Commits

Breadcrumbs

History for

oncodeql-cli/v2.23.3

User selector

All users

All time

Commit History

Commits on Aug 26, 2025

• Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config-promotion

  jcogs33

  authored
  3675e4b

  Copy full SHA for 3675e4b

Commits on Jul 19, 2025

• Java: fix test failures cause by alert msg change

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  c9692a6

  Copy full SHA for c9692a6

Commits on Jul 18, 2025

• Java: consider all endpoints except for health and info as sensitive to align with Spring docs

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  7250265

  Copy full SHA for 7250265

• Java: support 'management.endpoints.web.expose' property

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  685f68d

  Copy full SHA for 685f68d

• Java: rename to align with 'java/spring-boot-exposed-actuators' query

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  70d5150

  Copy full SHA for 70d5150

• Java: support version 3.x

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ea35fbb

  Copy full SHA for ea35fbb

Commits on Jul 17, 2025

• Java: add related location to alert message

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0d2a422

  Copy full SHA for 0d2a422

• Java: fix test case for version 1.4

  Show description for 2bfc4b4
  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  2bfc4b4

  Copy full SHA for 2bfc4b4

• Java: split tests by versions

  Show description for 3823186
  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  3823186

  Copy full SHA for 3823186

• Java: convert tests to inline expectations

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ed8da5e

  Copy full SHA for ed8da5e

• Java: update tests for non-experimental directory

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  fc930d9

  Copy full SHA for fc930d9

• Java: copy out of experimental

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  a39cb40

  Copy full SHA for a39cb40

• [TEST] Java: SensitiveCommunication: convert to qlref

  d10c

  committed
  b33058c

  Copy full SHA for b33058c

• [TEST] Java: ConditionalBypass: convert to qlref

  d10c

  committed
  44bb5e7

  Copy full SHA for 44bb5e7

• [TEST] Java: SensitiveLogInfo: convert to qlref

  d10c

  committed
  6134518

  Copy full SHA for 6134518

• [TEST] Java: TrustBoundaryViolations: convert test to qlref

  d10c

  committed
  94386f0

  Copy full SHA for 94386f0

• [TEST] Java: UnsafeCertTrust: convert test to qlref

  d10c

  committed
  49e03b4

  Copy full SHA for 49e03b4

• [TEST] Java: LogInjection: convert test to qlref

  d10c

  committed
  7aced48

  Copy full SHA for 7aced48

• [TEST] Java: CWE-020/ExternalAPI: new test based on qhelp

  d10c

  committed
  5c2cf79

  Copy full SHA for 5c2cf79

Commits on Jul 16, 2025

• Update test expectations

  owen-mc

  committed
  805e31f

  Copy full SHA for 805e31f

• Use MaD models for unsafe deserialization sinks when possible

  Show description for fdd1e3f
  owen-mc

  committed
  fdd1e3f

  Copy full SHA for fdd1e3f

Commits on Jul 11, 2025

• Add sink for ObjectInput.readObject to make test pass

  owen-mc

  committed
  8e4bd1a

  Copy full SHA for 8e4bd1a

• Add test for ObjectInput.readObject

  owen-mc

  committed
  34fae32

  Copy full SHA for 34fae32

Commits on Jul 8, 2025

• Java: Use MaD in log injection test

  hvitved

  committed
  6fdec47

  Copy full SHA for 6fdec47

Commits on Jun 26, 2025

• Java: convert ArbitraryApkInstallation test to .qlref

  d10c

  committed
  e0b3a2c

  Copy full SHA for e0b3a2c

Commits on Jun 24, 2025

• Java: add CleartextStorageCookie test

  Show description for 6904461
  d10c

  committed
  6904461

  Copy full SHA for 6904461

• Java: convert ImplicitPendingIntents test to .qlref

  d10c

  committed
  e213e3f

  Copy full SHA for e213e3f

• Java: convert ImproperIntentVerification test to .qlref

  Show description for e0311e2
  d10c

  committed
  e0311e2

  Copy full SHA for e0311e2

• Java: convert RequestForgery test to .qlref

  d10c

  committed
  aac4f63

  Copy full SHA for aac4f63

• Java: convert OgnlInjection test to .qlref

  d10c

  committed
  7f05b72

  Copy full SHA for 7f05b72

• Java: convert RsaWithoutOaep test to .qlref

  d10c

  committed
  cadfd0d

  Copy full SHA for cadfd0d

• Java: convert PolynomialReDoS and RegexInjection tests to .qlref

  Show description for b7e47e2
  d10c

  committed
  b7e47e2

  Copy full SHA for b7e47e2

• Java: convert XPathInjection test to .qlref

  d10c

  committed
  f5c7ef6

  Copy full SHA for f5c7ef6

• Java: convert XXE test to .qlref

  d10c

  committed
  162b1c5

  Copy full SHA for 162b1c5

• Java: convert UrlForward test to .qlref

  d10c

  committed
  7f33f57

  Copy full SHA for 7f33f57