Commits

Breadcrumbs

History for

onc8b4a21

User selector

All users

All time

Commit History

Commits on Dec 12, 2023

• Merge pull request #15073 from atorralba/atorralba/java/remove-invalid-ognl-sinks

  Show description for 27be5ba
  atorralba

  authored
  27be5ba

  Copy full SHA for 27be5ba

• Update java/ql/lib/ext/struts2.model.yml

  Show description for fad53a2
  

  atorralba

  and

  aschackmull

  authored
  fad53a2

  Copy full SHA for fad53a2

• Java: Remove invalid OGNL sinks

  Show description for 103110f
  atorralba

  committed
  103110f

  Copy full SHA for 103110f

Commits on Dec 11, 2023

• Remove unnecessary crypto sinks

  egregius313

  committed
  1271cd3

  Copy full SHA for 1271cd3

• Move ESAPI models into the Weak Randomness query

  Show description for b9d2a26
  egregius313

  committed
  b9d2a26

  Copy full SHA for b9d2a26

• Remove extra `encryption-iv` models

  egregius313

  committed
  7f3995f

  Copy full SHA for 7f3995f

• Replace `convertBytesToString` with models

  egregius313

  committed
  7241e09

  Copy full SHA for 7241e09

• Remove use of `crypto-parameter` sink kind

  egregius313

  committed
  b8b2de2

  Copy full SHA for b8b2de2

• Cryptographic sinks

  egregius313

  committed
  0313f39

  Copy full SHA for 0313f39

Commits on Nov 29, 2023

• Java: switch to createRelative sink and add UrlPathHelper sources

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ba3548b

  Copy full SHA for ba3548b

• Java: add taint steps for getResource sink

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  efa5ab1

  Copy full SHA for efa5ab1

Commits on Nov 6, 2023

• Add models for new Collections methods

  smowton

  committed
  24b4b05

  Copy full SHA for 24b4b05

• Java: model JDK21 SequencedCollection, Set and Map

  smowton

  committed
  5b72aee

  Copy full SHA for 5b72aee

Commits on Oct 31, 2023

• Merge pull request #13978 from egregius313/egregius313/java/mad/convert-sensitive-api-to-mad

  Show description for 1ec1dd3
  egregius313

  authored
  1ec1dd3

  Copy full SHA for 1ec1dd3

Commits on Oct 26, 2023

• Merge remote-tracking branch 'origin/main' into dbartol/threat-models-2

  

  Dave Bartolomeo

  committed
  d2afb20

  Copy full SHA for d2afb20

Commits on Oct 25, 2023

• Add signature back to trilead ssh2 model

  egregius313

  committed
  f288ddc

  Copy full SHA for f288ddc

• Add signatures to models

  egregius313

  committed
  d923784

  Copy full SHA for d923784

• Remove additional net.schmizz.sshj models

  egregius313

  committed
  90c63ab

  Copy full SHA for 90c63ab

• TrustType should be nested in sun.security.pkcs11.Secmod models

  Show description for 2fb4dfe
  

  egregius313

  and

  jcogs33

  committed
  2fb4dfe

  Copy full SHA for 2fb4dfe

• Make `SaltAndParams` be nested

  egregius313

  committed
  665b140

  Copy full SHA for 665b140

• Remove extra model

  Show description for 7002015
  

  egregius313

  and

  jcogs33

  committed
  7002015

  Copy full SHA for 7002015

• Set provenance of models from `otherApiCallableCredentialParam` to `manual` and remove extra models

  egregius313

  committed
  58dae6d

  Copy full SHA for 58dae6d

• Remove initialization vectors from SensitiveApi

  egregius313

  committed
  a28f19c

  Copy full SHA for a28f19c

• Remove extra models

  egregius313

  committed
  855d96d

  Copy full SHA for 855d96d

• Use `hq-generated` provenance

  egregius313

  committed
  02c98fa

  Copy full SHA for 02c98fa

• Add missing GaloisCounterMode model

  egregius313

  committed
  1ad06f3

  Copy full SHA for 1ad06f3

• Replace crypto-parameter with credentials-key

  egregius313

  committed
  3b0b5e4

  Copy full SHA for 3b0b5e4

• Remove CipherBlockChaining#init

  egregius313

  committed
  a2bcc97

  Copy full SHA for a2bcc97

• Delete private methods

  egregius313

  committed
  743814a

  Copy full SHA for 743814a

• Remove redundant Cipher `init` methods

  Show description for c2d072e
  egregius313

  committed
  c2d072e

  Copy full SHA for c2d072e

• Delete private methods

  egregius313

  committed
  22d968f

  Copy full SHA for 22d968f

• Initialization vector models

  egregius313

  committed
  31b0690

  Copy full SHA for 31b0690

• Remove redundant `engineUnwrap` method models

  Show description for a8eb95a
  egregius313

  committed
  a8eb95a

  Copy full SHA for a8eb95a

• Delete private methods

  egregius313

  committed
  64d23d4

  Copy full SHA for 64d23d4

• Remove unneeded models

  egregius313

  committed
  5b2d226

  Copy full SHA for 5b2d226