Commits

Breadcrumbs

History for

oncodeql-cli/v2.23.3

User selector

All users

All time

Commit History

Commits on Sep 1, 2025

• Java: Fix some Ql4Ql violations.

  michaelnebel

  committed
  77113b2

  Copy full SHA for 77113b2

Commits on Aug 26, 2025

• Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config-promotion

  jcogs33

  authored
  3675e4b

  Copy full SHA for 3675e4b

Commits on Aug 7, 2025

• Java: Simplify ArithmeticCommon using BarrierGuards.

  aschackmull

  committed
  b19f15b

  Copy full SHA for b19f15b

• Java: Enable validation wrappers in BarrierGuards.

  aschackmull

  committed
  a04ff18

  Copy full SHA for a04ff18

Commits on Jul 21, 2025

• Merge pull request #20077 from d10c/d10c/diff-informed-phase-3-java

  Show description for fbee6bb
  d10c

  authored
  fbee6bb

  Copy full SHA for fbee6bb

Commits on Jul 19, 2025

• Java: remove version debugging from alert message

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0dd33b2

  Copy full SHA for 0dd33b2

Commits on Jul 18, 2025

• Java: consider all endpoints except for health and info as sensitive to align with Spring docs

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  7250265

  Copy full SHA for 7250265

• Java: support 'management.endpoints.web.expose' property

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  685f68d

  Copy full SHA for 685f68d

• Java: minor refactoring

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  7d5e939

  Copy full SHA for 7d5e939

• Java: support version 3.x

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ea35fbb

  Copy full SHA for ea35fbb

Commits on Jul 17, 2025

• Java: add related location to alert message

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0d2a422

  Copy full SHA for 0d2a422

• Java: add overlay annotations

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ae163a9

  Copy full SHA for ae163a9

• Java: fix test case for version 1.4

  Show description for 2bfc4b4
  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  2bfc4b4

  Copy full SHA for 2bfc4b4

• Java: move code to .qll file

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  1b90a30

  Copy full SHA for 1b90a30

• [DIFF-INFORMED] Java: UnsafeCertTrust

  Show description for 24c28ed
  d10c

  committed
  24c28ed

  Copy full SHA for 24c28ed

• [DIFF-INFORMED] Java: TrustBoundaryViolation

  Show description for ea4af83
  d10c

  committed
  ea4af83

  Copy full SHA for ea4af83

• [DIFF-INFORMED] Java: TempDirLocalInformationDisclosure

  Show description for 7888dcb
  d10c

  committed
  7888dcb

  Copy full SHA for 7888dcb

• [DIFF-INFORMED] Java: TaintedEnvironmentVariable

  Show description for 3785dbe
  d10c

  committed
  3785dbe

  Copy full SHA for 3785dbe

• [DIFF-INFORMED] Java: SqlConcatenated

  Show description for b3b139b
  d10c

  committed
  b3b139b

  Copy full SHA for b3b139b

• [DIFF-INFORMED] Java: SensitiveLogging

  Show description for 45b627d
  d10c

  committed
  45b627d

  Copy full SHA for 45b627d

• [DIFF-INFORMED] Java: MaybeBrokenCryptoAlgorithm

  Show description for bc0b383
  d10c

  committed
  bc0b383

  Copy full SHA for bc0b383

• [DIFF-INFORMED] Java: LogInjection

  Show description for b688df9
  d10c

  committed
  b688df9

  Copy full SHA for b688df9

• [DIFF-INFORMED] Java: InsecureLdapAuth

  Show description for 2d73405
  d10c

  committed
  2d73405

  Copy full SHA for 2d73405

• [DIFF-INFORMED] Java: InsecureCookie

  Show description for 74b37e7
  d10c

  committed
  74b37e7

  Copy full SHA for 74b37e7

• [DIFF-INFORMED] Java: ImproperValidationOfArray…

  Show description for 19e5c3d
  d10c

  committed
  19e5c3d

  Copy full SHA for 19e5c3d

• [DIFF-INFORMED] Java: UntrustedDataToExternalAPI

  Show description for 1c6ecf1
  d10c

  committed
  1c6ecf1

  Copy full SHA for 1c6ecf1

• [DIFF-INFORMED] Java: ConditionalBypass

  Show description for 0cf1195
  d10c

  committed
  0cf1195

  Copy full SHA for 0cf1195

• [DIFF-INFORMED] Java: ArithmeticUncontrolled

  Show description for 0bcdb42
  d10c

  committed
  0bcdb42

  Copy full SHA for 0bcdb42

• [DIFF-INFORMED] Java: ArithmeticTainted

  Show description for 54546f6
  d10c

  committed
  54546f6

  Copy full SHA for 54546f6

• [DIFF-INFORMED] Java: (Android)SensitiveCommunication

  Show description for 8353fdd
  d10c

  committed
  8353fdd

  Copy full SHA for 8353fdd

• Java: Prune PathGraph for CsrfUnprotectedRequestType.ql

  aschackmull

  committed
  996de78

  Copy full SHA for 996de78

• Merge pull request #19885 from aschackmull/java/annotated-exit-cfg

  Show description for 1485d70
  aschackmull

  authored
  1485d70

  Copy full SHA for 1485d70

• Delete unused private class

  owen-mc

  committed
  b361f76

  Copy full SHA for b361f76

• Java: Add AnnotatedExitNodes to the CFG.

  aschackmull

  committed
  fbe79e8

  Copy full SHA for fbe79e8

Commits on Jul 16, 2025

• Use MaD models for unsafe deserialization sinks when possible

  Show description for fdd1e3f
  owen-mc

  committed
  fdd1e3f

  Copy full SHA for fdd1e3f