Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on Apr 21, 2026

• Merge pull request #21650 from MarkLee131/fix/sensitive-log-fp-regex

  Show description for c91b5b3
  owen-mc

  authored
  c91b5b3

  Copy full SHA for c91b5b3

Commits on Apr 20, 2026

• Merge pull request #21734 from owen-mc/java/fix-partial-path-traversal

  Show description for 9f310c2
  owen-mc

  authored
  9f310c2

  Copy full SHA for 9f310c2

Commits on Apr 19, 2026

• Fix bug so `+= File.separator` is recognized

  owen-mc

  committed
  6d4a397

  Copy full SHA for 6d4a397

• Add SPURIOUS test for `+= File.separator`

  owen-mc

  committed
  6099c5d

  Copy full SHA for 6099c5d

• Use inline expectations with second test

  Show description for 63d20a5
  

  owen-mc

  and

  Copilot

  committed
  63d20a5

  Copy full SHA for 63d20a5

Commits on Apr 18, 2026

• Make inline expectation comments specify query

  owen-mc

  committed
  dca7046

  Copy full SHA for dca7046

Commits on Apr 17, 2026

• Java: Add XXE sink model for Woodstox WstxInputFactory

  Show description for f5131f9
  

  Salah Baddou

  authored and

  chmodxxx

  committed
  f5131f9

  Copy full SHA for f5131f9

Commits on Apr 7, 2026

• Java: Pin CWE-676 test to --release 25

  Show description for 5a6eb79
  IdrissRio

  committed
  5a6eb79

  Copy full SHA for 5a6eb79

Commits on Apr 4, 2026

• Remove secretQuestion from FP exclusion list

  Show description for 46ef020
  MarkLee131

  committed
  46ef020

  Copy full SHA for 46ef020

• Java: reduce false positives in sensitive-log by expanding FP exclusion regex

  Show description for 20cfe29
  MarkLee131

  committed
  20cfe29

  Copy full SHA for 20cfe29

Commits on Mar 29, 2026

• Address review: update QLDoc comment and fix expected test output

  Show description for e6adfbc
  MarkLee131

  committed
  e6adfbc

  Copy full SHA for e6adfbc

• Merge branch 'main' into fix/tainted-arithmetic-bounds-check-barrier

  MarkLee131

  authored
  938039d

  Copy full SHA for 938039d

• Update java/ql/test/query-tests/security/CWE-190/semmle/tests/ArithmeticTainted.java

  Show description for f5cfc5e
  

  MarkLee131

  and

  owen-mc

  authored
  f5cfc5e

  Copy full SHA for f5cfc5e

Commits on Mar 28, 2026

• Exclude bounds-check arithmetic from tainted-arithmetic sinks

  Show description for 0c5e89a
  MarkLee131

  committed
  0c5e89a

  Copy full SHA for 0c5e89a

• Address PR review: add Signature.getInstance sink, HMAC/PBKDF2 whitelist, fix test APIs

  Show description for da4a223
  MarkLee131

  committed
  da4a223

  Copy full SHA for da4a223

• Add EC to secure algorithm whitelist for Java CWE-327 query

  MarkLee131

  committed
  a9449cc

  Copy full SHA for a9449cc

Commits on Mar 6, 2026

• Merge pull request #21415 from owen-mc/java/validate-constructor-summary-models

  Show description for e96ba48
  owen-mc

  authored
  e96ba48

  Copy full SHA for e96ba48

Commits on Mar 5, 2026

• Update models in test output

  owen-mc

  committed
  92a7190

  Copy full SHA for 92a7190

• Merge pull request #21412 from aschackmull/java/binary-assignment

  Show description for 8ef4be4
  aschackmull

  authored
  8ef4be4

  Copy full SHA for 8ef4be4

• Java: Make Assignment extend BinaryExpr.

  aschackmull

  committed
  ec1d034

  Copy full SHA for ec1d034

Commits on Mar 4, 2026

• Add space before $ in xml test file

  owen-mc

  committed
  2b31114

  Copy full SHA for 2b31114

• java: Inline expectation should have space before $

  owen-mc

  committed
  f41c30e

  Copy full SHA for f41c30e

• Java: Inline expectation should have space after $

  Show description for ef345a3
  owen-mc

  committed
  ef345a3

  Copy full SHA for ef345a3

Commits on Feb 23, 2026

• Java: Add nullness test covering known FP.

  aschackmull

  committed
  2b8e719

  Copy full SHA for 2b8e719

• Java: Accept removal of spurious reason (the alert stays).

  aschackmull

  committed
  d84e0e2

  Copy full SHA for d84e0e2

• Java: Accept new TP in NullMaybe.

  aschackmull

  committed
  8b0dd7b

  Copy full SHA for 8b0dd7b

Commits on Feb 16, 2026

• Update test results (remove SPURIOUS annotations)

  owen-mc

  committed
  cf73d96

  Copy full SHA for cf73d96

• Expand log injection sanitizers to annotation regex matches

  owen-mc

  committed
  9fc95f5

  Copy full SHA for 9fc95f5

• Add failing log injection test for @Pattern validation

  owen-mc

  committed
  146fc7a

  Copy full SHA for 146fc7a

Commits on Feb 14, 2026

• Fix Matcher.matches edge case

  owen-mc

  committed
  8f8f4c2

  Copy full SHA for 8f8f4c2

• Add failing test for Matcher.matches() edge case

  owen-mc

  committed
  90befa0

  Copy full SHA for 90befa0

Commits on Feb 12, 2026

• Add @Pattern as RegexExecution => SSRF sanitizer

  owen-mc

  committed
  bfe26c1

  Copy full SHA for bfe26c1

• Add failing test for @Pattern validation

  owen-mc

  committed
  d0999e3

  Copy full SHA for d0999e3

Commits on Feb 4, 2026

• Java: Rename ReturnStmt.getResult to getExpr.

  aschackmull

  committed
  6f40ac1

  Copy full SHA for 6f40ac1

Commits on Jan 27, 2026

• Add test for *Pool exclusion

  owen-mc

  committed
  516b84b

  Copy full SHA for 516b84b