MarkLee131 f338ded349 Java: treat hash/encrypt/digest methods as sensitive-log sanitizers ...

The sensitive-log query (CWE-532) lacked sanitizers for hashed or
encrypted data, while the sibling cleartext-storage query (CWE-312)
already recognized methods with "encrypt", "hash", or "digest" in their
names as sanitizers (CleartextStorageQuery.qll:86).

This adds an EncryptionBarrier to SensitiveLoggingQuery that applies the
same name-based heuristic, making the two queries consistent. Calls like
DigestUtils.sha256Hex(password) or hashPassword(secret) are no longer
flagged when their results are logged.

2026-04-04 21:35:36 +08:00

..

experimental

Java: Update test expectations

2026-03-04 12:44:56 +00:00

ext

Java: Inline expectation should have space after $

2026-03-04 12:44:54 +00:00

library-tests

Merge pull request #21412 from aschackmull/java/binary-assignment

2026-03-05 13:19:45 +01:00

query-tests

Java: treat hash/encrypt/digest methods as sensitive-log sanitizers

2026-04-04 21:35:36 +08:00

stubs

Add failing test for @Pattern validation

2026-02-12 16:57:04 +00:00

utils

Java: Update model generator implementation and test expected output.

2025-05-13 13:44:42 +01:00

.project

…

.qlpath

…

format.json

…

qlpack.lock.yml

…

qlpack.yml

Java: Enable implicit this receiver warnings

2023-05-09 08:25:40 +02:00