Commits

Breadcrumbs

History for

oncodeql-cli/v2.20.7

User selector

All users

All time

Commit History

Commits on Feb 25, 2025

• Merge pull request #18848 from jbj/StaticInitializationVector-postprocess

  Show description for 2edc9af
  jbj

  authored
  2edc9af

  Copy full SHA for 2edc9af

Commits on Feb 24, 2025

• Merge pull request #18607 from owen-mc/java/xss-content-type-sanitizer

  Show description for 74a2495
  owen-mc

  authored
  74a2495

  Copy full SHA for 74a2495

• Java: StaticInitializationVector with postprocess

  Show description for 11a0a9f
  jbj

  committed
  11a0a9f

  Copy full SHA for 11a0a9f

Commits on Feb 18, 2025

• Merge pull request #18504 from jcogs33/jcogs33/java/file-constructor-path-sanitizer

  Show description for d94dc5a
  jcogs33

  authored
  d94dc5a

  Copy full SHA for d94dc5a

Commits on Feb 14, 2025

• Java: update tests

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  2bb6a39

  Copy full SHA for 2bb6a39

Commits on Jan 30, 2025

• Java: narrow query

  Show description for 530103e
  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  530103e

  Copy full SHA for 530103e

• Java: more name-based heuristic tests to test regex

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  d4114f6

  Copy full SHA for d4114f6

• Java: more database update tests and stubs

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0ab3768

  Copy full SHA for 0ab3768

• Java: Stapler tests and stubs

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  3bf6dc2

  Copy full SHA for 3bf6dc2

• Java: update InlineExpectationsTest import for new location

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  fa27689

  Copy full SHA for fa27689

• Java: remove exists variable in test

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ede9e78

  Copy full SHA for ede9e78

• Java: update .expected file contents

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  c9ad15c

  Copy full SHA for c9ad15c

• Java: add name-based heuristic

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  39ccde0

  Copy full SHA for 39ccde0

• Java: add taint-tracking config for execute to exclude FPs from non-update queries like select

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0f39011

  Copy full SHA for 0f39011

• Java: handle MyBatis annotations for insert/update/delete

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  97aaf4c

  Copy full SHA for 97aaf4c

• Java: initial tests

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  df77d49

  Copy full SHA for df77d49

Commits on Jan 28, 2025

• Fix XSS FPs when content type is safe

  owen-mc

  committed
  0ccf4ce

  Copy full SHA for 0ccf4ce

Commits on Jan 27, 2025

• Reformat inline expectations (space after `$`)

  owen-mc

  committed
  9f3572d

  Copy full SHA for 9f3572d

• Make test easier to understand

  owen-mc

  committed
  05fb22e

  Copy full SHA for 05fb22e

Commits on Jan 22, 2025

• Merge pull request #18340 from jbj/diff-informed-getASelectedLocation

  Show description for 773a98a
  jbj

  authored
  773a98a

  Copy full SHA for 773a98a

Commits on Jan 13, 2025

• Merge pull request #18161 from owen-mc/java/weak-crypto-algo-more-informative

  Show description for 8833019
  owen-mc

  authored
  8833019

  Copy full SHA for 8833019

Commits on Jan 6, 2025

• Spelling

  smowton

  authored
  03c6529

  Copy full SHA for 03c6529

• Exclude classes with a writeReplace method from serializability checks

  smowton

  committed
  5c2df36

  Copy full SHA for 5c2df36

Commits on Dec 20, 2024

• Java: Diff-informed UnsafeHostnameVerification.ql

  Show description for fea260b
  jbj

  committed
  fea260b

  Copy full SHA for fea260b

Commits on Dec 12, 2024

• Java: Update all test util paths to point to the new location.

  michaelnebel

  committed
  0a1d2d0

  Copy full SHA for 0a1d2d0

Commits on Dec 11, 2024

• Merge pull request #18153 from owen-mc/java/resttemplate-getforobject

  Show description for 066db76
  owen-mc

  authored
  066db76

  Copy full SHA for 066db76

Commits on Dec 4, 2024

• Java: add File.getName as a path injection sanitizer

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  121780c

  Copy full SHA for 121780c

Commits on Dec 3, 2024

• Java: Update expected test results

  jketema

  committed
  89d20fd

  Copy full SHA for 89d20fd

Commits on Nov 29, 2024

• Give reason why crypto algorithm is insecure

  owen-mc

  committed
  e6409e1

  Copy full SHA for e6409e1

• Improve model to remove some false positives

  owen-mc

  committed
  7648d39

  Copy full SHA for 7648d39

Commits on Nov 28, 2024

• Add models for third arg of getForObject

  Show description for b5fbf2e
  owen-mc

  committed
  b5fbf2e

  Copy full SHA for b5fbf2e

Commits on Nov 27, 2024

• Merge pull request #17901 from aschackmull/java/allowlist-sanitizer

  Show description for df2e2e5
  aschackmull

  authored
  df2e2e5

  Copy full SHA for df2e2e5

• Java: Fix semantic merge conflict in expected file.

  aschackmull

  committed
  85778f7

  Copy full SHA for 85778f7

Commits on Nov 26, 2024

• Java: Accept consistency failure.

  aschackmull

  committed
  a6fc41e

  Copy full SHA for a6fc41e

• Java: Adjust expected output.

  aschackmull

  committed
  38eb3e4

  Copy full SHA for 38eb3e4