Commits

Breadcrumbs

History for

oncodeql-cli-2.18.3

User selector

All users

All time

Commit History

Commits on Aug 6, 2024

• Java: Fix bad join

  Show description for a7410e4
  hvitved

  committed
  a7410e4

  Copy full SHA for a7410e4

Commits on Aug 2, 2024

• Merge pull request #17075 from RobbingDaHood/17052-second-try-do-not-expose-error-message

  Show description for 4d023f1
  aschackmull

  authored
  4d023f1

  Copy full SHA for 4d023f1

Commits on Jul 30, 2024

• Add "tokenizer" to sensitive variable name FPs

  owen-mc

  committed
  e259b25

  Copy full SHA for e259b25

• Factor out matching sensitive variable name FPs

  owen-mc

  committed
  0704946

  Copy full SHA for 0704946

Commits on Jul 25, 2024

• Now alerts about exposing `exception.getMessage()` in servlet responses are split out of `java/stack-trace-exposure` into its own alert `java/error-message-exposure` because this is a better fit.

  subaio-daniel-petersen

  committed
  1c1ba77

  Copy full SHA for 1c1ba77

Commits on Jul 23, 2024

• Update java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll

  Show description for b5b9c4d
  aschackmull

  authored
  b5b9c4d

  Copy full SHA for b5b9c4d

• Update java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll

  Show description for bb86a07
  aschackmull

  authored
  bb86a07

  Copy full SHA for bb86a07

• Update java/ql/lib/semmle/code/java/security/SensitiveLoggingQuery.qll

  Show description for 5912a17
  aschackmull

  authored
  5912a17

  Copy full SHA for 5912a17

Commits on Jul 22, 2024

• Move SensitiveLoggerConfig source to extensible format

  

  Salah Baddou

  committed
  2ad70cb

  Copy full SHA for 2ad70cb

Commits on Jul 16, 2024

• Merge pull request #16914 from owen-mc/java/android-app-detection

  Show description for e2356d9
  owen-mc

  authored
  e2356d9

  Copy full SHA for e2356d9

• Java: Remove superfluous clone models.

  aschackmull

  committed
  938f46b

  Copy full SHA for 938f46b

Commits on Jul 6, 2024

• Update Android app detection

  owen-mc

  committed
  5347770

  Copy full SHA for 5347770

Commits on Jul 5, 2024

• Move detection of Android app to one place

  owen-mc

  committed
  9c82966

  Copy full SHA for 9c82966

Commits on Jun 17, 2024

• Java: Opt-in the tainted permissions check query to threat models.

  michaelnebel

  committed
  327dab6

  Copy full SHA for 327dab6

Commits on Jun 4, 2024

• fix: remove rsa/ecb/* from `getASecureAlgorithmName`

  Show description for 65af255
  

  grakshith

  and

  atorralba

  committed
  65af255

  Copy full SHA for 65af255

• fix: address PR comments

  grakshith

  committed
  97f9a88

  Copy full SHA for 97f9a88

• fix: remove the pkcs1 scheme

  grakshith

  committed
  80bf7cd

  Copy full SHA for 80bf7cd

• feat: add rsa/ecb/... variants to the list of secure algorithms

  grakshith

  committed
  dd223ed

  Copy full SHA for dd223ed

Commits on May 30, 2024

• Update SpringCsrfProtection.qll

  mbaluda

  authored
  bbe888c

  Copy full SHA for bbe888c

• Disable csrf for ServerHttpSecurity

  mbaluda

  committed
  e2479a7

  Copy full SHA for e2479a7

Commits on May 22, 2024

• Java: Add simple type sanitization to java/zipslip.

  aschackmull

  committed
  d82acf5

  Copy full SHA for d82acf5

Commits on May 16, 2024

• Merge pull request #16362 from michaelnebel/java/removelocalqueries

  Show description for b1329fd
  michaelnebel

  authored
  b1329fd

  Copy full SHA for b1329fd

Commits on May 13, 2024

• Java: Clean up some instances of getQualifiedName.

  aschackmull

  committed
  76e740b

  Copy full SHA for 76e740b

Commits on May 3, 2024

• Java: Address review comments and some other code quality improvements.

  michaelnebel

  committed
  8def1c2

  Copy full SHA for 8def1c2

Commits on May 1, 2024

• Java: Deprecate the content of ExecTaintedLocalQuery as this is unused.

  michaelnebel

  committed
  58bbfe6

  Copy full SHA for 58bbfe6

• Java: Deprecate the local content of UrlRedirectLocalQuery and remove the local query variant.

  michaelnebel

  committed
  d9c7401

  Copy full SHA for d9c7401

• Java: Deprecate the local content of TaintedPathQuery and remove the local query variant.

  michaelnebel

  committed
  ed7538d

  Copy full SHA for ed7538d

• Java: Deprecate the content of SqlTaintedLocalQuery and remove the local query variant.

  michaelnebel

  committed
  5b89bd2

  Copy full SHA for 5b89bd2

• Java: Deprecate the content of ResponseSplittingLocalQuery and remove local query variant.

  michaelnebel

  committed
  b68abab

  Copy full SHA for b68abab

• Java: Deprecate the content of NumericCastTaintedLocalQuery, remove the local query variant and update the non-local query variant.

  michaelnebel

  committed
  d05c5e3

  Copy full SHA for d05c5e3

• Java: Deprecate the content of ImproperValidationOrArray and remove local query variants.

  michaelnebel

  committed
  301a6cc

  Copy full SHA for 301a6cc

• Java: Deprecate the content of ExternallyControlledFormatStringLocalQuery and remove the externally controlled format string local query variant.

  michaelnebel

  committed
  acd0fa4

  Copy full SHA for acd0fa4

• Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.

  michaelnebel

  committed
  85a4dd0

  Copy full SHA for 85a4dd0

• Java: Deprecate the content of ArithmeticTaintedLocalQuery and remove the arithmetic tainted local query variant.

  michaelnebel

  committed
  072f190

  Copy full SHA for 072f190

• Java: Deprecate the content of XxeLocalQuery and remove the Xxe local query variant.

  michaelnebel

  committed
  93988e5

  Copy full SHA for 93988e5