Commits

Breadcrumbs

History for

oncodeql-cli/latest

User selector

All users

All time

Commit History

Commits on Jun 10, 2025

• Update ExecUnescaped.ql - causing FPs with hard coded strings

  Show description for 857b51b
  apsscolari

  authored
  857b51b

  Copy full SHA for 857b51b

Commits on May 1, 2024

• Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.

  michaelnebel

  committed
  85a4dd0

  Copy full SHA for 85a4dd0

Commits on Feb 6, 2024

• Reduce severity of `java/relative-path-command`

  Show description for 1484a16
  JLLeitschuh

  authored
  1484a16

  Copy full SHA for 1484a16

Commits on Jan 8, 2024

• Remove stray comma

  Show description for 55da62e
  

  egregius313

  and

  felicitymay

  committed
  55da62e

  Copy full SHA for 55da62e

• Remove off-topic reference

  Show description for 2440075
  

  egregius313

  and

  atorralba

  committed
  2440075

  Copy full SHA for 2440075

• Remove redundant CWE link

  Show description for 3816271
  

  egregius313

  and

  atorralba

  committed
  3816271

  Copy full SHA for 3816271

• Add comment

  egregius313

  committed
  2eff6b3

  Copy full SHA for 2eff6b3

• Add OWASP and CERT references

  egregius313

  committed
  16bb19e

  Copy full SHA for 16bb19e

• Add references to CWE-454 (External Initialization of Trusted Variables)

  egregius313

  committed
  9f97441

  Copy full SHA for 9f97441

• Add Java Tutorial reference

  egregius313

  committed
  97b29bb

  Copy full SHA for 97b29bb

• Docs review suggestions

  Show description for 938d52b
  

  egregius313

  and

  felicitymay

  committed
  938d52b

  Copy full SHA for 938d52b

• Add `BAD` markers to samples

  egregius313

  committed
  e14be0e

  Copy full SHA for e14be0e

• Reworded name and description

  egregius313

  committed
  18e8a27

  Copy full SHA for 18e8a27

• Fix typos

  Show description for 1f37e70
  

  egregius313

  and

  atorralba

  committed
  1f37e70

  Copy full SHA for 1f37e70

• Formatting fix

  egregius313

  committed
  51006aa

  Copy full SHA for 51006aa

• Fix alert message

  egregius313

  committed
  4fc6f71

  Copy full SHA for 4fc6f71

• Environment variable injection query documentation

  egregius313

  committed
  1550f5d

  Copy full SHA for 1550f5d

• security-severity metadata

  egregius313

  committed
  818c5de

  Copy full SHA for 818c5de

• Move to library

  egregius313

  committed
  8ed3f3c

  Copy full SHA for 8ed3f3c

• Initial ProcessBuilder support

  egregius313

  committed
  b482b36

  Copy full SHA for b482b36

• Argument injection initial commit

  egregius313

  committed
  93025cc

  Copy full SHA for 93025cc

Commits on May 25, 2023

• Convert all command injection sinks to MaD format

  atorralba

  committed
  a276cc3

  Copy full SHA for a276cc3

Commits on May 4, 2023

• Add ExecTaintedLocal

  egregius313

  committed
  aff299e

  Copy full SHA for aff299e

Commits on Mar 30, 2023

• Make LocalUserInputToArgumentToExecFlowConfig and LocalUserInputToArgumentToExecFlow importable

  atorralba

  committed
  3102199

  Copy full SHA for 3102199

• Add command injection sink kind

  atorralba

  committed
  534725f

  Copy full SHA for 534725f

Commits on Mar 29, 2023

• Fix ExecUnescaped

  egregius313

  committed
  a3c1d08

  Copy full SHA for a3c1d08

• Deprecate `execTainted`

  egregius313

  committed
  25359d2

  Copy full SHA for 25359d2

• Refactor CommandLineQuery.qll

  egregius313

  committed
  0249890

  Copy full SHA for 0249890

Commits on Mar 23, 2023

• Java: Rename references.

  aschackmull

  committed
  ec34d44

  Copy full SHA for ec34d44

Commits on Mar 20, 2023

• Remove "private" marker from configurations

  egregius313

  committed
  b64ca5d

  Copy full SHA for b64ca5d

• Refactor CWE-078/ExecTaintedLocal

  egregius313

  committed
  c1ee2dc

  Copy full SHA for c1ee2dc

Commits on Oct 1, 2022

• get a few more queries in sync with other languages

  erik-krogh

  committed
  129cda0

  Copy full SHA for 129cda0

Commits on Sep 26, 2022

• update alert-messsages of java queries

  erik-krogh

  committed
  46b5bf3

  Copy full SHA for 46b5bf3

Commits on Jul 1, 2021

• Deduplicate shared body of regular and experimental versions of `java/command-line-injection` query.

  smowton

  committed
  d5a9f3d

  Copy full SHA for d5a9f3d

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686