-273

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-287

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-295

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-297

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-311

Update expected test output

2024-09-18 13:51:02 +02:00

CWE-312/android

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-326

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-327/semmle/tests

Java: add SHA384 to list of secure algorithms

2024-11-25 09:27:53 -05:00

CWE-330

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-335/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-338/semmle/tests

Update JHipster CodeQL query from code review

2020-10-01 15:38:56 -04:00

CWE-347

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-352

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-367/semmle/tests

update two more queries to better follow the style-guide

2022-10-01 10:59:59 +02:00

CWE-421/semmle

Java: fix javac errors in test code

2021-02-09 09:16:57 -05:00

CWE-441

Consolidate all InlineFlowTest libraries in the dataflow qlpack

2023-08-24 21:38:46 +02:00

CWE-470

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-489

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-501

Consolidate all InlineFlowTest libraries in the dataflow qlpack

2023-08-24 21:38:46 +02:00

CWE-502

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-522

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-524

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-532

Add "tokenizer" to sensitive variable name FPs

2024-07-30 15:38:32 +01:00

CWE-552

Java: use InlineFlowTest instead of InlineExpectationsTest

2024-03-27 08:44:17 -04:00

CWE-601/semmle/tests

Update expected test output

2024-11-04 12:07:06 +01:00

CWE-611

Java: Add missing flow step for ThreadLocal.initialValue.

2023-09-22 13:33:45 +02:00

CWE-643

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-676/semmle/tests

Migrate Java code to separate QL repo.

2018-08-30 10:48:05 +01:00

CWE-681/semmle/tests

Java: use post-process provenance pretty-printing in query-tests

2024-07-28 18:12:17 -04:00

CWE-730

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-732/semmle/tests

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

CWE-749

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-780

Java: Remove redundant inline expectation test imports

2023-08-25 00:18:55 +02:00

CWE-798/semmle/tests

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-807/semmle/tests

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-829/semmle/tests

Handle disabled Maven repositories

2022-11-21 10:11:57 +01:00

CWE-833/semmle/tests

Java: accept changes in expected output

2021-02-09 09:17:35 -05:00

CWE-835/semmle/tests

Java: Adjust toString() for statements

2021-06-03 16:27:36 +02:00

CWE-917

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-918

Merge pull request #18153 from owen-mc/java/resttemplate-getforobject

2024-12-11 16:37:35 +00:00

CWE-925

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-926

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-927

Java: Update expected test results

2024-12-03 19:18:59 +01:00

CWE-940

Java: Post-processing query for inline test expectations

2024-10-29 13:35:32 +01:00

CWE-1104/semmle/tests

Fix typo in test output

2021-02-22 13:26:51 -05:00

CWE-1204

Java: Update expected test results

2024-12-03 19:18:59 +01:00