Commits

Breadcrumbs

History for

oncodeql-cli/v2.16.1

User selector

All users

All time

Commit History

Commits on Jan 22, 2024

• delete outdated deprecations

  erik-krogh

  committed
  8be7ead

  Copy full SHA for 8be7ead

Commits on Jan 8, 2024

• Merge pull request #14681 from atorralba/atorralba/java/weak-randomness-cve-coverage

  Show description for 7e6f2d1
  atorralba

  authored
  7e6f2d1

  Copy full SHA for 7e6f2d1

Commits on Dec 15, 2023

• QLdoc fix

  egregius313

  committed
  09a0730

  Copy full SHA for 09a0730

• Move class for getProperty method call to Properties.qll

  egregius313

  committed
  02581a3

  Copy full SHA for 02581a3

Commits on Dec 14, 2023

• Merge pull request #14573 from hvitved/flow-summary-impl-param

  Show description for c8b4a21
  hvitved

  authored
  c8b4a21

  Copy full SHA for c8b4a21

Commits on Dec 13, 2023

• Add cookie sinks

  atorralba

  committed
  3a5d711

  Copy full SHA for 3a5d711

• Add sink for OpenSAML's RequestType.setID

  atorralba

  committed
  435d1f9

  Copy full SHA for 435d1f9

Commits on Dec 10, 2023

• Java: Use `FlowSummaryImpl` from `dataflow` pack

  hvitved

  committed
  f9dbf67

  Copy full SHA for f9dbf67

Commits on Dec 8, 2023

• Add private imports to prevent compile warnings

  egregius313

  committed
  aebbc7d

  Copy full SHA for aebbc7d

• Deprecate or remove imports of dataflow library copies

  egregius313

  committed
  1b8f3f3

  Copy full SHA for 1b8f3f3

Commits on Oct 30, 2023

• Apply JMS sink only when there isn't an implementation available

  atorralba

  committed
  45cf50c

  Copy full SHA for 45cf50c

Commits on Oct 24, 2023

• Autoformat

  smowton

  committed
  e8c9708

  Copy full SHA for e8c9708

• Add aliases for public, importable renamed classes and predicates.

  Show description for 59a49ee
  smowton

  authored
  59a49ee

  Copy full SHA for 59a49ee

• Mass-rename MethodAccess -> MethodCall

  smowton

  authored
  f552a15

  Copy full SHA for f552a15

Commits on Oct 13, 2023

• Remove library annotations

  atorralba

  committed
  0cea3f8

  Copy full SHA for 0cea3f8

Commits on Oct 4, 2023

• Refactor Hudson file methods to MaD

  egregius313

  committed
  a1d3667

  Copy full SHA for a1d3667

Commits on Oct 3, 2023

• Java: Let RemoteFlowSource and LocalUserInput extends SourceNode and fine grain the LocalUserInput threat models.

  michaelnebel

  committed
  2055d54

  Copy full SHA for 2055d54

Commits on Sep 22, 2023

• Java: Add missing qldoc.

  aschackmull

  committed
  b11194e

  Copy full SHA for b11194e

• Java: Add missing flow step for ThreadLocal.initialValue.

  aschackmull

  committed
  8ee1f8a

  Copy full SHA for 8ee1f8a

Commits on Sep 13, 2023

• Java: Minor perf fix.

  aschackmull

  committed
  110a4c8

  Copy full SHA for 110a4c8

Commits on Aug 24, 2023

• Merge pull request #13900 from atorralba/atorralba/java/jaxws-getaremotemethod-improv

  Show description for 6b58d11
  atorralba

  authored
  6b58d11

  Copy full SHA for 6b58d11

• Two fixes:

  Show description for 3f9701c
  atorralba

  committed
  3f9701c

  Copy full SHA for 3f9701c

Commits on Aug 23, 2023

• Merge pull request #13773 from atorralba/atorralba/java/mdht-xxe-sink

  Show description for 0f3918a
  atorralba

  authored
  0f3918a

  Copy full SHA for 0f3918a

Commits on Aug 17, 2023

• Documentation fixes

  egregius313

  committed
  172b8a6

  Copy full SHA for 172b8a6

• Added ESAPI sanitizer

  egregius313

  committed
  55fae2d

  Copy full SHA for 55fae2d

• Trust Boundary Work

  egregius313

  committed
  f58590c

  Copy full SHA for f58590c

Commits on Aug 7, 2023

• Java: Improved JaxWsEndpoint::getARemoteMethod

  atorralba

  committed
  43b9199

  Copy full SHA for 43b9199

Commits on Jul 31, 2023

• Java: Add XXE sinks for MDHT

  atorralba

  committed
  2cbb7ed

  Copy full SHA for 2cbb7ed

• Merge pull request #13772 from atorralba/atorralba/java/inputstream-wrapper-read-step

  Show description for 41f1315
  atorralba

  authored
  41f1315

  Copy full SHA for 41f1315

Commits on Jul 28, 2023

• Account for public fields/setters

  

  Alvaro Muñoz

  committed
  c3a2ae2

  Copy full SHA for c3a2ae2

Commits on Jul 27, 2023

• implement field taint inheritance for Struts2 unmarshalled objects

  

  Alvaro Muñoz

  authored and

  atorralba

  committed
  f3fc562

  Copy full SHA for f3fc562

Commits on Jul 24, 2023

• Update java/ql/lib/semmle/code/java/frameworks/InputStream.qll

  Show description for 6c0d47f
  

  atorralba

  and

  aschackmull

  committed
  6c0d47f

  Copy full SHA for 6c0d47f

• Make sure that InputStreamWrapperCapturedLocalStep is indeed local

  atorralba

  committed
  4e7438a

  Copy full SHA for 4e7438a

• Re-adds jump step

  Show description for d3b3af8
  atorralba

  committed
  d3b3af8

  Copy full SHA for d3b3af8

• Convert jump step into local step

  Show description for 36ff54b
  atorralba

  committed
  36ff54b

  Copy full SHA for 36ff54b