Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Mar 23, 2023

• Java: Rename references.

  aschackmull

  committed
  ec34d44

  Copy full SHA for ec34d44

Commits on Mar 7, 2023

• Java: Refactor RequestForgery.ql

  aschackmull

  committed
  cc75a1a

  Copy full SHA for cc75a1a

Commits on Oct 2, 2022

• make a few more queries consistent with the other languages

  erik-krogh

  committed
  39ffa55

  Copy full SHA for 39ffa55

Commits on Aug 4, 2021

• Update Security-Severity for CWE-918

  turbo

  committed
  a8f84da

  Copy full SHA for a8f84da

Commits on Jun 17, 2021

• Factor request-forgery config so it can be used in an inline-expectations test

  smowton

  committed
  b66dcbe

  Copy full SHA for b66dcbe

• Improve RequestForgery.qhelp recommendation

  smowton

  committed
  a665d5d

  Copy full SHA for a665d5d

• Copyedit comments and function names

  Show description for fb2989c
  

  smowton

  and

  felicitymay

  committed
  fb2989c

  Copy full SHA for fb2989c

• Java SSRF query: Server Side -> Server-Side everywhere.

  smowton

  committed
  575198a

  Copy full SHA for 575198a

• Java SSRF query: move RequestForgery qll file into semmle/code hierarchy

  Show description for 7899e17
  smowton

  committed
  7899e17

  Copy full SHA for 7899e17

• Java SSRF query: Provide hook for custom taint-propagating steps; make all default sinks/sanitizers/steps private.

  smowton

  committed
  532a10b

  Copy full SHA for 532a10b

• Java SSRF query: copyedit qhelp

  smowton

  committed
  e861336

  Copy full SHA for e861336

• Java SSRF query: sanitize primitives

  Show description for 3333e7d
  smowton

  committed
  3333e7d

  Copy full SHA for 3333e7d

• Add exactly the string '/' as a sanitizing prefix.

  Show description for 6933d06
  smowton

  committed
  6933d06

  Copy full SHA for 6933d06

• Fix typo

  smowton

  committed
  bc43b6d

  Copy full SHA for bc43b6d

• Add doc comments

  smowton

  committed
  e6249ee

  Copy full SHA for e6249ee

• SSRF: don't consider results of fetches we initiated to be untrustworthy

  smowton

  committed
  26e10f3

  Copy full SHA for 26e10f3

• Sanitize StringBuilder appends that follow directly from a constructor.

  Show description for c63d598
  smowton

  committed
  c63d598

  Copy full SHA for c63d598

• SSRF query: add sanitizer looking for a variety of ways of prepending a sanitizing prefix, such as one that restricts the hostname a URI will refer to.

  smowton

  committed
  b5a450b

  Copy full SHA for b5a450b

• Promote SSRF query to main query set

  smowton

  committed
  487c1db

  Copy full SHA for 487c1db

Loading