Commits

Breadcrumbs

History for

on344c2d3

User selector

All users

All time

Commit History

Commits on Mar 25, 2021

• Update java/ql/src/experimental/Security/CWE/CWE-759/HashWithoutSalt.ql

  aschackmull

  authored
  344c2d3

  Copy full SHA for 344c2d3

Commits on Mar 6, 2021

• Revamp the source and the sink of the query

  luchua-bc

  committed
  0ef3eee

  Copy full SHA for 0ef3eee

Commits on Mar 3, 2021

• Clean up the query

  luchua-bc

  committed
  1784c20

  Copy full SHA for 1784c20

Commits on Feb 15, 2021

• Optimize the query and update qldoc

  luchua-bc

  committed
  a03e6fa

  Copy full SHA for a03e6fa

Commits on Feb 14, 2021

• Reduce the scope of the query to reduce FPs

  luchua-bc

  committed
  6a6727f

  Copy full SHA for 6a6727f

Commits on Jan 29, 2021

• Revamp the query to use three configurations to detect password hash without salt

  luchua-bc

  committed
  ff1ed3a

  Copy full SHA for ff1ed3a

Commits on Jan 18, 2021

• Update the query to work with wrapper classes

  luchua-bc

  committed
  b9809b0

  Copy full SHA for b9809b0

• Revamp the query to reduce FPs introduced by wrapper calls

  luchua-bc

  committed
  048167d

  Copy full SHA for 048167d

Commits on Jan 15, 2021

• Add more cases

  luchua-bc

  committed
  3af8773

  Copy full SHA for 3af8773

Commits on Jan 11, 2021

• Detect the scenario of passwords concatenated with a salt to reduce FPs

  luchua-bc

  committed
  86c04e6

  Copy full SHA for 86c04e6

Commits on Jan 8, 2021

• Remove additional taint step

  luchua-bc

  committed
  39103af

  Copy full SHA for 39103af

Commits on Jan 7, 2021

• Remove specific method name in additional taint step

  luchua-bc

  committed
  b56fe2b

  Copy full SHA for b56fe2b

• Enhance the additional step flow and update qldoc

  luchua-bc

  committed
  19ff00b

  Copy full SHA for 19ff00b

Commits on Jan 6, 2021

• Query to detect hash without salt

  luchua-bc

  committed
  ce2db21

  Copy full SHA for ce2db21

Commits on Dec 17, 2020

• Exclude broken algorithms from the list of secure algorithms

  luchua-bc

  committed
  bed8a68

  Copy full SHA for bed8a68

Commits on Dec 16, 2020

• Fix typo and update qldoc

  luchua-bc

  committed
  6b77922

  Copy full SHA for 6b77922

• Add missing broken crypto algorithms

  luchua-bc

  committed
  d7facb4

  Copy full SHA for d7facb4

Commits on Dec 8, 2020

• Java: Fix false positive in XXE query

  joefarebrother

  committed
  24dc631

  Copy full SHA for 24dc631

Commits on Dec 4, 2020

• Merge pull request #4718 from aschackmull/java/cleanup-deprecated

  Show description for 54d7cac
  yo-h

  authored
  54d7cac

  Copy full SHA for 54d7cac

• Merge pull request #4746 from aschackmull/java/ssa-perf

  Show description for a5393b4
  yo-h

  authored
  a5393b4

  Copy full SHA for a5393b4

Commits on Dec 2, 2020

• Merge pull request #3839 from luchua-bc/uncaught-servlet-exception

  Show description for 0cc324b
  aschackmull

  authored
  0cc324b

  Copy full SHA for 0cc324b

• Update java/ql/src/experimental/Security/CWE/CWE-600/UncaughtServletException.ql

  aschackmull

  authored
  0175a59

  Copy full SHA for 0175a59

Commits on Nov 30, 2020

• Autoformat.

  aschackmull

  committed
  8f2094f

  Copy full SHA for 8f2094f

• Java: Change RemoteUserInput to private instead of removing.

  aschackmull

  committed
  88e0759

  Copy full SHA for 88e0759

• Java: Improve performance of SSA.

  aschackmull

  committed
  5a66d6a

  Copy full SHA for 5a66d6a

• Merge pull request #4668 from aschackmull/dataflow/refactor-pruning

  Show description for 931322e
  aschackmull

  authored
  931322e

  Copy full SHA for 931322e

Commits on Nov 27, 2020

• Merge pull request #4610 from luchua-bc/java-nfe-local-android-dos

  Show description for 028a72b
  aschackmull

  authored
  028a72b

  Copy full SHA for 028a72b

• Dataflow: Sync.

  aschackmull

  committed
  fec9758

  Copy full SHA for fec9758

• Dataflow: Review fixes.

  aschackmull

  committed
  8f4fce1

  Copy full SHA for 8f4fce1

• Merge pull request #4727 from criemen/remove-abstract-classes

  Show description for ad4b2be
  jbj

  authored
  ad4b2be

  Copy full SHA for ad4b2be

Commits on Nov 26, 2020

• Add manual magic

  

  aschackmull

  authored and

  yo-h

  committed
  2234d66

  Copy full SHA for 2234d66

• Java: make some SMAP predicates `private` and add QLDoc

  yo-h

  committed
  9bb949a

  Copy full SHA for 9bb949a

• Java: add dbscheme stats for SMAP relations

  yo-h

  committed
  f9e7808

  Copy full SHA for f9e7808

• Java: incorporate SMAP locations into `Top.hasLocationInfo`

  yo-h

  committed
  edb4165

  Copy full SHA for edb4165

• Java: add SMAP relations to dbscheme

  yo-h

  committed
  e2419e8

  Copy full SHA for e2419e8