Commits

History for

oncodeql-cli/v2.25.3

Commits on Jul 3, 2025

Fix java/netty-http-request-or-response-splitting overlay compilation regression
kaspersv
committed
425448a

Commits on Apr 30, 2025

Fix cwe tags to include leading zero
owen-mc
committed
cf614a5

Commits on May 1, 2024

Java: Deprecate the content of ResponseSplittingLocalQuery and remove local query variant.
michaelnebel
committed
b68abab

Commits on Feb 14, 2024

Fix typo in NettyRequestSplitting.java
JLLeitschuh
authored
50056d6

Commits on May 4, 2023

Add ResponseSplittingLocalQuery
egregius313
committed
e4f47ec

Commits on Mar 29, 2023

Move ResponseSplitting configuration to ResponseSplittingQuery.qll
egregius313
committed
3eaa94a

Commits on Mar 23, 2023

Java: Rename references.
aschackmull
committed
ec34d44

Commits on Mar 10, 2023

Merge branch 'main' into java/refactor-dataflow-queries-1
aschackmull
authored
64dd8b9
Java: Autoformat
aschackmull
committed
730eae9

Commits on Mar 7, 2023

Java: Refactor ResponseSplitting, ResponseSplittingLocal
aschackmull
committed
c4cf2fe

Commits on Sep 26, 2022

update alert-messsages of java queries
erik-krogh
committed
46b5bf3

Commits on Aug 19, 2022

Address PR comments.
Sebastian Bauersfeld
committed
2ec3746
Allow blacklist sanitizers.
Sebastian Bauersfeld
committed
f6d42bd
Fix up query tests.
Sebastian Bauersfeld
committed
11f527e

Commits on Aug 15, 2022

Remove reference to infosecwriters.com
sidshank
committed
02cd7bc

Commits on Feb 9, 2022

Remove CAPC and add CWE-93
JLLeitschuh
committed
ded8d64
Cleanup Netty Response Splitting Query
JLLeitschuh
committed
03fdee3
Apply suggestions from code review

JLLeitschuh
and
mattpollard
committed
8ffe878
Add HTTP Request Splitting to Netty Query
JLLeitschuh
committed
c732cb7

Commits on Jun 15, 2021

Update security-severity scores
calumgrant
committed
771e686

Commits on Jun 10, 2021

Add security-severity metadata
calumgrant
committed
a594afb

Commits on Jul 9, 2020

Commits on Jul 8, 2020

Extract `HeaderSplittingSink` and `WhitelistedSource`
rvermeulen
committed
5f560e0

Commits on Feb 5, 2020

Update java/ql/src/Security/CWE/CWE-113/NettyResponseSplitting.ql
JLLeitschuh
authored
60f2fa9

Commits on Feb 4, 2020

Add DefaultFullHttpResponse to Netty Check
JLLeitschuh
authored
832a4f2

Commits on Jan 3, 2020

Netty Response Splitting use CompileTimeConstantExpr

JLLeitschuh
and
aschackmull
authored
0e2c5db

Commits on Dec 17, 2019

Add io.netty.handler.codec.http.DefaultHttpResponse to Netty Response Splitting Detection
JLLeitschuh
committed
b218374

Commits on Oct 25, 2019

Apply suggestions from code review for netty DefaultHttpHeaders

JLLeitschuh
and
aschackmull
authored
934eed9

Commits on Oct 24, 2019

Add CWE-113 check for io.netty.handler.codec.http.DefaultHttpHeaders
JLLeitschuh
committed
dcbd6e0

Commits on Jun 27, 2019

Java: Add simple sanitizer for java/http-response-splitting.
aschackmull
committed
85eac80

Commits on May 6, 2019

Java: Deprecate RemoteUserInput.
aschackmull
committed
f367427

Commits on Nov 16, 2018

Java: Convert security queries to path-problems.
aschackmull
committed
5e03b6f

Commits on Oct 25, 2018

Java: Whitelist Cookie::getName for HTTP response splitting.
aschackmull
committed
1188e18