Commits

Breadcrumbs

History for

on7d52b53

User selector

All users

All time

Commit History

Commits on Mar 4, 2021

• Merge branch 'jexl-injection' of github.com:artem-smotrakov/ql into jexl-injection

  artem-smotrakov

  committed
  7d52b53

  Copy full SHA for 7d52b53

• Removed TaintedSpringRequestBody

  artem-smotrakov

  committed
  0695b2a

  Copy full SHA for 0695b2a

Commits on Mar 3, 2021

• Updated recommendations for avoiding JEXL injections

  artem-smotrakov

  authored
  7cc7ec9

  Copy full SHA for 7cc7ec9

Commits on Mar 2, 2021

• Improved JexlInjection.qhelp

  artem-smotrakov

  committed
  c243f2f

  Copy full SHA for c243f2f

• Simplified JexlInjectionLib.qll and removed LocalUserInput

  artem-smotrakov

  committed
  6b66323

  Copy full SHA for 6b66323

Commits on Feb 24, 2021

• Removed commented code from JexlUberspect

  artem-smotrakov

  committed
  34b6ed0

  Copy full SHA for 34b6ed0

Commits on Feb 20, 2021

• Better sink in SandboxedJexlFlowConfig

  artem-smotrakov

  committed
  43a07bb

  Copy full SHA for 43a07bb

Commits on Feb 11, 2021

• Covered sandboxes for JEXL 2

  Show description for 042c0b0
  artem-smotrakov

  committed
  042c0b0

  Copy full SHA for 042c0b0

• Callable.call() should not be a sink in JexlInjection.ql

  artem-smotrakov

  committed
  7543df6

  Copy full SHA for 7543df6

Commits on Feb 10, 2021

• Updated JexlInjection.ql to check for sandboxes

  Show description for af0f361
  artem-smotrakov

  committed
  af0f361

  Copy full SHA for af0f361

Commits on Jan 29, 2021

• Removed LocalUserInput in JexlInjectionLib.ql

  artem-smotrakov

  committed
  59f48ec

  Copy full SHA for 59f48ec

Commits on Jan 25, 2021

• Simplified JexlInjectionLib.qll

  Show description for 8d701e6
  artem-smotrakov

  committed
  8d701e6

  Copy full SHA for 8d701e6

Commits on Jan 23, 2021

• Simplified method and class definitions for JEXL

  artem-smotrakov

  committed
  71e5cb4

  Copy full SHA for 71e5cb4

• Simplified TaintPropagatingJexlMethodCall

  artem-smotrakov

  committed
  03348b1

  Copy full SHA for 03348b1

• Simplify sinks in JexlInjectionLib.qll

  artem-smotrakov

  committed
  a47147b

  Copy full SHA for a47147b

• Added TaintPropagatingJexlMethodCall class

  artem-smotrakov

  committed
  28ebbee

  Copy full SHA for 28ebbee

Commits on Jan 21, 2021

• Use <code> tag in JexlInjection.qhelp

  artem-smotrakov

  committed
  73c8338

  Copy full SHA for 73c8338

• Use LocalUserInput when looking for JEXL injections

  artem-smotrakov

  committed
  ee6d28b

  Copy full SHA for ee6d28b

• Added examples of a sandbox for JEXL expressions

  artem-smotrakov

  committed
  8166e26

  Copy full SHA for 8166e26

Commits on Jan 20, 2021

• Improved JexlInjectionLib.qll

  artem-smotrakov

  committed
  7df8133

  Copy full SHA for 7df8133

Commits on Jan 17, 2021

• Java: Added a source and a taint step for JexlInjectionConfig

  Show description for 7d2d273
  artem-smotrakov

  committed
  7d2d273

  Copy full SHA for 7d2d273

• Java: Query for detecting JEXL injections

  artem-smotrakov

  committed
  99401f6

  Copy full SHA for 99401f6

Commits on Jan 13, 2021

• Merge pull request #4771 from intrigus-lgtm/split-cwe-295

  Show description for 29935e1
  aschackmull

  authored
  29935e1

  Copy full SHA for 29935e1

Commits on Jan 12, 2021

• Java: Make @id @name of query more similar.

  intrigus

  committed
  1901f6b

  Copy full SHA for 1901f6b

• Java: Accept test changes

  intrigus

  committed
  4fa8f5e

  Copy full SHA for 4fa8f5e

Commits on Jan 11, 2021

• Java: Replace global flow by local flow

  intrigus

  committed
  85286f3

  Copy full SHA for 85286f3

• Java: Revise qhelp

  intrigus-lgtm

  authored
  722bd4d

  Copy full SHA for 722bd4d

• Java: Improve QLDoc & simplify code

  Show description for 4cfdb10
  

  intrigus-lgtm

  and

  aschackmull

  authored
  4cfdb10

  Copy full SHA for 4cfdb10

• Java: Rename to `EnvReadMethod`

  intrigus

  committed
  5c1e746

  Copy full SHA for 5c1e746

• Java: Further reduce FPs, simply Flag2Guard flow

  intrigus

  committed
  1eb2b75

  Copy full SHA for 1eb2b75

• Java: Add QLDoc improve query message

  intrigus

  committed
  b469273

  Copy full SHA for b469273

• Apply suggestions from doc review

  Show description for f4b912c
  

  2 peopleauthored and

  intrigus

  committed
  f4b912c

  Copy full SHA for f4b912c

• Java: Autoformat

  intrigus

  committed
  e11304a

  Copy full SHA for e11304a

• Apply suggestions from code review

  Show description for b8f3e64
  

  2 peopleauthored and

  intrigus

  committed
  b8f3e64

  Copy full SHA for b8f3e64

• Java: Fix Qhelp

  intrigus

  committed
  502e4c3

  Copy full SHA for 502e4c3