Repository navigation

Java: Promote Server-side template injection from experimental - #10352

Merged

atorralba merged 14 commits into

github:mainfrom

atorralba:atorralba/promote-template-injection

Sep 20, 2022

Merged

Java: Promote Server-side template injection from experimental#10352
atorralba merged 14 commits into
github:mainfrom
atorralba:atorralba/promote-template-injection

Commits on Sep 7, 2022
- Move files from experimental
  atorralba
  committed
  cd61bd0
Commits on Sep 8, 2022
- Generate stubs, adapt tests
  atorralba
  committed
  c972809
- Refactor TemplateInjection libraries
  atorralba
  committed
  b68e666
- Use InlineExpectationsTest
  atorralba
  committed
  e311155
- Docs changes
  atorralba
  committed
  fb13e7f
- Add change note
  atorralba
  committed
  6413de6
Commits on Sep 9, 2022
- Fix bad models, add tests for those
  atorralba
  committed
  d748fb5
Commits on Sep 12, 2022
- Tainting the velocity context isn't exploitable
  atorralba
  committed
  409a123
- Add security-severity
  atorralba
  committed
  dd6257c
- Tainting the freemarker dataModel isn't exploitable
  atorralba
  committed
  79a32f1
- Add thymeleaf steps
  atorralba
  committed
  f412f43
Commits on Sep 16, 2022
- Address review comments re: flow states
  atorralba
  committed
  3141fda
Commits on Sep 20, 2022
- Apply suggestions from code review
  
  atorralba
  and
  mchammer01
  authored
  4997f36
- Update java/ql/src/Security/CWE/CWE-094/TemplateInjection.qhelp
  
  atorralba
  and
  mchammer01
  authored
  4af29e6