Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Java: Query for detecting unsafe deserialization with Spring exporters #5260

Merged
merged 14 commits into from
Mar 24, 2021
Merged

Java: Query for detecting unsafe deserialization with Spring exporters #5260

merged 14 commits into from
Mar 24, 2021

Commits on Feb 24, 2021

  1. Added SpringHttpInvokerUnsafeDeserialization.ql

    @artem-smotrakov
    artem-smotrakov committed Feb 24, 2021
    Configuration menu
    Copy the full SHA
    476309a View commit details
    Browse the repository at this point in the history

  2. Added SpringHttpInvokerUnsafeDeserialization.qhelp and example

    @artem-smotrakov
    artem-smotrakov committed Feb 24, 2021
    Configuration menu
    Copy the full SHA
    95284ad View commit details
    Browse the repository at this point in the history

  3. Added tests for SpringHttpInvokerUnsafeDeserialization.ql

    @artem-smotrakov
    artem-smotrakov committed Feb 24, 2021
    Configuration menu
    Copy the full SHA
    aac0c27 View commit details
    Browse the repository at this point in the history

  4. Improved SpringHttpInvokerUnsafeDeserialization.qhelp

    @artem-smotrakov
    artem-smotrakov committed Feb 24, 2021
    Configuration menu
    Copy the full SHA
    e02b51f View commit details
    Browse the repository at this point in the history

Commits on Feb 27, 2021

  1. Simplified returnsRemoteInvocationSerializingExporter()

    @artem-smotrakov
    artem-smotrakov committed Feb 27, 2021
    Configuration menu
    Copy the full SHA
    15a43ff View commit details
    Browse the repository at this point in the history

Commits on Mar 2, 2021

  1. Improved docs for SpringHttpInvokerUnsafeDeserialization.ql

    @artem-smotrakov
    artem-smotrakov committed Mar 2, 2021
    Configuration menu
    Copy the full SHA
    617ba65 View commit details
    Browse the repository at this point in the history

Commits on Mar 6, 2021

  1. Cover beans from XML configs in SpringHttpInvokerUnsafeDeserializatio… 

    …n.ql
    @artem-smotrakov
    artem-smotrakov committed Mar 6, 2021
    Configuration menu
    Copy the full SHA
    dcabce6 View commit details
    Browse the repository at this point in the history

  2. Renamed SpringHttpInvokerUnsafeDeserialization.ql

    @artem-smotrakov
    artem-smotrakov committed Mar 6, 2021
    Configuration menu
    Copy the full SHA
    82cb4a8 View commit details
    Browse the repository at this point in the history

  3. Added another example for SpringExporterUnsafeDeserialization.ql

    @artem-smotrakov
    artem-smotrakov committed Mar 6, 2021
    Configuration menu
    Copy the full SHA
    bda2237 View commit details
    Browse the repository at this point in the history

  4. Use correct file names in SpringExporterUnsafeDeserialization.qhelp

    @artem-smotrakov
    artem-smotrakov committed Mar 6, 2021
    Configuration menu
    Copy the full SHA
    891b975 View commit details
    Browse the repository at this point in the history

Commits on Mar 8, 2021

  1. Split SpringExporterUnsafeDeserialization.ql

    @artem-smotrakov
    artem-smotrakov committed Mar 8, 2021
    Configuration menu
    Copy the full SHA
    a78f211 View commit details
    Browse the repository at this point in the history

Commits on Mar 10, 2021

  1. Split qhelp files

    @artem-smotrakov
    artem-smotrakov committed Mar 10, 2021
    Configuration menu
    Copy the full SHA
    df60268 View commit details
    Browse the repository at this point in the history

  2. Cover more configurations in UnsafeSpringExporterInConfigurationClass.ql

    @artem-smotrakov
    artem-smotrakov committed Mar 10, 2021
    Configuration menu
    Copy the full SHA
    0a5d58e View commit details
    Browse the repository at this point in the history

Commits on Mar 11, 2021

  1. Added a comment for getBeanIdentifier() 

    Co-authored-by: Chris Smowton <[email protected]>
    @artem-smotrakov @smowton
    artem-smotrakov and smowton authored Mar 11, 2021
    Configuration menu
    Copy the full SHA
    4b7c57c View commit details
    Browse the repository at this point in the history