Commits

Breadcrumbs

History for

on24fc4ba

User selector

All users

All time

Commit History

Commits on May 26, 2023

• Java: add tests

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  24fc4ba

  Copy full SHA for 24fc4ba

• Java: fix typos

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  f255b6a

  Copy full SHA for f255b6a

• Java: update provenance to 'hq-manual'

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  7e6913a

  Copy full SHA for 7e6913a

• Java: add 'sink' kind

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  60b0708

  Copy full SHA for 60b0708

• Java: add neutral models discovered with path-inj and ssrf heuristics

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  65dd7eb

  Copy full SHA for 65dd7eb

Commits on May 24, 2023

• Merge pull request #13248 from atorralba/atorralba/java/nio-files-copy-models-fix

  Show description for 7d0b02e
  atorralba

  authored
  7d0b02e

  Copy full SHA for 7d0b02e

Commits on May 23, 2023

• Merge pull request #13097 from egregius313/egregius313/java/webgoat/ssrf-regex-fix

  Show description for 5234080
  egregius313

  authored
  5234080

  Copy full SHA for 5234080

• Merge pull request #13091 from atorralba/atorralba/java/inputstreamwrapper-transitive

  Show description for 6f012d5
  atorralba

  authored
  6f012d5

  Copy full SHA for 6f012d5

• Add change note

  atorralba

  committed
  5c5f910

  Copy full SHA for 5c5f910

• Java: Tweak java.nio.files.Files.copy models

  atorralba

  committed
  654bb00

  Copy full SHA for 654bb00

• Merge pull request #13164 from erik-krogh/polyQhelp

  Show description for 50cb5ea
  erik-krogh

  authored
  50cb5ea

  Copy full SHA for 50cb5ea

Commits on May 22, 2023

• Add change note

  egregius313

  committed
  2d69f81

  Copy full SHA for 2d69f81

• Change regex used in HostnameSanitizingPrefix

  egregius313

  committed
  43966eb

  Copy full SHA for 43966eb

• Add test case based on missing result

  egregius313

  committed
  774baea

  Copy full SHA for 774baea

• Add change note

  atorralba

  committed
  1839154

  Copy full SHA for 1839154

Commits on May 21, 2023

• apply suggestions from doc review

  erik-krogh

  committed
  710b309

  Copy full SHA for 710b309

• Merge branch 'main' into polyQhelp

  erik-krogh

  committed
  10bf17c

  Copy full SHA for 10bf17c

Commits on May 19, 2023

• Java: Add TemplateEngine.createTemplate as a groovy injection sink

  atorralba

  committed
  b58eb3a

  Copy full SHA for b58eb3a

Commits on May 18, 2023

• Merge pull request #13140 from atorralba/atorralba/java/spring-jdbc-namedparam-models

  Show description for a8afa47
  atorralba

  authored
  a8afa47

  Copy full SHA for a8afa47

• Apply @jcogs33's suggestions from code review

  atorralba

  authored
  2c54996

  Copy full SHA for 2c54996

Commits on May 17, 2023

• Merge pull request #12932 from atorralba/atorralba/java/promote-xxe-experimental-sinks

  Show description for 1b06bf1
  atorralba

  authored
  1b06bf1

  Copy full SHA for 1b06bf1

• Merge pull request #13185 from github/fix-automodel-extraction-parameterName

  Show description for 7c02a9b
  

  Stephan Brandauer

  authored
  7c02a9b

  Copy full SHA for 7c02a9b

• add extra parameters in query-messages

  

  Stephan Brandauer

  committed
  a5ef738

  Copy full SHA for a5ef738

• avoid contractions

  erik-krogh

  committed
  480e71f

  Copy full SHA for 480e71f

Commits on May 16, 2023

• Use empty toolchains.xml for java-version-too-old

  mbg

  committed
  2d80302

  Copy full SHA for 2d80302

• use `asParameter().getName()` instead of `toString()`

  Show description for 2cd8a87
  

  Stephan Brandauer

  and

  tausbn

  authored
  2cd8a87

  Copy full SHA for 2cd8a87

• automodel java fix: export method name as 'name' metadata parameter; export parameter name as 'parameterName' parameter

  

  Stephan Brandauer

  committed
  9845887

  Copy full SHA for 9845887

• Hide GHA variables in `java-version-too-old` test

  mbg

  committed
  9660b47

  Copy full SHA for 9660b47

• Merge branch 'main' into atorralba/java/promote-xxe-experimental-sinks

  atorralba

  authored
  770099f

  Copy full SHA for 770099f

Commits on May 15, 2023

• Add XPath.evaluate as XXE sink

  atorralba

  committed
  7d79d87

  Copy full SHA for 7d79d87

• trim the whitespace in the poly-redos examples

  erik-krogh

  committed
  83ca149

  Copy full SHA for 83ca149

• add another example to the qhelp in poly-redos, showing how to just limit the length of the input

  erik-krogh

  committed
  d989359

  Copy full SHA for d989359

Commits on May 12, 2023

• Java: make inputStreamWrapper only act on constructors from outside of source

  atorralba

  committed
  549fa7e

  Copy full SHA for 549fa7e

• Java: Make implicit this receivers explicit

  kaspersv

  committed
  d40cd0f

  Copy full SHA for d40cd0f

• Java: Add SQLi sinks for Spring JDBC

  atorralba

  committed
  a48fa65

  Copy full SHA for a48fa65