|
|
f2683c6cb4
|
Quoted EL in JSON.parse is safe
|
2017-04-12 15:43:37 -07:00 |
|
|
|
e6966c7ca4
|
Json.parse is a safe evaluation
|
2017-04-12 15:32:42 -07:00 |
|
|
|
e7bcf6fdfa
|
NOT(..) is a safe evaluation
|
2017-04-12 15:08:21 -07:00 |
|
|
|
0e3b8fdc5f
|
Fixing quote detection and argument detection
|
2017-04-05 10:36:38 -07:00 |
|
|
|
16b7cbcb4e
|
Bug fixes for incorrect detection of id's
|
2017-03-29 14:41:45 -07:00 |
|
|
|
ce1707d92a
|
Add more tests to cover all added scenarios
|
2017-03-28 16:33:13 -03:00 |
|
|
|
60a838c39f
|
Bug fix
|
2017-03-28 09:27:50 -07:00 |
|
|
|
2d488b2285
|
Fix VisualForce CPD config
|
2017-03-14 23:11:24 -03:00 |
|
|
|
c7756bdc8a
|
Merge branch 'VfParserTabSize' of https://github.com/sgorbaty/pmd into pr-288
|
2017-03-11 16:02:48 +01:00 |
|
|
|
33f08f4e90
|
Merge branch 'pr-284'
|
2017-03-07 16:34:26 -03:00 |
|
|
|
e32b6df6b7
|
Setting the tab size to 4 for VF
|
2017-03-06 13:31:35 -08:00 |
|
|
|
8ebd82b72b
|
Small change
|
2017-03-03 13:00:13 -08:00 |
|
|
|
8ba0218d09
|
Merge branch 'CSRFInVisualForce' of github.com:sgorbaty/pmd into CSRFInVisualForce
|
2017-03-03 12:56:58 -08:00 |
|
|
|
3b873cee5e
|
Positive test cases
Adding positive test cases to the rule
|
2017-03-03 12:54:29 -08:00 |
|
|
|
d14f33e628
|
Update security.xml
Version # change
|
2017-03-03 12:53:20 -08:00 |
|
|
|
229a4d7269
|
Review fixes
|
2017-03-03 12:46:14 -08:00 |
|
|
|
b3992a6799
|
Merge branch 'master' into CSRFInVisualForce
|
2017-03-03 16:02:41 -03:00 |
|
|
|
57a3cdd4a2
|
Fix since in VF Security rules
|
2017-03-03 15:32:26 -03:00 |
|
|
|
309d2d1011
|
Style fix
|
2017-03-03 09:13:55 -08:00 |
|
|
|
d12c1f7fe4
|
Iterative DotExpression evaluation instead of checking the first one
|
2017-03-02 17:47:56 -08:00 |
|
|
|
caf27adbc2
|
deleted unused file
|
2017-03-02 17:36:33 -08:00 |
|
|
|
b38642ab1a
|
Merged
|
2017-03-02 17:31:05 -08:00 |
|
|
|
81c67a5df2
|
Fallback for JS arrays and defs
|
2017-03-02 17:28:54 -08:00 |
|
|
|
1942e94cec
|
Bug fix
|
2017-03-02 15:57:26 -08:00 |
|
|
|
6137baf615
|
More test coverage
|
2017-03-02 15:51:57 -08:00 |
|
|
|
32762c48d1
|
fix for unbalanced quotes
|
2017-03-02 15:47:47 -08:00 |
|
|
|
b7946ba4d1
|
fix for special tags
|
2017-03-02 15:44:05 -08:00 |
|
|
|
799614ee8e
|
CSRF in VF controller pages
|
2017-03-02 08:50:20 -08:00 |
|
|
|
c4497d54e2
|
Logic bug fix
|
2017-03-01 15:54:22 -08:00 |
|
|
|
2106e99dac
|
Revert quoted context
|
2017-03-01 15:44:55 -08:00 |
|
|
|
a987c77805
|
Added support for quoted context
|
2017-03-01 13:51:07 -08:00 |
|
|
|
34b707225c
|
Script EL support added
|
2017-03-01 13:09:35 -08:00 |
|
|
|
2e073a196a
|
Initial
|
2017-03-01 10:54:35 -08:00 |
|
|
|
6e1bfe4027
|
Minor adjustments
|
2017-03-01 01:13:14 -03:00 |
|
|
|
2a41668101
|
Improving detection of safe resources
|
2017-03-01 01:13:14 -03:00 |
|
|
|
24d84fe57c
|
Renamed Escaping
|
2017-03-01 01:13:14 -03:00 |
|
|
|
51058cccfa
|
Moving Pattern to final static
|
2017-03-01 01:13:14 -03:00 |
|
|
|
4c748d961f
|
Using EnumSet
|
2017-03-01 01:13:14 -03:00 |
|
|
|
eb3fe1ed08
|
Adding a unit test and bug fix
|
2017-03-01 01:13:14 -03:00 |
|
|
|
595f398525
|
Small refactoring
|
2017-03-01 01:13:14 -03:00 |
|
|
|
18a2480dc9
|
Whitelisting ObjectType
|
2017-03-01 01:13:14 -03:00 |
|
|
|
f3c6d15561
|
Literal starting with http
|
2017-03-01 01:13:14 -03:00 |
|
|
|
eba729c953
|
Whitelisting Labels
|
2017-03-01 01:13:14 -03:00 |
|
|
|
8db5464583
|
any case http
|
2017-03-01 01:13:14 -03:00 |
|
|
|
0a8870a169
|
Whitelisting of http
|
2017-03-01 01:13:14 -03:00 |
|
|
|
9abb780da7
|
Additional negative test
|
2017-03-01 01:13:14 -03:00 |
|
|
|
382c8ca928
|
Typo fix and tests
|
2017-03-01 01:13:14 -03:00 |
|
|
|
49b2fb2e6a
|
Refactoring
|
2017-03-01 01:13:14 -03:00 |
|
|
|
c6cebde365
|
Fixing tests
|
2017-03-01 01:13:14 -03:00 |
|
|
|
758a131454
|
Parser fix for EL in no quote context
|
2017-03-01 01:13:14 -03:00 |
|
