Repository navigation

Java: Promote Unsafe URL Forward query from experimental - #14854

Merged

jcogs33 merged 40 commits into

github:mainfrom

jcogs33:jcogs33/unsafe-url-forward-promotion

Mar 29, 2024

Merged

Java: Promote Unsafe URL Forward query from experimental#14854
jcogs33 merged 40 commits into
github:mainfrom
jcogs33:jcogs33/unsafe-url-forward-promotion

Commits on Mar 13, 2024
- Java: copy files from experimental
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  0d38a96
- Java: move config to Query.qll file
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  2793f28
- Java: update test cases to use inline expectations
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  35a083a
- Java: remove path-injection related models and tests for now
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  915e106
- Java: move MaD models to correct files, delete ones that already exist
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  2a68299
- Java: remove more path-injection related classes (will maybe add some of these back in a separate PR)
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  4ff884e
- Java: convert RequestDispatcherSink to MaD
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  42e3825
- Java: switch StaplerResponse.forward from request-forgery sink to url-forward sink
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  8d66097
- Java: convert SpringModelAndViewSink to MaD
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  1da1e89
- Java: add some comments and minor code reorg
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  5a9d755
- Java: update query metadata and alert message
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  6e7c054
- Java: rename 'UnsafeUrlForward' to 'UrlForward'
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  09bc21d
- Java: update qhelp
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  c331393
- Java: update/add some TODO comments
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  5fa63ab
- Java: combine test cases; add test for StaplerResponse.forward
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  e75c96c
- Java: add change note
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  c8ec301
- Java: initial update of barrier and test cases to remove FN
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  911a61d
- Java: remove todo comments from ext files
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  f573032
- Java: remove redundant imports
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  2708e53
- Java: use new 'SimpleTypeSanitizer', and update some non-extending subtype relationships
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  43b4962
- Java: update change note
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  d9772c1
- Java: some updates to test cases
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  d220b3a
- Java: create UrlDecodeMethod
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  052452b
- Java: some updates to UrlPathBarrier code
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  042dcf9
- Java: add QLDocs to UrlPathBarrier code
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  a807596
- Java: clean up comments on test cases
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  a002674
- Java: rename SpringUrlForwardSink
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  7310c15
- Java: add QLDoc
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  c5a59d6
- Java: update UrlPathBarrier to include FollowsBarrierPrefix
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  e99cea3
- Java: adjust prefix barriers
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  04d27f2
- Java: add spurious test case for StringBuilder.append
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  5ac453e
- Java: adjust BarrierPrefix to handle prepended chars
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  1b01f26
Commits on Mar 15, 2024
- Java: performance fix
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  55f7369
Commits on Mar 18, 2024
- Java: remove experimental files
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  658fffe
- Java: remove experimental tests
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  a8eb1d1
Commits on Mar 27, 2024
- Java: remove redundant line
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  35fbc95
- Java: remove parentheses
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  121b24e
- Java: use InlineFlowTest instead of InlineExpectationsTest
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  2391fe7
- Java: move UrlForward.qll code to UrlForwardQuery.qll
  
  Jami Cogswell
  authored and
  Jami Cogswell
  committed
  40c932a
Commits on Mar 28, 2024
- docs wording updates
  
  jcogs33
  and
  subatoi
  authored
  2f8c4df

Commits

Commits on Mar 13, 2024

Commits on Mar 15, 2024

Commits on Mar 18, 2024

Commits on Mar 27, 2024

Commits on Mar 28, 2024