Commits

Breadcrumbs

History for

on0459d13

User selector

All users

All time

Commit History

Commits on Sep 30, 2024

• Java: Remove neutral model for Object.toString.

  aschackmull

  committed
  0459d13

  Copy full SHA for 0459d13

Commits on Sep 18, 2024

• Remove duplicate summary for `MultipartFile.getInputStream` and update `.expected` file

  mbaluda

  committed
  cab35a2

  Copy full SHA for cab35a2

• Address review

  mbaluda

  committed
  5ae51f0

  Copy full SHA for 5ae51f0

• Update org.springframework.core.io.model.yml

  Show description for cfa14ad
  mbaluda

  authored
  cfa14ad

  Copy full SHA for cfa14ad

Commits on Aug 28, 2024

• Java: Update the Byte- and CharBuffer models and add models for set- and getParameters on LogRecord.

  michaelnebel

  committed
  bd5529c

  Copy full SHA for bd5529c

Commits on Aug 27, 2024

• Java: Move some neutrals into the model.yml file (they have previosly been ignored due to wrong file extension).

  michaelnebel

  committed
  d79aa29

  Copy full SHA for d79aa29

• Java: Promote some generated models and add some manual neutrals.

  michaelnebel

  committed
  db51604

  Copy full SHA for db51604

Commits on Aug 21, 2024

• Merge pull request #14089 from am0o0/amammad-java-JWT

  Show description for 15989ce
  smowton

  authored
  15989ce

  Copy full SHA for 15989ce

Commits on Aug 16, 2024

• add getCredentials method of AuthenticationToken as a remote source

  am0o0

  committed
  d88b310

  Copy full SHA for d88b310

Commits on Aug 5, 2024

• Merge branch 'main' into am0o0-java-PathInjection

  smowton

  authored
  95e504a

  Copy full SHA for 95e504a

Commits on Jul 31, 2024

• Merge branch 'main' into jcogs33/java/add-apache-ant-path-inj-sinks

  jcogs33

  authored
  4fb29c4

  Copy full SHA for 4fb29c4

Commits on Jul 26, 2024

• Merge branch 'main' into jcogs33/java/add-apache-ant-path-inj-sinks

  jcogs33

  authored
  ff9093f

  Copy full SHA for ff9093f

Commits on Jul 25, 2024

• Java: fix 'regex-use' comments

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  eea3e82

  Copy full SHA for eea3e82

Commits on Jul 23, 2024

• Add comment by models using `regex-use` sink kind

  owen-mc

  committed
  3edeb82

  Copy full SHA for 3edeb82

Commits on Jul 19, 2024

• Java: add path injection sinks for Property.setFile and Property.setResource

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  f3e5b55

  Copy full SHA for f3e5b55

Commits on Jul 18, 2024

• Convert QL classes for Lastaflute to MaD

  egregius313

  committed
  0990a37

  Copy full SHA for 0990a37

• Add some models for the `org.lastaflute.web` library

  Show description for 3bd3304
  egregius313

  committed
  3bd3304

  Copy full SHA for 3bd3304

Commits on Jul 16, 2024

• Merge branch 'main' into jcogs33/add-toByteArray-summaries

  jcogs33

  authored
  a73170d

  Copy full SHA for a73170d

• Java: Replace the MaD Object.clone() models with a non-aliasing value step.

  aschackmull

  committed
  12d6875

  Copy full SHA for 12d6875

Commits on Jul 15, 2024

• Merge branch 'main' into jcogs33/add-toByteArray-summaries

  jcogs33

  authored
  b70a4c8

  Copy full SHA for b70a4c8

• Java: add manual models for all overloads of IOUtils.toByteArray

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  cd82ada

  Copy full SHA for cd82ada

Commits on Jul 13, 2024

• update tests and use TaintFlowTestArgString

  Show description for 1d1c476
  am0o0

  committed
  1d1c476

  Copy full SHA for 1d1c476

Commits on Jul 11, 2024

• Java: add path-injection sink for hudson.FilePath.exists()

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  77a8ba9

  Copy full SHA for 77a8ba9

• Java: add IOUtils.toByteArray(InputStream) summary

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  4a1497f

  Copy full SHA for 4a1497f

Commits on Jul 3, 2024

• experimentalSinkModel to sinkModel, remove one path injection sink that already exist before

  am0o0

  committed
  7e5f2e2

  Copy full SHA for 7e5f2e2

Commits on Jun 27, 2024

• Merge branch 'main' into jcogs33/unsafe-url-forward-promotion-resource-and-file-methods

  jcogs33

  authored
  901245a

  Copy full SHA for 901245a

Commits on Jun 11, 2024

• Apply suggestions from code review

  Show description for 29e3816
  

  mbaluda

  and

  atorralba

  authored
  29e3816

  Copy full SHA for 29e3816

Commits on Jun 10, 2024

• Update org.apache.commons.io.model.yml

  mbaluda

  authored
  1d44f45

  Copy full SHA for 1d44f45

• Added more `org.apache.commons.io.FileUtils`-related sinks to the path injection query.

  mbaluda

  committed
  71505f4

  Copy full SHA for 71505f4

Commits on Jun 7, 2024

• add zip4j

  am0o0

  committed
  412472e

  Copy full SHA for 412472e

• add new s3 and spring IO path injection sinks

  am0o0

  committed
  ceea475

  Copy full SHA for ceea475

Commits on Jun 4, 2024

• Apply code review suggestions.

  atorralba

  committed
  f16dd8c

  Copy full SHA for f16dd8c

• Java: Add more File-related sinks for path-injection

  atorralba

  committed
  f84c2a8

  Copy full SHA for f84c2a8

Commits on May 22, 2024

• Java: Change most java.time.* df-generated taint models to neutrals.

  aschackmull

  committed
  ba97c36

  Copy full SHA for ba97c36

• Java: Add a neutral model.

  aschackmull

  committed
  54f2316

  Copy full SHA for 54f2316