Commits

Breadcrumbs

History for

on19cb7ad

User selector

All users

All time

Commit History

Commits on Jan 26, 2024

• Migrate path injection sinks to MaD

  Show description for 19cb7ad
  atorralba

  committed
  19cb7ad

  Copy full SHA for 19cb7ad

Commits on Jan 25, 2024

• Fix code review mistake

  atorralba

  committed
  d299971

  Copy full SHA for d299971

• Java: PR discussion

  

  Stephan Brandauer

  committed
  1f9a968

  Copy full SHA for 1f9a968

• Update java/ql/lib/ext/com.fasterxml.jackson.databind.model.yml

  Show description for 5d6ee9c
  

  Stephan Brandauer

  and

  atorralba

  authored
  5d6ee9c

  Copy full SHA for 5d6ee9c

Commits on Jan 24, 2024

• Merge branch 'main' into java/update-mad-decls-after-triage-2024-01-24T10-05-04

  

  Stephan Brandauer

  authored
  4e63cbc

  Copy full SHA for 4e63cbc

• Update MaD Declarations after Triage

  

  Stephan Brandauer

  committed
  d5bcbcd

  Copy full SHA for d5bcbcd

Commits on Jan 23, 2024

• Merge branch 'main' into java/update-mad-decls-after-triage-2023-12-21T14-39-02

  

  Stephan Brandauer

  authored
  95b439b

  Copy full SHA for 95b439b

• work on review comments

  Show description for cd765e7
  

  Stephan Brandauer

  and

  atorralba

  committed
  cd765e7

  Copy full SHA for cd765e7

• Java: java.awt.Desktop::browse is a url-redirection sink

  Show description for 8b34407
  

  Stephan Brandauer

  and

  atorralba

  authored
  8b34407

  Copy full SHA for 8b34407

Commits on Jan 11, 2024

• Merge pull request #15280 from owen-mc/java/add-manual-models-for-df-generation

  Show description for 2f01688
  owen-mc

  authored
  2f01688

  Copy full SHA for 2f01688

Commits on Jan 8, 2024

• Merge branch 'main' into fix/update-gson-model

  ebickle

  authored
  f6fa712

  Copy full SHA for f6fa712

• Remove zero width space characters.

  ebickle

  committed
  929ce65

  Copy full SHA for 929ce65

• Hudson environment variables models

  egregius313

  committed
  814885f

  Copy full SHA for 814885f

• `org.apache.commons.exec` models

  egregius313

  committed
  028bd49

  Copy full SHA for 028bd49

• `environment-injection` sink

  egregius313

  committed
  ad32b81

  Copy full SHA for ad32b81

• Merge pull request #14681 from atorralba/atorralba/java/weak-randomness-cve-coverage

  Show description for 7e6f2d1
  atorralba

  authored
  7e6f2d1

  Copy full SHA for 7e6f2d1

Commits on Jan 4, 2024

• Fix manual models for `String.valueOf(Object)`

  Show description for ce3097e
  owen-mc

  committed
  ce3097e

  Copy full SHA for ce3097e

• Improve manual models of java.lang.Exception

  owen-mc

  committed
  0076f06

  Copy full SHA for 0076f06

• Reorder manual models of java.lang.Throwable

  owen-mc

  committed
  e415c54

  Copy full SHA for e415c54

• Improve manual models of java.lang.Throwable

  owen-mc

  committed
  f52ea5c

  Copy full SHA for f52ea5c

Commits on Jan 2, 2024

• Merge branch 'main' into fix/update-gson-model

  ebickle

  authored
  0cd89bf

  Copy full SHA for 0cd89bf

Commits on Dec 21, 2023

• Update MaD Declarations after Triage

  

  Stephan Brandauer

  committed
  a9d21ce

  Copy full SHA for a9d21ce

Commits on Dec 20, 2023

• Merge pull request #14646 from github/java/update-mad-decls-after-triage-2023-10-31T15-52-01

  Show description for 1b9f59e
  atorralba

  authored
  1b9f59e

  Copy full SHA for 1b9f59e

• Merge pull request #14580 from github/java/update-mad-decls-after-triage-2023-10-24T15-42-01

  Show description for e744d97
  atorralba

  authored
  e744d97

  Copy full SHA for e744d97

Commits on Dec 19, 2023

• Update java/ql/lib/ext/jakarta.persistence.model.yml

  atorralba

  authored
  c8a369d

  Copy full SHA for c8a369d

Commits on Dec 15, 2023

• Merge branch 'main' into fix/update-gson-model

  ebickle

  authored
  95ce7c9

  Copy full SHA for 95ce7c9

Commits on Dec 13, 2023

• Add pac4j JWT cryptographic key sinks

  atorralba

  committed
  fc45621

  Copy full SHA for fc45621

Commits on Dec 12, 2023

• Merge pull request #15073 from atorralba/atorralba/java/remove-invalid-ognl-sinks

  Show description for 27be5ba
  atorralba

  authored
  27be5ba

  Copy full SHA for 27be5ba

• Update java/ql/lib/ext/struts2.model.yml

  Show description for fad53a2
  

  atorralba

  and

  aschackmull

  authored
  fad53a2

  Copy full SHA for fad53a2

• Java: Remove invalid OGNL sinks

  Show description for 103110f
  atorralba

  committed
  103110f

  Copy full SHA for 103110f

Commits on Dec 11, 2023

• Remove unnecessary crypto sinks

  egregius313

  committed
  1271cd3

  Copy full SHA for 1271cd3

• Move ESAPI models into the Weak Randomness query

  Show description for b9d2a26
  egregius313

  committed
  b9d2a26

  Copy full SHA for b9d2a26

• Remove extra `encryption-iv` models

  egregius313

  committed
  7f3995f

  Copy full SHA for 7f3995f

• Replace `convertBytesToString` with models

  egregius313

  committed
  7241e09

  Copy full SHA for 7241e09

• Remove use of `crypto-parameter` sink kind

  egregius313

  committed
  b8b2de2

  Copy full SHA for b8b2de2