deserialization sinks#5508

Merged

hvitved merged 34 commits intomainfrom

unknown repository

Aug 17, 2021

Commits on Mar 20, 2021

deserialization sinks
edvraa
committed

Commits on Mar 31, 2021

Rename ObjectMethodSink to InstanceMethodSink
edvraa
committed
Fix comment
edvraa
committed
Simplify query
edvraa
committed
Rename taint tracking variables
edvraa
committed
Rename deserializeCall to deserializeCallArg
edvraa
committed
Make query symmetric
edvraa
committed

Commits on Apr 14, 2021

Use don't care expression
edvraa
committed
Hide implementation details
edvraa
committed
Remove redundant check
edvraa
committed

Commits on Apr 15, 2021

Simplify getTarget check
edvraa
committed
Use hasFlow where path is not needed
edvraa
committed
Use TaintTracking2
edvraa
committed
reintroduce UnsafeDeserializer
edvraa
committed

Commits on Apr 16, 2021

Charpred for InstanceMethodSink
edvraa
committed

Commits on Apr 21, 2021

Move RemoteSource and LocalSource to UnsafeDeserialization.qll
edvraa
committed
a deserializer
edvraa
committed
Simpify with exists
edvraa
committed
make private where possible
edvraa
committed
get rid of getParent
edvraa
committed
Get rid of UnsafeDeserializerCallable
edvraa
committed
Get rid of getParent
edvraa
committed
Remove SafeConstructorTrackingConfig
edvraa
committed
Remove DataFlow::Node
edvraa
committed

Commits on Apr 22, 2021

Make similarly named files in tests and qhelp in sync
edvraa
committed

Commits on Apr 27, 2021

add comments
edvraa
committed

Commits on Jul 12, 2021

Merge with Main
edvraa
committed
FsPickler

edvraa
authored and
edvraa
committed
SharpSerializer

edvraa
authored and
edvraa
committed
YamlDotNet

edvraa
authored and
edvraa
committed
JsonConvert

edvraa
authored and
edvraa
committed

Commits on Jul 14, 2021

Use HasFlow instead HasFlowPath
edvraa
committed

Commits on Aug 4, 2021

Merge with main
edvraa
committed
Post merge
edvraa
committed