Commits

History for

oncodeql-cli/v2.26.2

Commits on May 8, 2026

Note that common standard library types can be vulnerable to gadget-chain attacks
owen-mc
committed
a5ef036

Commits on May 7, 2026

Do not make such a strong security claim

owen-mc
and
Copilot
authored
f2ea3b9
Clarify that deserialization that follows a schema is safe
owen-mc
committed
427b73e
Remove double spaces from qhelp
owen-mc
committed
7aa3fd8

Commits on Mar 13, 2026

Change @security-severity for log injection queries from 7.8 to 6.1
owen-mc
committed
056aa34
Change @security-severity for XSS queries from 6.1 to 7.8
owen-mc
committed
f58a6e5

Commits on Mar 4, 2026

Java: Inline expectation should have space after $
owen-mc
committed
ef345a3

Commits on Feb 16, 2026

Fix places which already dealt with both javax and jakarta
owen-mc
committed
3184090
Replace "javax" with `javaxOrJakarta()`
owen-mc
committed
a5e6f6d

Commits on Feb 4, 2026

Java: Rename ReturnStmt.getResult to getExpr.
aschackmull
committed
6f40ac1
Java: Rename UnaryExpr.getExpr to getOperand.
aschackmull
committed
5e6e64b

Commits on Dec 3, 2025

Use flowFrom.
aschackmull
committed
dc6d3fe

Commits on Nov 28, 2025

Improve formatting of tags #2
owen-mc
committed
220fd08

Commits on Oct 22, 2025

Commits on Oct 17, 2025

Merge pull request #20603 from owen-mc/update-broken-algo-qhelp
owen-mc
authored
66f95bc

Commits on Oct 14, 2025

Review suggestions - update comments and description
joefarebrother
committed
d8b37d0

Commits on Oct 8, 2025

Improve qhelp for broken crypto algo queries
owen-mc
committed
0bcdb91

Commits on Aug 26, 2025

Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config-promotion
jcogs33
authored
3675e4b

Commits on Jul 21, 2025

Commits on Jul 19, 2025

Java: remove version debugging from alert message

Jami Cogswell
authored and
Jami Cogswell
committed
0dd33b2

Commits on Jul 18, 2025

Java: rename to align with 'java/spring-boot-exposed-actuators' query

Jami Cogswell
authored and
Jami Cogswell
committed
70d5150
Java: adjust metadata and alert msg

Jami Cogswell
authored and
Jami Cogswell
committed
ea529b0
Java: minor refactoring

Jami Cogswell
authored and
Jami Cogswell
committed
7d5e939
Java: update qhelp

Jami Cogswell
authored and
Jami Cogswell
committed
afa6610

Commits on Jul 17, 2025

Java: add related location to alert message

Jami Cogswell
authored and
Jami Cogswell
committed
0d2a422
Java: fix test case for version 1.4

Jami Cogswell
authored and
Jami Cogswell
committed
2bfc4b4
Java: move code to .qll file

Jami Cogswell
authored and
Jami Cogswell
committed
1b90a30
Java: remove deprecation

Jami Cogswell
authored and
Jami Cogswell
committed
38260e7
Java: copy out of experimental

Jami Cogswell
authored and
Jami Cogswell
committed
a39cb40