Commits

Breadcrumbs

History for

on6c4a909

User selector

All users

All time

Commit History

Commits on Jun 17, 2021

• Remove dead code from test

  smowton

  committed
  6c4a909

  Copy full SHA for 6c4a909

• Remove redundant test

  smowton

  committed
  08ab5f5

  Copy full SHA for 08ab5f5

• Tidy Jax-RS test

  smowton

  committed
  74569ce

  Copy full SHA for 74569ce

• Tidy Spring test

  smowton

  committed
  57ca36b

  Copy full SHA for 57ca36b

• Convert request forgery tests to inline expectations; add missing models revealed by this process.

  smowton

  committed
  8b080a9

  Copy full SHA for 8b080a9

• Factor request-forgery config so it can be used in an inline-expectations test

  smowton

  committed
  b66dcbe

  Copy full SHA for b66dcbe

• Add missing tests, add additional models revealed missing in the process, and add stubs to support them all.

  smowton

  committed
  ee872f1

  Copy full SHA for ee872f1

• Convert SSRF sinks into url-open CSV sinks

  Show description for 49bbfc3
  smowton

  committed
  49bbfc3

  Copy full SHA for 49bbfc3

• Fix and document one-based argument indexing in StringFormat's `getAnArgUsageOffset`

  smowton

  committed
  0f2139f

  Copy full SHA for 0f2139f

• Improve StringBuilder append chain tracking

  Show description for 55c72ce
  smowton

  committed
  55c72ce

  Copy full SHA for 55c72ce

• Simplify and improve AddExpr logic

  Show description for 5b25694
  smowton

  committed
  5b25694

  Copy full SHA for 5b25694

• Broaden PrimitiveSanitizer to include boxed primitives and other java.lang.Numbers

  smowton

  committed
  6b76f42

  Copy full SHA for 6b76f42

• Tidy and remove catersian product from getUrlArgument

  smowton

  committed
  3167af2

  Copy full SHA for 3167af2

• Fix getAnArgUsageOffset and improve its space complexity

  Show description for f388aae
  smowton

  committed
  f388aae

  Copy full SHA for f388aae

• Copyedit documentation

  Show description for 0db5484
  

  smowton

  and

  aschackmull

  committed
  0db5484

  Copy full SHA for 0db5484

• Update test results to account for changed model structure

  Show description for 1549993
  smowton

  committed
  1549993

  Copy full SHA for 1549993

• Fix casing of change note

  smowton

  committed
  8d70e3d

  Copy full SHA for 8d70e3d

• Improve comment casing

  Show description for 9138d2b
  

  smowton

  and

  intrigus-lgtm

  committed
  9138d2b

  Copy full SHA for 9138d2b

• Java SSRF query: comment on sanitizing regex

  smowton

  committed
  b25e867

  Copy full SHA for b25e867

• Improve RequestForgery.qhelp recommendation

  smowton

  committed
  a665d5d

  Copy full SHA for a665d5d

• Update java/ql/src/semmle/code/java/security/RequestForgery.qll

  Show description for 0d9a6e2
  smowton

  committed
  0d9a6e2

  Copy full SHA for 0d9a6e2

• Copyedit comments and function names

  Show description for fb2989c
  

  smowton

  and

  felicitymay

  committed
  fb2989c

  Copy full SHA for fb2989c

• Java SSRF query: document RequestForgeryAdditionalTaintStep and use Unit not string for a supertype.

  smowton

  committed
  960a903

  Copy full SHA for 960a903

• Java SSRF query: Server Side -> Server-Side everywhere.

  smowton

  committed
  575198a

  Copy full SHA for 575198a

• Java SSRF query: move RequestForgery qll file into semmle/code hierarchy

  Show description for 7899e17
  smowton

  committed
  7899e17

  Copy full SHA for 7899e17

• Java SSRF query: Provide hook for custom taint-propagating steps; make all default sinks/sanitizers/steps private.

  smowton

  committed
  532a10b

  Copy full SHA for 532a10b

• Java SSRF query: credit original author

  smowton

  committed
  5bdd9da

  Copy full SHA for 5bdd9da

• Java SSRF query: copyedit qhelp

  smowton

  committed
  e861336

  Copy full SHA for e861336

• Java SSRF query: sanitize primitives

  Show description for 3333e7d
  smowton

  committed
  3333e7d

  Copy full SHA for 3333e7d

• Add change note

  smowton

  committed
  93a9f47

  Copy full SHA for 93a9f47

• Remove failing test

  Show description for 77904d9
  smowton

  committed
  77904d9

  Copy full SHA for 77904d9

• Add exactly the string '/' as a sanitizing prefix.

  Show description for 6933d06
  smowton

  committed
  6933d06

  Copy full SHA for 6933d06

• Fix typo

  smowton

  committed
  bc43b6d

  Copy full SHA for bc43b6d

• Add doc comments

  smowton

  committed
  e6249ee

  Copy full SHA for e6249ee

• SSRF: don't consider results of fetches we initiated to be untrustworthy

  smowton

  committed
  26e10f3

  Copy full SHA for 26e10f3