Commits

Breadcrumbs

History for

oncodeql-cli/v2.15.2

User selector

All users

All time

Commit History

Commits on Jun 19, 2023

• Adjust ZipSlip query description according to review suggestions.

  atorralba

  committed
  8f6d2ed

  Copy full SHA for 8f6d2ed

• Apply code review suggestions.

  Show description for 3c4d938
  

  atorralba

  and

  asgerf

  committed
  3c4d938

  Copy full SHA for 3c4d938

Commits on Jun 16, 2023

• Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query

  Show description for 3e96fe6
  atorralba

  committed
  3e96fe6

  Copy full SHA for 3e96fe6

Commits on Jun 2, 2023

• Add PathCreation.qll sinks to models-as-data

  Show description for 527fe52
  atorralba

  committed
  527fe52

  Copy full SHA for 527fe52

Commits on Mar 29, 2023

• Move ZipSlip configurations to Query.qll library

  egregius313

  committed
  367042b

  Copy full SHA for 367042b

• Move TaintedPath configurations to Query.qll

  egregius313

  committed
  ce2cab0

  Copy full SHA for ce2cab0

Commits on Mar 23, 2023

• Java: Rename references.

  aschackmull

  committed
  ec34d44

  Copy full SHA for ec34d44

Commits on Mar 20, 2023

• Fix naming of ZipSlip configuration

  egregius313

  committed
  84fd5f7

  Copy full SHA for 84fd5f7

• Make the Config module of public Flow modules public

  Show description for 60a4a79
  egregius313

  committed
  60a4a79

  Copy full SHA for 60a4a79

Commits on Mar 17, 2023

• Refactor Security.CWE.CWE-022.ZipSlip

  egregius313

  committed
  07fdcf2

  Copy full SHA for 07fdcf2

• Refactor Security.CWE.CWE-022.TaintedPathLocal

  egregius313

  committed
  e60e1a2

  Copy full SHA for e60e1a2

Commits on Mar 7, 2023

• Java: Refactor TaintedPath.ql

  aschackmull

  committed
  d839b40

  Copy full SHA for d839b40

Commits on Feb 11, 2023

• Java: update path-injection query to use new 'read-file' sink kind

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ce1c814

  Copy full SHA for ce1c814

Commits on Dec 2, 2022

• Java: fix syntax error in path-injection example fix

  smowton

  authored
  6e98c67

  Copy full SHA for 6e98c67

Commits on Oct 4, 2022

• Generalize file/path taint steps

  Show description for f19eb78
  atorralba

  committed
  f19eb78

  Copy full SHA for f19eb78

• Merge ZipSlip sanitization logic into PathSanitizer.qll

  Show description for 4e29c39
  atorralba

  committed
  4e29c39

  Copy full SHA for 4e29c39

• Use PathInjectionSanitizer in relevant queries

  atorralba

  committed
  08c67fb

  Copy full SHA for 08c67fb

• Apply TaintedPath recent changes to TaintedPathLocal

  atorralba

  committed
  dff878e

  Copy full SHA for dff878e

Commits on Sep 26, 2022

• update alert-messsages of java queries

  erik-krogh

  committed
  46b5bf3

  Copy full SHA for 46b5bf3

Commits on Sep 16, 2022

• Introduce TaintedPathAdditionalTaintStep

  Show description for fdc8453
  atorralba

  committed
  fdc8453

  Copy full SHA for fdc8453

• Address review comments.

  

  Sebastian Bauersfeld

  committed
  95478f1

  Copy full SHA for 95478f1

Commits on Sep 15, 2022

• Address review comments.

  

  Sebastian Bauersfeld

  committed
  20d7897

  Copy full SHA for 20d7897

Commits on Aug 3, 2022

• Make reporting locations consistent with PathCreation; add test

  smowton

  committed
  84a4b6a

  Copy full SHA for 84a4b6a

• Add missing import

  smowton

  authored
  83498f5

  Copy full SHA for 83498f5

Commits on Aug 2, 2022

• Don't require a PathCreation for every tainted-path sink

  smowton

  authored
  81f3bcd

  Copy full SHA for 81f3bcd

• Make java/path-injection recognise create-file MaD sinks

  smowton

  authored
  c95f17f

  Copy full SHA for c95f17f

Commits on May 24, 2022

• Java: Add support for BarrierGuards as parameterised modules.

  aschackmull

  committed
  a317736

  Copy full SHA for a317736

Commits on Feb 21, 2022

• Java: Performance tweaks

  igfoo

  committed
  7ce9b16

  Copy full SHA for 7ce9b16

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Apr 22, 2021

• Improve documentation of csv sink models

  tamasvajk

  committed
  7134eb9

  Copy full SHA for 7134eb9

Commits on Apr 9, 2021

• Java: Convert zipslip sinks to CSV format

  tamasvajk

  committed
  9e2832a

  Copy full SHA for 9e2832a

Commits on Oct 1, 2020

• Fix OWASP broken links

  smowton

  committed
  578ea1a

  Copy full SHA for 578ea1a

Commits on Jul 18, 2020

• Move tainted path ad-hoc guard back.

  intrigus

  committed
  f94055f

  Copy full SHA for f94055f

• Rename to getAnInput and clarify doc.

  intrigus

  committed
  4570444

  Copy full SHA for 4570444