Commits

Breadcrumbs

History for

onb23bbf9

User selector

All users

All time

Commit History

Commits on Jan 23, 2024

• Reorder sink models

  joefarebrother

  committed
  b23bbf9

  Copy full SHA for b23bbf9

• Remove sink models involving PendingIntent; as they do not carry sensitive data (including from the original intent they were created with)

  joefarebrother

  committed
  d806fca

  Copy full SHA for d806fca

• Generate androidx stubs and correct some models

  joefarebrother

  committed
  2ca164c

  Copy full SHA for 2ca164c

• Add tests to cover each modeled sink + some corrections to the models

  joefarebrother

  committed
  bafd65b

  Copy full SHA for bafd65b

• Add sink models to notification builder setters

  joefarebrother

  committed
  f9bb004

  Copy full SHA for f9bb004

• Add sensitive notification query

  joefarebrother

  committed
  143ce0b

  Copy full SHA for 143ce0b

Commits on Jan 11, 2024

• Merge pull request #15280 from owen-mc/java/add-manual-models-for-df-generation

  Show description for 2f01688
  owen-mc

  authored
  2f01688

  Copy full SHA for 2f01688

Commits on Jan 8, 2024

• Merge branch 'main' into fix/update-gson-model

  ebickle

  authored
  f6fa712

  Copy full SHA for f6fa712

• Remove zero width space characters.

  ebickle

  committed
  929ce65

  Copy full SHA for 929ce65

• Hudson environment variables models

  egregius313

  committed
  814885f

  Copy full SHA for 814885f

• `org.apache.commons.exec` models

  egregius313

  committed
  028bd49

  Copy full SHA for 028bd49

• `environment-injection` sink

  egregius313

  committed
  ad32b81

  Copy full SHA for ad32b81

• Merge pull request #14681 from atorralba/atorralba/java/weak-randomness-cve-coverage

  Show description for 7e6f2d1
  atorralba

  authored
  7e6f2d1

  Copy full SHA for 7e6f2d1

Commits on Jan 4, 2024

• Fix manual models for `String.valueOf(Object)`

  Show description for ce3097e
  owen-mc

  committed
  ce3097e

  Copy full SHA for ce3097e

• Improve manual models of java.lang.Exception

  owen-mc

  committed
  0076f06

  Copy full SHA for 0076f06

• Reorder manual models of java.lang.Throwable

  owen-mc

  committed
  e415c54

  Copy full SHA for e415c54

• Improve manual models of java.lang.Throwable

  owen-mc

  committed
  f52ea5c

  Copy full SHA for f52ea5c

Commits on Jan 2, 2024

• Merge branch 'main' into fix/update-gson-model

  ebickle

  authored
  0cd89bf

  Copy full SHA for 0cd89bf

Commits on Dec 20, 2023

• Merge pull request #14646 from github/java/update-mad-decls-after-triage-2023-10-31T15-52-01

  Show description for 1b9f59e
  atorralba

  authored
  1b9f59e

  Copy full SHA for 1b9f59e

• Merge pull request #14580 from github/java/update-mad-decls-after-triage-2023-10-24T15-42-01

  Show description for e744d97
  atorralba

  authored
  e744d97

  Copy full SHA for e744d97

Commits on Dec 19, 2023

• Update java/ql/lib/ext/jakarta.persistence.model.yml

  atorralba

  authored
  c8a369d

  Copy full SHA for c8a369d

Commits on Dec 15, 2023

• Merge branch 'main' into fix/update-gson-model

  ebickle

  authored
  95ce7c9

  Copy full SHA for 95ce7c9

Commits on Dec 13, 2023

• Add pac4j JWT cryptographic key sinks

  atorralba

  committed
  fc45621

  Copy full SHA for fc45621

Commits on Dec 12, 2023

• Merge pull request #15073 from atorralba/atorralba/java/remove-invalid-ognl-sinks

  Show description for 27be5ba
  atorralba

  authored
  27be5ba

  Copy full SHA for 27be5ba

• Update java/ql/lib/ext/struts2.model.yml

  Show description for fad53a2
  

  atorralba

  and

  aschackmull

  authored
  fad53a2

  Copy full SHA for fad53a2

• Java: Remove invalid OGNL sinks

  Show description for 103110f
  atorralba

  committed
  103110f

  Copy full SHA for 103110f

Commits on Dec 11, 2023

• Remove unnecessary crypto sinks

  egregius313

  committed
  1271cd3

  Copy full SHA for 1271cd3

• Move ESAPI models into the Weak Randomness query

  Show description for b9d2a26
  egregius313

  committed
  b9d2a26

  Copy full SHA for b9d2a26

• Remove extra `encryption-iv` models

  egregius313

  committed
  7f3995f

  Copy full SHA for 7f3995f

• Replace `convertBytesToString` with models

  egregius313

  committed
  7241e09

  Copy full SHA for 7241e09

• Remove use of `crypto-parameter` sink kind

  egregius313

  committed
  b8b2de2

  Copy full SHA for b8b2de2

• Cryptographic sinks

  egregius313

  committed
  0313f39

  Copy full SHA for 0313f39

Commits on Nov 29, 2023

• Java: switch to createRelative sink and add UrlPathHelper sources

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ba3548b

  Copy full SHA for ba3548b

• Java: add taint steps for getResource sink

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  efa5ab1

  Copy full SHA for efa5ab1

Commits on Nov 27, 2023

• Java: Improve Gson parse, get, and stream models

  ebickle

  committed
  aab7ff9

  Copy full SHA for aab7ff9