Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Jul 3, 2025

• Fix java/netty-http-request-or-response-splitting overlay compilation regression

  kaspersv

  committed
  425448a

  Copy full SHA for 425448a

Commits on Apr 30, 2025

• Fix cwe tags to include leading zero

  owen-mc

  committed
  cf614a5

  Copy full SHA for cf614a5

Commits on May 1, 2024

• Java: Deprecate the content of ResponseSplittingLocalQuery and remove local query variant.

  michaelnebel

  committed
  b68abab

  Copy full SHA for b68abab

Commits on Feb 14, 2024

• Fix typo in NettyRequestSplitting.java

  JLLeitschuh

  authored
  50056d6

  Copy full SHA for 50056d6

Commits on May 4, 2023

• Add ResponseSplittingLocalQuery

  egregius313

  committed
  e4f47ec

  Copy full SHA for e4f47ec

Commits on Mar 29, 2023

• Move ResponseSplitting configuration to ResponseSplittingQuery.qll

  egregius313

  committed
  3eaa94a

  Copy full SHA for 3eaa94a

Commits on Mar 23, 2023

• Java: Rename references.

  aschackmull

  committed
  ec34d44

  Copy full SHA for ec34d44

Commits on Mar 10, 2023

• Merge branch 'main' into java/refactor-dataflow-queries-1

  aschackmull

  authored
  64dd8b9

  Copy full SHA for 64dd8b9

• Java: Autoformat

  aschackmull

  committed
  730eae9

  Copy full SHA for 730eae9

Commits on Mar 7, 2023

• Java: Refactor ResponseSplitting, ResponseSplittingLocal

  aschackmull

  committed
  c4cf2fe

  Copy full SHA for c4cf2fe

Commits on Sep 26, 2022

• update alert-messsages of java queries

  erik-krogh

  committed
  46b5bf3

  Copy full SHA for 46b5bf3

Commits on Aug 19, 2022

• Address PR comments.

  

  Sebastian Bauersfeld

  committed
  2ec3746

  Copy full SHA for 2ec3746

• Allow blacklist sanitizers.

  

  Sebastian Bauersfeld

  committed
  f6d42bd

  Copy full SHA for f6d42bd

• Fix up query tests.

  

  Sebastian Bauersfeld

  committed
  11f527e

  Copy full SHA for 11f527e

Commits on Aug 15, 2022

• Remove reference to infosecwriters.com

  Show description for 02cd7bc
  sidshank

  committed
  02cd7bc

  Copy full SHA for 02cd7bc

Commits on Feb 9, 2022

• Remove CAPC and add CWE-93

  JLLeitschuh

  committed
  ded8d64

  Copy full SHA for ded8d64

• Cleanup Netty Response Splitting Query

  JLLeitschuh

  committed
  03fdee3

  Copy full SHA for 03fdee3

• Apply suggestions from code review

  Show description for 8ffe878
  

  JLLeitschuh

  and

  mattpollard

  committed
  8ffe878

  Copy full SHA for 8ffe878

• Add HTTP Request Splitting to Netty Query

  JLLeitschuh

  committed
  c732cb7

  Copy full SHA for c732cb7

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jul 9, 2020

• Move source and sink into importable library

  rvermeulen

  committed
  7435dac

  Copy full SHA for 7435dac

• Extend source and sink from DataFlow::Node instead of DataFlow::exprNode

  rvermeulen

  committed
  b66f391

  Copy full SHA for b66f391

• Rename TrustedSource to SafeHeaderSplittingSource

  rvermeulen

  committed
  fed506a

  Copy full SHA for fed506a

Commits on Jul 8, 2020

• Extract `HeaderSplittingSink` and `WhitelistedSource`

  Show description for 5f560e0
  rvermeulen

  committed
  5f560e0

  Copy full SHA for 5f560e0

Commits on Feb 5, 2020

• Update java/ql/src/Security/CWE/CWE-113/NettyResponseSplitting.ql

  JLLeitschuh

  authored
  60f2fa9

  Copy full SHA for 60f2fa9

Commits on Feb 4, 2020

• Add DefaultFullHttpResponse to Netty Check

  JLLeitschuh

  authored
  832a4f2

  Copy full SHA for 832a4f2

Commits on Jan 3, 2020

• Netty Response Splitting use CompileTimeConstantExpr

  Show description for 0e2c5db
  

  JLLeitschuh

  and

  aschackmull

  authored
  0e2c5db

  Copy full SHA for 0e2c5db

Commits on Dec 17, 2019

• Add io.netty.handler.codec.http.DefaultHttpResponse to Netty Response Splitting Detection

  Show description for b218374
  JLLeitschuh

  committed
  b218374

  Copy full SHA for b218374

Commits on Oct 25, 2019

• Apply suggestions from code review for netty DefaultHttpHeaders

  Show description for 934eed9
  

  JLLeitschuh

  and

  aschackmull

  authored
  934eed9

  Copy full SHA for 934eed9

Commits on Oct 24, 2019

• Add CWE-113 check for io.netty.handler.codec.http.DefaultHttpHeaders

  Show description for dcbd6e0
  JLLeitschuh

  committed
  dcbd6e0

  Copy full SHA for dcbd6e0

Commits on Jun 27, 2019

• Java: Add simple sanitizer for java/http-response-splitting.

  aschackmull

  committed
  85eac80

  Copy full SHA for 85eac80

Commits on May 6, 2019

• Java: Deprecate RemoteUserInput.

  aschackmull

  committed
  f367427

  Copy full SHA for f367427

Commits on Nov 16, 2018

• Java: Convert security queries to path-problems.

  aschackmull

  committed
  5e03b6f

  Copy full SHA for 5e03b6f

Commits on Oct 25, 2018

• Java: Whitelist Cookie::getName for HTTP response splitting.

  aschackmull

  committed
  1188e18

  Copy full SHA for 1188e18