Owen Mansel-Chan 74a249597a Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer ...

Java: Add XSS Sanitizer for `HttpServletResponse.setContentType` with safe values

2025-02-24 23:39:18 +00:00

..

AlertSuppression

AlertSuppression: add more tests

2022-12-19 16:43:11 +01:00

AmbiguousOuterSuper

Fix and add test for java/subtle-inherited-call involving inheritence from generic types

2022-09-14 22:17:19 +01:00

AutoBoxing

…

AvoidDeprecatedCallableAccess

…

BadAbsOfRandom

Add support for java.util.concurrent.ThreadLocalRandom

2021-03-08 10:59:53 +00:00

BadCheckOdd

…

BoxedVariable

…

BusyWait

Java: Adjust toString() for statements

2021-06-03 16:27:36 +02:00

CallsToRunnableRun

…

CloseResource

Java: Improve not closing resource query; add tests

2021-05-11 19:32:02 +02:00

CompareIdenticalValues

…

ComplexCondition

…

ConfusingOverloading

…

ConstantExpAppearsNonConstant

Java: Add new query for large left shifts and bugfix ConstantExpAppearsNonConstant.

2020-01-28 10:13:34 +01:00

ConstantLoopCondition

Java: Adjust toString() for statements

2021-06-03 16:27:36 +02:00

ContainerSizeCmpZero

Java: Fix tests.

2019-06-27 13:20:03 +02:00

ContinueInFalseLoop

Java: Override toString() for statements

2021-06-03 16:27:35 +02:00

ContradictoryTypeChecks

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

dead-code

update expected output after changing queries

2022-08-23 12:35:32 +02:00

DeadCode

Java: add test for Apache Camel dead-code analysis

2024-08-15 17:26:38 +01:00

Declarations

Java: Override toString() for statements

2021-06-03 16:27:35 +02:00

DefineEqualsWhenAddingFields

…

definitions

…

DoubleCheckedLocking

Java: Override toString() for statements

2021-06-03 16:27:35 +02:00

EqualsArray

…

EqualsUsesInstanceOf

…

ExposeRepresentation

Java: avoid call to Location.toString()

2023-06-01 17:06:34 +01:00

Finally

Java: Override toString() for statements

2021-06-03 16:27:35 +02:00

HashedButNoHash

…

IgnoreExceptionalReturn

…

ImpossibleCast

…

InconsistentEqualsHashCode

…

InconsistentOperations

…

InefficientOutputStream

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

InnerClassCouldBeStatic

test example for ODASA-6859

2019-01-17 23:30:39 +01:00

Iterable

…

IteratorRemoveMayFail

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

Javadoc

Revert "Java: Adjust ImpossibleJavadocThrows.ql"

2022-10-04 10:59:39 +02:00

LazyInitStaticField

…

lgtm-example-queries

Kotlin: Test tweaks for the diags consistency query

2022-10-25 16:26:11 +01:00

Likely Bugs/Statements/MissingEnumInSwitch

Java: Accept test changes for MissingEnumInSwitch Oxford commas

2024-03-27 18:48:22 +00:00

LShiftLargerThanTypeWidth

Java: Add new query for large left shifts and bugfix ConstantExpAppearsNonConstant.

2020-01-28 10:13:34 +01:00

maven-dependencies

Add .gitignore for VS Code Generated maven project files

2020-06-15 22:29:30 -04:00

Metrics

Java: Update expected test output.

2024-10-23 09:29:29 +02:00

MissedTernaryOpportunity

Java: Override toString() for statements

2021-06-03 16:27:35 +02:00

MissingCallToSuperClone

Java: fix javac errors in test code

2021-02-09 09:16:57 -05:00

MissingInstanceofInEquals

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

MissingOverrideAnnotation

…

MissingSpaceTypo

…

MissingVoidConstructorsOnSerializable

Spelling

2025-01-06 22:46:22 +01:00

MutualDependency

…

Naming

Java: Don't inherit methods from co-/contra-variant supertypes.

2018-11-13 14:56:22 +01:00

NonPrivateField

…

NonSerializableField

NonSerializableField: Accept test output changes

2022-06-16 17:34:56 +01:00

NonSerializableInnerClass

…

NonSynchronizedOverride

…

NotifyWithoutSynch

…

Nullness

Fix hasNullCase

2023-11-30 11:24:02 +00:00

NumberFormatException

Java: Minor fixups.

2018-10-25 14:30:40 +02:00

PartiallyMaskedCatch

update two more queries to better follow the style-guide

2022-10-01 10:59:59 +02:00

PointlessForwardingMethod

…

PrintLnArray

…

RandomUsedOnce

Add support for Commons-Lang's RandomUtils

2021-03-05 12:09:33 +00:00

RangeAnalysis

Java: Account for additional constants in ArrayIndexOutOfBounds query.

2023-02-03 16:16:39 +01:00

ReadOnlyContainer

…

ReturnValueIgnored

…

security

Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer

2025-02-24 23:39:18 +00:00

SelfAssignment

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

SimplifyBoolExpr

…

SpuriousJavadocParam

Add test case

2024-04-09 12:41:32 -04:00

StartInConstructor

…

StaticArray

update expected output of tests

2022-08-22 21:41:47 +02:00

StringComparison

…

StringFormat

Java 16: adjust test options

2021-03-21 12:55:25 -04:00

Stubs

Fix stub generator

2022-10-03 14:43:58 +02:00

SuspiciousDateFormat

Java: Add a test for java/suspicious-date-format.

2020-01-27 11:57:59 +00:00

SynchSetUnsynchGet

…

Telemetry

Java: Update SupportedExternalApi expected test output.

2024-04-26 12:39:46 +02:00

TypeMismatch

…

UnreadLocal

update expected output of tests

2022-08-22 21:41:47 +02:00

UnreleasedLock

…

UseBraces

Java: Adjust toString() for statements

2021-06-03 16:27:36 +02:00

UselessComparisonTest

CharacterLiteral.getCodePointValue: fix handling of surrogates

2021-11-25 14:07:21 +00:00

UselessNullCheck

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00

UselessUpcast

…

WhitespaceContradictsPrecedence

…

WriteOnlyContainer

…

WrongNanComparison

update alert-messsages of java queries

2022-09-26 12:15:25 +02:00