Commits

Commit history

1. Commits on Oct 16, 2026

   • Use string concepts in path sanitizers

     Show description for 9a2a2c6
     

     owen-mc

     and

     Copilot

     committed
     9a2a2c6View commit details

     Copy full SHA for 9a2a2c6

     View code at this pointBrowse repository at this point

   • Model substring match sanitizer guards

     Show description for 54fbda0
     

     owen-mc

     and

     Copilot

     committed
     54fbda0View commit details

     Copy full SHA for 54fbda0

     View code at this pointBrowse repository at this point

   • Model string match sanitizer guards

     Show description for c720695
     

     owen-mc

     and

     Copilot

     committed
     c720695View commit details

     Copy full SHA for c720695

     View code at this pointBrowse repository at this point

   • Add string replacement and removal concepts

     Show description for b633b8c
     

     owen-mc

     and

     Copilot

     committed
     b633b8cView commit details

     Copy full SHA for b633b8c

     View code at this pointBrowse repository at this point

   • Add barrier models for sanitizers where possible

     Show description for 5c929a3
     

     owen-mc

     and

     Copilot

     committed
     5c929a3View commit details

     Copy full SHA for 5c929a3

     View code at this pointBrowse repository at this point

   • Add tests with SPURIOUS results for sanitization

     Show description for b23b5ae
     

     owen-mc

     and

     Copilot

     committed
     b23b5aeView commit details

     Copy full SHA for b23b5ae

     View code at this pointBrowse repository at this point
2. Commits on Oct 14, 2026

   • Integrate URI host comparison tests into query suites

     theinfosecguy

     committed
     dac9f1bView commit details

     Copy full SHA for dac9f1b

     View code at this pointBrowse repository at this point
3. Commits on Sep 15, 2026

   • Improve URI host allowlist checks

     theinfosecguy

     committed
     b9af1d0View commit details

     Copy full SHA for b9af1d0

     View code at this pointBrowse repository at this point
4. Commits on Sep 3, 2026

   • Merge pull request #22269 from ppkarwasz/feat/xml-commons

     Show description for 18dae28
     owen-mc

     authored
     18dae28View commit details

     Copy full SHA for 18dae28

     View code at this pointBrowse repository at this point
5. Commits on Sep 2, 2026

   • Merge pull request #21387 from github/nicolaswill/micronaut

     Show description for ed2b77e
     owen-mc

     authored
     ed2b77eView commit details

     Copy full SHA for ed2b77e

     View code at this pointBrowse repository at this point
6. Commits on Aug 31, 2026

   • Merge remote-tracking branch 'ppkarwasz/feat/xml-commons' into feat/xml-commons

     ppkarwasz

     committed
     619da40View commit details

     Copy full SHA for 619da40

     View code at this pointBrowse repository at this point

   • Java: update the Commons XML model to the commons-secure-xml 1.0.0 API

     Show description for 546e64d
     ppkarwasz

     committed
     546e64dView commit details

     Copy full SHA for 546e64d

     View code at this pointBrowse repository at this point
7. Commits on Aug 25, 2026

   • Merge branch 'main' into feat/xml-commons

     ppkarwasz

     authored
     af6d1daView commit details

     Copy full SHA for af6d1da

     View code at this pointBrowse repository at this point
8. Commits on Aug 18, 2026

   • Java: update newSchemaFactory to the merged Commons XML 0.1.0 API

     Show description for 5f1e8b8
     ppkarwasz

     committed
     5f1e8b8View commit details

     Copy full SHA for 5f1e8b8

     View code at this pointBrowse repository at this point
9. Commits on Aug 14, 2026

   • Java: Adapt to FlowSummaryImpl changes

     hvitved

     committed
     b1c5b5bView commit details

     Copy full SHA for b1c5b5b

     View code at this pointBrowse repository at this point
10. Commits on Aug 13, 2026

    • Merge pull request #22315 from github/copilot/fix-valueof-call-site-issue

      Show description for 9d247d6
      hvitved

      authored
      9d247d6View commit details

      Copy full SHA for 9d247d6

      View code at this pointBrowse repository at this point
11. Commits on Aug 11, 2026

    • Merge pull request #22192 from michaelnebel/shared/modelgengeneric

      Show description for 4e31516
      michaelnebel

      authored
      4e31516View commit details

      Copy full SHA for 4e31516

      View code at this pointBrowse repository at this point

    • Java: Update test expectations

      hvitved

      committed
      7e3c144View commit details

      Copy full SHA for 7e3c144

      View code at this pointBrowse repository at this point

    • Simplify test method signature

      Show description for c601c6c
      

      Copilot

      and

      hvitved

      authored
      c601c6cView commit details

      Copy full SHA for c601c6c

      View code at this pointBrowse repository at this point

    • Java: replace non-existent String.valueOf(CharSequence) summary with a synthetic callable for valueOf(Object) on CharSequence arguments

      Show description for 925d3e2
      

      Copilot

      and

      hvitved

      authored
      925d3e2View commit details

      Copy full SHA for 925d3e2

      View code at this pointBrowse repository at this point
12. Commits on Aug 10, 2026

    • Java: test safe R2DBC parameter binding

      Show description for 6919c3d
      felickz

      committed
      6919c3dView commit details

      Copy full SHA for 6919c3d

      View code at this pointBrowse repository at this point
13. Commits on Aug 4, 2026

    • Java: add R2DBC SPI SQL injection sinks

      Show description for 90b78c9
      felickz

      committed
      90b78c9View commit details

      Copy full SHA for 90b78c9

      View code at this pointBrowse repository at this point

    • Java: cover R2DBC fluent execution paths

      Show description for e079fdf
      felickz

      committed
      e079fdfView commit details

      Copy full SHA for e079fdf

      View code at this pointBrowse repository at this point

    • Java: model R2DBC SQL injection sinks

      Show description for 2e4a174
      felickz

      committed
      2e4a174View commit details

      Copy full SHA for 2e4a174

      View code at this pointBrowse repository at this point

    • Fix Micronaut inline test expectations

      nicolaswill

      committed
      126c292View commit details

      Copy full SHA for 126c292

      View code at this pointBrowse repository at this point

    • Merge remote-tracking branch 'origin/main' into nicolaswill-audit-micronaut-pr

      Show description for 9d164d0
      nicolaswill

      committed
      9d164d0View commit details

      Copy full SHA for 9d164d0

      View code at this pointBrowse repository at this point
14. Commits on Aug 2, 2026

    • Java: model org.apache.commons.xml XmlFactories as safe XXE sources

      Show description for dc16cbe
      ppkarwasz

      committed
      dc16cbeView commit details

      Copy full SHA for dc16cbe

      View code at this pointBrowse repository at this point
15. Commits on Jul 29, 2026

    • Correct Micronaut cookie and map coverage

      nicolaswill

      committed
      26b37adView commit details

      Copy full SHA for 26b37ad

      View code at this pointBrowse repository at this point

    • Address Micronaut modeling review feedback

      nicolaswill

      committed
      6ac1a72View commit details

      Copy full SHA for 6ac1a72

      View code at this pointBrowse repository at this point
16. Commits on Jul 28, 2026

    • Update java/ql/test/library-tests/dataflow/taintsources/MicronautConfig.java

      Show description for 3bf0c86
      

      mbaluda

      and

      owen-mc

      authored
      3bf0c86View commit details

      Copy full SHA for 3bf0c86

      View code at this pointBrowse repository at this point

    • Update java/ql/test/library-tests/frameworks/micronaut/MicronautConfigTest.java

      Show description for 2512213
      

      mbaluda

      and

      Copilot

      authored
      2512213View commit details

      Copy full SHA for 2512213

      View code at this pointBrowse repository at this point
17. Commits on Jul 17, 2026

    • Java: Add java generics test cases.

      michaelnebel

      committed
      f184d28View commit details

      Copy full SHA for f184d28

      View code at this pointBrowse repository at this point
18. Commits on Jul 11, 2026

    • Fix path sanitizer

      owen-mc

      committed
      6057b4bView commit details

      Copy full SHA for 6057b4b

      View code at this pointBrowse repository at this point
19. Commits on Jul 8, 2026

    • Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization

      Show description for 134e302
      owen-mc

      authored
      134e302View commit details

      Copy full SHA for 134e302

      View code at this pointBrowse repository at this point
20. Commits on Jul 7, 2026

    • Merge pull request #22132 from joshimar/java/spring-webclient-uri-ssrf-sink

      Show description for 8363d2d
      owen-mc

      authored
      8363d2dView commit details

      Copy full SHA for 8363d2d

      View code at this pointBrowse repository at this point