Commits

Breadcrumbs

History for

oncodeql-cli/v2.20.7

User selector

All users

All time

Commit History

Commits on Feb 19, 2025

• Merge pull request #18692 from jcogs33/jcogs33/spring-csrf-qhelp-update

  Show description for 485ee5c
  jcogs33

  authored
  485ee5c

  Copy full SHA for 485ee5c

Commits on Feb 13, 2025

• Merge pull request #18645 from fabienpe/main

  Show description for dd102c4
  owen-mc

  authored
  dd102c4

  Copy full SHA for dd102c4

Commits on Feb 5, 2025

• Java: update qhelp to align with other csrf queries

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  dce89c5

  Copy full SHA for dce89c5

• Java: minor qhelp updates

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  c6a71cd

  Copy full SHA for c6a71cd

Commits on Feb 4, 2025

• Java: remove token section from qhelp overview

  Show description for 0367846
  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0367846

  Copy full SHA for 0367846

• Java: rewrite qhelp overview section; aligns with overview section used by Python and Ruby

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  f438282

  Copy full SHA for f438282

• Java: minor qhelp updates

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  283c3b1

  Copy full SHA for 283c3b1

• Moved comment to previous line if resulting in long line

  fabienpe

  committed
  9a37682

  Copy full SHA for 9a37682

Commits on Feb 3, 2025

• Java: qhelp wording updates

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  516df3b

  Copy full SHA for 516df3b

Commits on Jan 31, 2025

• Added missing "GOOD" and "BAD" to some examples

  fabienpe

  committed
  a9f107c

  Copy full SHA for a9f107c

Commits on Jan 30, 2025

• Java: minor qhelp update

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  577152e

  Copy full SHA for 577152e

• Java: expand qhelp, include Stapler examples

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ead224c

  Copy full SHA for ead224c

• Java: precision to medium

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  096f6f8

  Copy full SHA for 096f6f8

• Java: add name-based heuristic

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  39ccde0

  Copy full SHA for 39ccde0

• Java: add taint-tracking config for execute to exclude FPs from non-update queries like select

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0f39011

  Copy full SHA for 0f39011

• Java: initial tests

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  df77d49

  Copy full SHA for df77d49

• Java: add query

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  178b032

  Copy full SHA for 178b032

• Java: add qhelp

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0c69253

  Copy full SHA for 0c69253

Commits on Jan 13, 2025

• Merge pull request #18161 from owen-mc/java/weak-crypto-algo-more-informative

  Show description for 8833019
  owen-mc

  authored
  8833019

  Copy full SHA for 8833019

Commits on Dec 10, 2024

• Java: IPA the CFG

  owen-mc

  committed
  0f3dd6d

  Copy full SHA for 0f3dd6d

Commits on Nov 29, 2024

• Give reason why crypto algorithm is insecure

  owen-mc

  committed
  e6409e1

  Copy full SHA for e6409e1

Commits on Oct 18, 2024

• Java: remove unnecessary anchor and update page name

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  335c597

  Copy full SHA for 335c597

Commits on Oct 17, 2024

• Java: update qhelp link

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  88b7a9f

  Copy full SHA for 88b7a9f

Commits on Sep 16, 2024

• Java: Deprecate RefType.nestedName(), and add RefType.getNestedName()

  igfoo

  committed
  41ed6e6

  Copy full SHA for 41ed6e6

Commits on Sep 3, 2024

• delete imports to a deleted file

  erik-krogh

  committed
  846882d

  Copy full SHA for 846882d

Commits on Jul 29, 2024

• Minor changes to formulations for java/error-message-exposure

  Show description for 1cb5892
  

  RobbingDaHood

  and

  aschackmull

  authored
  1cb5892

  Copy full SHA for 1cb5892

Commits on Jul 25, 2024

• Now alerts about exposing `exception.getMessage()` in servlet responses are split out of `java/stack-trace-exposure` into its own alert `java/error-message-exposure` because this is a better fit.

  subaio-daniel-petersen

  committed
  1c1ba77

  Copy full SHA for 1c1ba77

Commits on Jul 11, 2024

• Java: Tag `java/non-https-url` with CWE-345

  max-schaefer

  authored
  d5d0cf5

  Copy full SHA for d5d0cf5

Commits on May 23, 2024

• Switch source and sink in TrustBoundaryViolation.ql

  aibaars

  authored
  b5b5fef

  Copy full SHA for b5b5fef

• Update TrustBoundaryViolation.ql

  aibaars

  committed
  d540675

  Copy full SHA for d540675

Commits on May 22, 2024

• Java: Reword recommendation section of XXE query

  atorralba

  committed
  5ec3335

  Copy full SHA for 5ec3335

Commits on May 16, 2024

• Merge pull request #16362 from michaelnebel/java/removelocalqueries

  Show description for b1329fd
  michaelnebel

  authored
  b1329fd

  Copy full SHA for b1329fd

Commits on May 15, 2024

• Simplify query.

  

  Max Schaefer

  committed
  3c47c11

  Copy full SHA for 3c47c11

Commits on May 13, 2024

• Java: Clean up some instances of getQualifiedName.

  aschackmull

  committed
  76e740b

  Copy full SHA for 76e740b

Commits on May 1, 2024

• Java: Deprecate the local content of UrlRedirectLocalQuery and remove the local query variant.

  michaelnebel

  committed
  d9c7401

  Copy full SHA for d9c7401