Commits

Breadcrumbs

History for

on04d27f2

User selector

All users

All time

Commit History

Commits on Mar 13, 2024

• Java: adjust prefix barriers

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  04d27f2

  Copy full SHA for 04d27f2

• Java: update UrlPathBarrier to include FollowsBarrierPrefix

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  e99cea3

  Copy full SHA for e99cea3

• Java: add QLDoc

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  c5a59d6

  Copy full SHA for c5a59d6

• Java: rename SpringUrlForwardSink

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  7310c15

  Copy full SHA for 7310c15

• Java: add QLDocs to UrlPathBarrier code

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  a807596

  Copy full SHA for a807596

• Java: some updates to UrlPathBarrier code

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  042dcf9

  Copy full SHA for 042dcf9

• Java: create UrlDecodeMethod

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  052452b

  Copy full SHA for 052452b

• Java: some updates to test cases

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  d220b3a

  Copy full SHA for d220b3a

• Java: use new 'SimpleTypeSanitizer', and update some non-extending subtype relationships

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  43b4962

  Copy full SHA for 43b4962

• Java: remove redundant imports

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  2708e53

  Copy full SHA for 2708e53

• Java: remove todo comments from ext files

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  f573032

  Copy full SHA for f573032

• Java: initial update of barrier and test cases to remove FN

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  911a61d

  Copy full SHA for 911a61d

• Java: update/add some TODO comments

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  5fa63ab

  Copy full SHA for 5fa63ab

• Java: rename 'UnsafeUrlForward' to 'UrlForward'

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  09bc21d

  Copy full SHA for 09bc21d

• Java: add some comments and minor code reorg

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  5a9d755

  Copy full SHA for 5a9d755

• Java: convert SpringModelAndViewSink to MaD

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  1da1e89

  Copy full SHA for 1da1e89

• Java: switch StaplerResponse.forward from request-forgery sink to url-forward sink

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  8d66097

  Copy full SHA for 8d66097

• Java: convert RequestDispatcherSink to MaD

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  42e3825

  Copy full SHA for 42e3825

• Java: remove more path-injection related classes (will maybe add some of these back in a separate PR)

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  4ff884e

  Copy full SHA for 4ff884e

• Java: move MaD models to correct files, delete ones that already exist

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  2a68299

  Copy full SHA for 2a68299

• Java: remove path-injection related models and tests for now

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  915e106

  Copy full SHA for 915e106

• Java: move config to Query.qll file

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  2793f28

  Copy full SHA for 2793f28

• Java: copy files from experimental

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0d38a96

  Copy full SHA for 0d38a96

Commits on Mar 12, 2024

• Merge pull request #15869 from egregius313/egregius313/java/fix/parcelfiledescriptor-open-sink

  Show description for d544899
  egregius313

  authored
  d544899

  Copy full SHA for d544899

• Merge pull request #15731 from erik-krogh/java-url

  Show description for 863e3f7
  erik-krogh

  authored
  863e3f7

  Copy full SHA for 863e3f7

• add explicit QLDoc that any method named "contains" is matched

  erik-krogh

  committed
  f613823

  Copy full SHA for f613823

• move changenote to src/

  erik-krogh

  committed
  35aae0a

  Copy full SHA for 35aae0a

• expand change-note

  Show description for b53ae77
  

  erik-krogh

  and

  atorralba

  authored
  b53ae77

  Copy full SHA for b53ae77

• add change-note

  erik-krogh

  committed
  74876ff

  Copy full SHA for 74876ff

• small fixes based on review

  erik-krogh

  committed
  52f71e4

  Copy full SHA for 52f71e4

Commits on Mar 11, 2024

• Change note

  egregius313

  committed
  76aeee2

  Copy full SHA for 76aeee2

• Add sinks for `android.os.ParcelFileDescriptor`

  egregius313

  committed
  61dbe26

  Copy full SHA for 61dbe26

• Sync files

  hvitved

  committed
  da66281

  Copy full SHA for da66281

Commits on Mar 4, 2024

• Merge pull request #15792 from github/max-schaefer-patch-1

  Show description for 1f3a349
  max-schaefer

  authored
  1f3a349

  Copy full SHA for 1f3a349

• Merge pull request #15786 from owen-mc/java/sensitive-logging-query-exclude-null-in-variable-name

  Show description for 279605b
  owen-mc

  authored
  279605b

  Copy full SHA for 279605b