Commits

Breadcrumbs

History for

oncodeql-cli/v2.25.0

User selector

All users

All time

Commit History

Commits on Sep 3, 2024

• delete imports to a deleted file

  erik-krogh

  committed
  846882d

  Copy full SHA for 846882d

Commits on May 1, 2024

• Java: Deprecate the local content of TaintedPathQuery and remove the local query variant.

  michaelnebel

  committed
  ed7538d

  Copy full SHA for ed7538d

Commits on Jan 26, 2024

• Migrate path injection sinks to MaD

  Show description for 19cb7ad
  atorralba

  committed
  19cb7ad

  Copy full SHA for 19cb7ad

Commits on Jan 25, 2024

• add missing </p>

  erik-krogh

  committed
  73e3fad

  Copy full SHA for 73e3fad

• apply suggestions from doc review

  erik-krogh

  committed
  05a59d2

  Copy full SHA for 05a59d2

Commits on Jan 23, 2024

• add a trailing slash to the folder check in the QHelp for java/path-injection

  erik-krogh

  committed
  158ff0d

  Copy full SHA for 158ff0d

• delete the markdown file again

  erik-krogh

  committed
  00dadeb

  Copy full SHA for 00dadeb

• iterate on the java/path-injection qhelp

  erik-krogh

  committed
  57e0b3c

  Copy full SHA for 57e0b3c

• move the examples for the qhelps into an `example/` folder

  erik-krogh

  committed
  4958c19

  Copy full SHA for 4958c19

• check in the TaintedPath qhelp as markdown to get pretty diffs

  erik-krogh

  committed
  6b66f5c

  Copy full SHA for 6b66f5c

Commits on Nov 16, 2023

• Revert "Add additional example."

  Show description for a5e7ef4
  

  Max Schaefer

  committed
  a5e7ef4

  Copy full SHA for a5e7ef4

• Apply suggestions from code review

  Show description for 143e168
  

  max-schaefer

  and

  subatoi

  authored
  143e168

  Copy full SHA for 143e168

• Add additional example.

  

  Max Schaefer

  committed
  947b094

  Copy full SHA for 947b094

• Address suggestions from review.

  

  Max Schaefer

  committed
  009d580

  Copy full SHA for 009d580

Commits on Nov 15, 2023

• Java: Improve QHelp for `java/path-injection` to mention less disruptive fixes.

  

  Max Schaefer

  committed
  a46a7fa

  Copy full SHA for a46a7fa

Commits on Jun 19, 2023

• Adjust ZipSlip query description according to review suggestions.

  atorralba

  committed
  8f6d2ed

  Copy full SHA for 8f6d2ed

• Apply code review suggestions.

  Show description for 3c4d938
  

  atorralba

  and

  asgerf

  committed
  3c4d938

  Copy full SHA for 3c4d938

Commits on Jun 16, 2023

• Go/Java/JS/Python/Ruby: Update the description and qhelp of the ZipSlip query

  Show description for 3e96fe6
  atorralba

  committed
  3e96fe6

  Copy full SHA for 3e96fe6

Commits on Jun 2, 2023

• Add PathCreation.qll sinks to models-as-data

  Show description for 527fe52
  atorralba

  committed
  527fe52

  Copy full SHA for 527fe52

Commits on Mar 29, 2023

• Move ZipSlip configurations to Query.qll library

  egregius313

  committed
  367042b

  Copy full SHA for 367042b

• Move TaintedPath configurations to Query.qll

  egregius313

  committed
  ce2cab0

  Copy full SHA for ce2cab0

Commits on Mar 23, 2023

• Java: Rename references.

  aschackmull

  committed
  ec34d44

  Copy full SHA for ec34d44

Commits on Mar 20, 2023

• Fix naming of ZipSlip configuration

  egregius313

  committed
  84fd5f7

  Copy full SHA for 84fd5f7

• Make the Config module of public Flow modules public

  Show description for 60a4a79
  egregius313

  committed
  60a4a79

  Copy full SHA for 60a4a79

Commits on Mar 17, 2023

• Refactor Security.CWE.CWE-022.ZipSlip

  egregius313

  committed
  07fdcf2

  Copy full SHA for 07fdcf2

• Refactor Security.CWE.CWE-022.TaintedPathLocal

  egregius313

  committed
  e60e1a2

  Copy full SHA for e60e1a2

Commits on Mar 7, 2023

• Java: Refactor TaintedPath.ql

  aschackmull

  committed
  d839b40

  Copy full SHA for d839b40

Commits on Feb 11, 2023

• Java: update path-injection query to use new 'read-file' sink kind

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ce1c814

  Copy full SHA for ce1c814

Commits on Dec 2, 2022

• Java: fix syntax error in path-injection example fix

  smowton

  authored
  6e98c67

  Copy full SHA for 6e98c67

Commits on Oct 4, 2022

• Generalize file/path taint steps

  Show description for f19eb78
  atorralba

  committed
  f19eb78

  Copy full SHA for f19eb78

• Merge ZipSlip sanitization logic into PathSanitizer.qll

  Show description for 4e29c39
  atorralba

  committed
  4e29c39

  Copy full SHA for 4e29c39

• Use PathInjectionSanitizer in relevant queries

  atorralba

  committed
  08c67fb

  Copy full SHA for 08c67fb

• Apply TaintedPath recent changes to TaintedPathLocal

  atorralba

  committed
  dff878e

  Copy full SHA for dff878e

Commits on Sep 26, 2022

• update alert-messsages of java queries

  erik-krogh

  committed
  46b5bf3

  Copy full SHA for 46b5bf3

Commits on Sep 16, 2022

• Introduce TaintedPathAdditionalTaintStep

  Show description for fdc8453
  atorralba

  committed
  fdc8453

  Copy full SHA for fdc8453