Commits

Breadcrumbs

History for

oncodeql-cli/v2.19.4

User selector

All users

All time

Commit History

Commits on Sep 12, 2024

• mass rename to ActiveThreatModelSource

  RasmusWL

  committed
  8c10155

  Copy full SHA for 8c10155

Commits on Aug 21, 2024

• Merge pull request #14089 from am0o0/amammad-java-JWT

  Show description for 15989ce
  smowton

  authored
  15989ce

  Copy full SHA for 15989ce

Commits on Aug 16, 2024

• update tests to contain the new source, delete query with local sources

  am0o0

  committed
  f476437

  Copy full SHA for f476437

• Merge pull request #16808 from JLLeitschuh/patch-8

  Show description for 3a96107
  aschackmull

  authored
  3a96107

  Copy full SHA for 3a96107

Commits on Jul 31, 2024

• fix formatting

  am0o0

  committed
  d560c1e

  Copy full SHA for d560c1e

• Merge branch 'amammad-java-JWT' of https://github.com/am0o0/codeql into amammad-java-JWT

  am0o0

  committed
  9110df6

  Copy full SHA for 9110df6

• merge duplicate module into a module file

  am0o0

  committed
  c6814fc

  Copy full SHA for c6814fc

• add same query but with local source support to comply with the CVE-2021-37580

  am0o0

  committed
  701e3d7

  Copy full SHA for 701e3d7

Commits on Jul 30, 2024

• use more specefic Classes instead of `Call`

  am0o0

  committed
  40eef25

  Copy full SHA for 40eef25

• Fix link

  smowton

  authored
  8f52b2c

  Copy full SHA for 8f52b2c

• Copyedit documentation

  smowton

  authored
  a781522

  Copy full SHA for a781522

Commits on Jul 29, 2024

• update tests for zip4j, add aditional flow steps for zip4j, remove BombTypeInputStream class since we don't need it anymore, add a predicate which was for testing porpose and was junk

  am0o0

  committed
  4dc1a10

  Copy full SHA for 4dc1a10

Commits on Jul 28, 2024

• Merge branch 'amammad-java-bombs' of https://github.com/am0o0/codeql into amammad-java-bombs

  am0o0

  committed
  c8749ff

  Copy full SHA for c8749ff

• we don't need ConstructorCall for ZipFile anymore since we have a more accurate sink for this

  am0o0

  committed
  0593eaa

  Copy full SHA for 0593eaa

• we don't need TypeInputStreamConstructorArgumentSink anymore

  am0o0

  committed
  cc75211

  Copy full SHA for cc75211

• change apache commons sink

  am0o0

  committed
  7689db7

  Copy full SHA for 7689db7

• remove flow states, remove string as sources

  am0o0

  committed
  b5e7716

  Copy full SHA for b5e7716

• use MethodCall instead of MethodAccess, change query id

  am0o0

  committed
  85b02b1

  Copy full SHA for 85b02b1

• Merge branch 'main' into amammad-java-JWT

  am0o0

  committed
  494f0b7

  Copy full SHA for 494f0b7

• comply with PascalCase/camelCase, remove redundant import

  am0o0

  committed
  14cf47b

  Copy full SHA for 14cf47b

Commits on Jul 18, 2024

• Merge branch 'main' into amammad-java-bombs

  owen-mc

  authored
  9a66e66

  Copy full SHA for 9a66e66

• remove duplicate sinks

  Show description for 7bb7d83
  am0o0

  committed
  7bb7d83

  Copy full SHA for 7bb7d83

Commits on Jul 13, 2024

• add the snappy missed sink

  am0o0

  committed
  025aa77

  Copy full SHA for 025aa77

• remove duplicate parts thanks to @owen-mc

  am0o0

  committed
  8c10696

  Copy full SHA for 8c10696

• fix examples

  am0o0

  committed
  8ba48e8

  Copy full SHA for 8ba48e8

• move DecompressionBombsFlow::PathGraph to DecompressionBomb.ql

  am0o0

  committed
  dd3cc33

  Copy full SHA for dd3cc33

• Update java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/DecompressionBomb.qhelp

  Show description for a3b5d2a
  

  am0o0

  and

  owen-mc

  authored
  a3b5d2a

  Copy full SHA for a3b5d2a

• Update java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/DecompressionBomb.qhelp

  Show description for 4fbf760
  

  am0o0

  and

  owen-mc

  authored
  4fbf760

  Copy full SHA for 4fbf760

Commits on Jul 9, 2024

• MethodAccess => MethodCall

  am0o0

  committed
  7a5838f

  Copy full SHA for 7a5838f

• remove redundent imports

  am0o0

  committed
  e87d2fe

  Copy full SHA for e87d2fe

Commits on Jul 4, 2024

• add stubs, upgrade test to inline test, update test files

  am0o0

  committed
  fe1103d

  Copy full SHA for fe1103d

Commits on Jul 1, 2024

• remove additional taint steps and flow states

  am0o0

  committed
  a683394

  Copy full SHA for a683394

• merge all ne flow sources into one by extending current abstract class

  am0o0

  committed
  d31711b

  Copy full SHA for d31711b

• update qlhelp

  am0o0

  committed
  f1324a4

  Copy full SHA for f1324a4

Commits on Jun 21, 2024

• Align Java CommandInjectionRuntimeExec.ql Severity

  Show description for 472cca9
  JLLeitschuh

  authored
  472cca9

  Copy full SHA for 472cca9