Commits

Breadcrumbs

History for

onc26a56a

User selector

All users

All time

Commit History

Commits on Aug 14, 2025

• add extensions for remote sources

  5idg5

  committed
  a8889ff

  Copy full SHA for a8889ff

Commits on Jul 16, 2025

• Use MaD models for unsafe deserialization sinks when possible

  Show description for fdd1e3f
  owen-mc

  committed
  fdd1e3f

  Copy full SHA for fdd1e3f

Commits on Feb 14, 2025

• Java: use AdditionalTaintStep

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  c0ebeb9

  Copy full SHA for c0ebeb9

Commits on Nov 12, 2024

• Merge pull request #17597 from aschackmull/java/chararraywriter-tostring

  Show description for d7fbf68
  aschackmull

  authored
  d7fbf68

  Copy full SHA for d7fbf68

Commits on Nov 11, 2024

• Java: Move non-experimental models out of the experimental folder.

  michaelnebel

  committed
  404ca27

  Copy full SHA for 404ca27

Commits on Oct 23, 2024

• Java: Add manual models for various mapToObj methods.

  michaelnebel

  committed
  3d70f91

  Copy full SHA for 3d70f91

Commits on Oct 21, 2024

• Java: Re-generate JDK 17 models.

  michaelnebel

  committed
  d59df1f

  Copy full SHA for d59df1f

• Java: Manually model InetSocketAddress as the model generator doesn't correctly taint the hostname.

  michaelnebel

  committed
  97f0037

  Copy full SHA for 97f0037

• Java: Add manual models for FileReader (they would also have disappeared if models were re-generated without using mixed mode).

  michaelnebel

  committed
  9a44eec

  Copy full SHA for 9a44eec

• Java: Manually model ZipFile (due to CWE-522 compression bombs test failure).

  michaelnebel

  committed
  b356c3c

  Copy full SHA for b356c3c

• Java: Add some less precise models for BasicAttributes to get the models to work with search sink and re-generate SDK models.

  michaelnebel

  committed
  f7b38a8

  Copy full SHA for f7b38a8

• Java: Re-add generated (mixed) summaries and neutrals for the Java SDK 17.

  michaelnebel

  committed
  3b6f399

  Copy full SHA for 3b6f399

• Java: Delete all generated Java JDK models.

  michaelnebel

  committed
  f50734f

  Copy full SHA for f50734f

Commits on Oct 1, 2024

• Merge pull request #17604 from aschackmull/java/neutral-overrides

  Show description for 6081ba5
  aschackmull

  authored
  6081ba5

  Copy full SHA for 6081ba5

Commits on Sep 30, 2024

• Java: Add a neutral for Comparable.compareTo

  aschackmull

  committed
  222ae6a

  Copy full SHA for 222ae6a

• Java: Add a neutral for Collection.remove.

  aschackmull

  committed
  fcb677e

  Copy full SHA for fcb677e

• Java: Adjust Set.clear model to apply to overrides.

  aschackmull

  committed
  38818f3

  Copy full SHA for 38818f3

• Java: Remove neutral model for Object.toString.

  aschackmull

  committed
  0459d13

  Copy full SHA for 0459d13

• Java: Fix comment re. neutrals and WithoutElement.

  Show description for 1f95fa1
  aschackmull

  committed
  1f95fa1

  Copy full SHA for 1f95fa1

Commits on Sep 27, 2024

• Java: Add a couple of neutrals

  aschackmull

  committed
  fb630d2

  Copy full SHA for fb630d2

• Java: Add model for CharArrayWriter.toString().

  aschackmull

  committed
  2d76752

  Copy full SHA for 2d76752

Commits on Sep 18, 2024

• Remove duplicate summary for `MultipartFile.getInputStream` and update `.expected` file

  mbaluda

  committed
  cab35a2

  Copy full SHA for cab35a2

• Address review

  mbaluda

  committed
  5ae51f0

  Copy full SHA for 5ae51f0

• Update org.springframework.core.io.model.yml

  Show description for cfa14ad
  mbaluda

  authored
  cfa14ad

  Copy full SHA for cfa14ad

Commits on Aug 28, 2024

• Java: Update the Byte- and CharBuffer models and add models for set- and getParameters on LogRecord.

  michaelnebel

  committed
  bd5529c

  Copy full SHA for bd5529c

Commits on Aug 27, 2024

• Java: Move some neutrals into the model.yml file (they have previosly been ignored due to wrong file extension).

  michaelnebel

  committed
  d79aa29

  Copy full SHA for d79aa29

• Java: Promote some generated models and add some manual neutrals.

  michaelnebel

  committed
  db51604

  Copy full SHA for db51604

Commits on Aug 21, 2024

• Merge pull request #14089 from am0o0/amammad-java-JWT

  Show description for 15989ce
  smowton

  authored
  15989ce

  Copy full SHA for 15989ce

Commits on Aug 16, 2024

• add getCredentials method of AuthenticationToken as a remote source

  am0o0

  committed
  d88b310

  Copy full SHA for d88b310

Commits on Aug 5, 2024

• Merge branch 'main' into am0o0-java-PathInjection

  smowton

  authored
  95e504a

  Copy full SHA for 95e504a

Commits on Jul 31, 2024

• Merge branch 'main' into jcogs33/java/add-apache-ant-path-inj-sinks

  jcogs33

  authored
  4fb29c4

  Copy full SHA for 4fb29c4

Commits on Jul 26, 2024

• Merge branch 'main' into jcogs33/java/add-apache-ant-path-inj-sinks

  jcogs33

  authored
  ff9093f

  Copy full SHA for ff9093f

Commits on Jul 25, 2024

• Java: fix 'regex-use' comments

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  eea3e82

  Copy full SHA for eea3e82

Commits on Jul 23, 2024

• Add comment by models using `regex-use` sink kind

  owen-mc

  committed
  3edeb82

  Copy full SHA for 3edeb82

Commits on Jul 19, 2024

• Java: add path injection sinks for Property.setFile and Property.setResource

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  f3e5b55

  Copy full SHA for f3e5b55