Commits

Commit history

1. Commits on Oct 30, 2023

   • Apply JMS sink only when there isn't an implementation available

     atorralba

     committed
     45cf50cView commit details

     Copy full SHA for 45cf50c

     View code at this pointBrowse repository at this point
2. Commits on Oct 24, 2023

   • Autoformat

     smowton

     committed
     e8c9708View commit details

     Copy full SHA for e8c9708

     View code at this pointBrowse repository at this point

   • Add aliases for public, importable renamed classes and predicates.

     Show description for 59a49ee
     smowton

     authored
     59a49eeView commit details

     Copy full SHA for 59a49ee

     View code at this pointBrowse repository at this point

   • Mass-rename MethodAccess -> MethodCall

     smowton

     authored
     f552a15View commit details

     Copy full SHA for f552a15

     View code at this pointBrowse repository at this point
3. Commits on Oct 13, 2023

   • Remove library annotations

     atorralba

     committed
     0cea3f8View commit details

     Copy full SHA for 0cea3f8

     View code at this pointBrowse repository at this point
4. Commits on Oct 4, 2023

   • Refactor Hudson file methods to MaD

     egregius313

     committed
     a1d3667View commit details

     Copy full SHA for a1d3667

     View code at this pointBrowse repository at this point
5. Commits on Oct 3, 2023

   • Java: Let RemoteFlowSource and LocalUserInput extends SourceNode and fine grain the LocalUserInput threat models.

     michaelnebel

     committed
     2055d54View commit details

     Copy full SHA for 2055d54

     View code at this pointBrowse repository at this point
6. Commits on Sep 22, 2023

   • Java: Add missing qldoc.

     aschackmull

     committed
     b11194eView commit details

     Copy full SHA for b11194e

     View code at this pointBrowse repository at this point

   • Java: Add missing flow step for ThreadLocal.initialValue.

     aschackmull

     committed
     8ee1f8aView commit details

     Copy full SHA for 8ee1f8a

     View code at this pointBrowse repository at this point
7. Commits on Sep 13, 2023

   • Java: Minor perf fix.

     aschackmull

     committed
     110a4c8View commit details

     Copy full SHA for 110a4c8

     View code at this pointBrowse repository at this point
8. Commits on Aug 24, 2023

   • Merge pull request #13900 from atorralba/atorralba/java/jaxws-getaremotemethod-improv

     Show description for 6b58d11
     atorralba

     authored
     6b58d11View commit details

     Copy full SHA for 6b58d11

     View code at this pointBrowse repository at this point

   • Two fixes:

     Show description for 3f9701c
     atorralba

     committed
     3f9701cView commit details

     Copy full SHA for 3f9701c

     View code at this pointBrowse repository at this point
9. Commits on Aug 23, 2023

   • Merge pull request #13773 from atorralba/atorralba/java/mdht-xxe-sink

     Show description for 0f3918a
     atorralba

     authored
     0f3918aView commit details

     Copy full SHA for 0f3918a

     View code at this pointBrowse repository at this point
10. Commits on Aug 17, 2023

    • Documentation fixes

      egregius313

      committed
      172b8a6View commit details

      Copy full SHA for 172b8a6

      View code at this pointBrowse repository at this point

    • Added ESAPI sanitizer

      egregius313

      committed
      55fae2dView commit details

      Copy full SHA for 55fae2d

      View code at this pointBrowse repository at this point

    • Trust Boundary Work

      egregius313

      committed
      f58590cView commit details

      Copy full SHA for f58590c

      View code at this pointBrowse repository at this point
11. Commits on Aug 7, 2023

    • Java: Improved JaxWsEndpoint::getARemoteMethod

      atorralba

      committed
      43b9199View commit details

      Copy full SHA for 43b9199

      View code at this pointBrowse repository at this point
12. Commits on Jul 31, 2023

    • Java: Add XXE sinks for MDHT

      atorralba

      committed
      2cbb7edView commit details

      Copy full SHA for 2cbb7ed

      View code at this pointBrowse repository at this point

    • Merge pull request #13772 from atorralba/atorralba/java/inputstream-wrapper-read-step

      Show description for 41f1315
      atorralba

      authored
      41f1315View commit details

      Copy full SHA for 41f1315

      View code at this pointBrowse repository at this point
13. Commits on Jul 28, 2023

    • Account for public fields/setters

      

      Alvaro Muñoz

      committed
      c3a2ae2View commit details

      Copy full SHA for c3a2ae2

      View code at this pointBrowse repository at this point
14. Commits on Jul 27, 2023

    • implement field taint inheritance for Struts2 unmarshalled objects

      

      Alvaro Muñoz

      authored and

      atorralba

      committed
      f3fc562View commit details

      Copy full SHA for f3fc562

      View code at this pointBrowse repository at this point
15. Commits on Jul 24, 2023

    • Update java/ql/lib/semmle/code/java/frameworks/InputStream.qll

      Show description for 6c0d47f
      

      atorralba

      and

      aschackmull

      committed
      6c0d47fView commit details

      Copy full SHA for 6c0d47f

      View code at this pointBrowse repository at this point

    • Make sure that InputStreamWrapperCapturedLocalStep is indeed local

      atorralba

      committed
      4e7438aView commit details

      Copy full SHA for 4e7438a

      View code at this pointBrowse repository at this point

    • Re-adds jump step

      Show description for d3b3af8
      atorralba

      committed
      d3b3af8View commit details

      Copy full SHA for d3b3af8

      View code at this pointBrowse repository at this point

    • Convert jump step into local step

      Show description for 36ff54b
      atorralba

      committed
      36ff54bView commit details

      Copy full SHA for 36ff54b

      View code at this pointBrowse repository at this point

    • Apply suggestions from code review

      Show description for f054f73
      

      atorralba

      and

      aschackmull

      committed
      f054f73View commit details

      Copy full SHA for f054f73

      View code at this pointBrowse repository at this point

    • Move steps to InputStream.qll

      atorralba

      committed
      1de6845View commit details

      Copy full SHA for 1de6845

      View code at this pointBrowse repository at this point

    • Use new TypeInputStream

      atorralba

      committed
      5330ce1View commit details

      Copy full SHA for 5330ce1

      View code at this pointBrowse repository at this point
16. Commits on Jul 10, 2023

    • Merge pull request #13702 from atorralba/atorralba/kotlin/apply

      Show description for b70e21d
      atorralba

      authored
      b70e21dView commit details

      Copy full SHA for b70e21d

      View code at this pointBrowse repository at this point

    • Kotlin: Support apply

      atorralba

      committed
      0f18c02View commit details

      Copy full SHA for 0f18c02

      View code at this pointBrowse repository at this point
17. Commits on Jun 30, 2023

    • Remove pragma[assume_small_delta]

      cklin

      committed
      ce464a7View commit details

      Copy full SHA for ce464a7

      View code at this pointBrowse repository at this point
18. Commits on Jun 27, 2023

    • Merge pull request #12879 from atorralba/atorralba/java/command-injection-mad-sinks

      Show description for a7c2a25
      atorralba

      authored
      a7c2a25View commit details

      Copy full SHA for a7c2a25

      View code at this pointBrowse repository at this point
19. Commits on Jun 15, 2023

    • QLDoc correction

      atorralba

      committed
      1b39faaView commit details

      Copy full SHA for 1b39faa

      View code at this pointBrowse repository at this point
20. Commits on Jun 14, 2023

    • Java: Model the Stapler framework

      atorralba

      committed
      5e3d9d8View commit details

      Copy full SHA for 5e3d9d8

      View code at this pointBrowse repository at this point

    • Merge pull request #13235 from atorralba/atorralba/java/hudson-models

      Show description for 182513a
      atorralba

      authored
      182513aView commit details

      Copy full SHA for 182513a

      View code at this pointBrowse repository at this point