Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Jan 8, 2026

• Delete experimental models that have been promoted

  Show description for cce6823
  owen-mc

  committed
  cce6823

  Copy full SHA for cce6823

Commits on Jan 27, 2025

• Java: Deprecate experimental queries.

  michaelnebel

  committed
  e3997f6

  Copy full SHA for e3997f6

Commits on Dec 3, 2024

• Java: Update references to deleted aliases.

  aschackmull

  committed
  f38602e

  Copy full SHA for f38602e

Commits on Jul 30, 2024

• use more specefic Classes instead of `Call`

  am0o0

  committed
  40eef25

  Copy full SHA for 40eef25

Commits on Jul 29, 2024

• update tests for zip4j, add aditional flow steps for zip4j, remove BombTypeInputStream class since we don't need it anymore, add a predicate which was for testing porpose and was junk

  am0o0

  committed
  4dc1a10

  Copy full SHA for 4dc1a10

Commits on Jul 28, 2024

• we don't need ConstructorCall for ZipFile anymore since we have a more accurate sink for this

  am0o0

  committed
  0593eaa

  Copy full SHA for 0593eaa

• we don't need TypeInputStreamConstructorArgumentSink anymore

  am0o0

  committed
  cc75211

  Copy full SHA for cc75211

• change apache commons sink

  am0o0

  committed
  7689db7

  Copy full SHA for 7689db7

Commits on Jul 18, 2024

• remove duplicate sinks

  Show description for 7bb7d83
  am0o0

  committed
  7bb7d83

  Copy full SHA for 7bb7d83

Commits on Jul 13, 2024

• add the snappy missed sink

  am0o0

  committed
  025aa77

  Copy full SHA for 025aa77

• remove duplicate parts thanks to @owen-mc

  am0o0

  committed
  8c10696

  Copy full SHA for 8c10696

• move DecompressionBombsFlow::PathGraph to DecompressionBomb.ql

  am0o0

  committed
  dd3cc33

  Copy full SHA for dd3cc33

Commits on Jul 9, 2024

• MethodAccess => MethodCall

  am0o0

  committed
  7a5838f

  Copy full SHA for 7a5838f

• remove redundent imports

  am0o0

  committed
  e87d2fe

  Copy full SHA for e87d2fe

Commits on Jul 4, 2024

• add stubs, upgrade test to inline test, update test files

  am0o0

  committed
  fe1103d

  Copy full SHA for fe1103d

Commits on Jul 1, 2024

• remove additional taint steps and flow states

  am0o0

  committed
  a683394

  Copy full SHA for a683394

• merge all ne flow sources into one by extending current abstract class

  am0o0

  committed
  d31711b

  Copy full SHA for d31711b

Commits on May 12, 2024

• remove useless predicate

  Show description for 02b0b40
  am0o0

  committed
  02b0b40

  Copy full SHA for 02b0b40

• remove empty predicates, fix FP for zipFile

  am0o0

  committed
  9fffd78

  Copy full SHA for 9fffd78

• remove unused predicate

  am0o0

  committed
  c9daf91

  Copy full SHA for c9daf91

• upgrade FlowState to new DecompressionState

  am0o0

  committed
  3eb5778

  Copy full SHA for 3eb5778

• update to MethodCall

  am0o0

  committed
  e23cbed

  Copy full SHA for e23cbed

• add new additional taint steps, fix some comments

  am0o0

  committed
  4b68dd2

  Copy full SHA for 4b68dd2

• Merge branch 'github:main' into amammad-java-bombs

  am0o0

  authored
  9946e07

  Copy full SHA for 9946e07

Commits on Oct 24, 2023

• Mass-rename MethodAccess -> MethodCall

  smowton

  authored
  f552a15

  Copy full SHA for f552a15

Commits on Oct 14, 2023

• modularize

  am0o0

  committed
  7fcf392

  Copy full SHA for 7fcf392

Commits on Aug 31, 2022

• Merge pull request #9873 from luchua-bc/java/permissive-dot-regex

  Show description for 2ec53bf
  atorralba

  authored
  2ec53bf

  Copy full SHA for 2ec53bf

Commits on Aug 17, 2022

• Move static init vector query and tests from experimental to main

  joefarebrother

  committed
  f8f21c7

  Copy full SHA for f8f21c7

• Share SpringUrlRedirect library

  atorralba

  committed
  1d12bd1

  Copy full SHA for 1d12bd1

Commits on Aug 26, 2021

• Simplify StaticInitializationVectorSource

  Show description for 1dd4bf0
  

  artem-smotrakov

  and

  smowton

  committed
  1dd4bf0

  Copy full SHA for 1dd4bf0

Commits on Aug 25, 2021

• Simplify ArrayUpdate

  Show description for 23e2322
  

  artem-smotrakov

  and

  smowton

  authored
  23e2322

  Copy full SHA for 23e2322

• Better qldoc in StaticInitializationVectorQuery.qll

  Show description for f41828e
  

  artem-smotrakov

  and

  smowton

  authored
  f41828e

  Copy full SHA for f41828e

• Removed sanitizer in StaticInitializationVectorConfig

  artem-smotrakov

  committed
  f97c8bb

  Copy full SHA for f97c8bb

• Updated qldoc for ArrayUpdate

  artem-smotrakov

  committed
  86b7b2b

  Copy full SHA for 86b7b2b

• Don't consider copyOf() and clone() in ArrayUpdate

  artem-smotrakov

  committed
  c80a1da

  Copy full SHA for c80a1da