Commits

Commit history

1. Commits on Aug 21, 2024

   • Merge pull request #14089 from am0o0/amammad-java-JWT

     Show description for 15989ce
     smowton

     authored
     15989ceView commit details

     Copy full SHA for 15989ce

     View code at this pointBrowse repository at this point
2. Commits on Aug 16, 2024

   • update tests to contain the new source, delete query with local sources

     am0o0

     committed
     f476437View commit details

     Copy full SHA for f476437

     View code at this pointBrowse repository at this point

   • Merge pull request #16808 from JLLeitschuh/patch-8

     Show description for 3a96107
     aschackmull

     authored
     3a96107View commit details

     Copy full SHA for 3a96107

     View code at this pointBrowse repository at this point
3. Commits on Jul 31, 2024

   • fix formatting

     am0o0

     committed
     d560c1eView commit details

     Copy full SHA for d560c1e

     View code at this pointBrowse repository at this point

   • Merge branch 'amammad-java-JWT' of https://github.com/am0o0/codeql into amammad-java-JWT

     am0o0

     committed
     9110df6View commit details

     Copy full SHA for 9110df6

     View code at this pointBrowse repository at this point

   • merge duplicate module into a module file

     am0o0

     committed
     c6814fcView commit details

     Copy full SHA for c6814fc

     View code at this pointBrowse repository at this point

   • add same query but with local source support to comply with the CVE-2021-37580

     am0o0

     committed
     701e3d7View commit details

     Copy full SHA for 701e3d7

     View code at this pointBrowse repository at this point
4. Commits on Jul 30, 2024

   • use more specefic Classes instead of `Call`

     am0o0

     committed
     40eef25View commit details

     Copy full SHA for 40eef25

     View code at this pointBrowse repository at this point

   • Fix link

     smowton

     authored
     8f52b2cView commit details

     Copy full SHA for 8f52b2c

     View code at this pointBrowse repository at this point

   • Copyedit documentation

     smowton

     authored
     a781522View commit details

     Copy full SHA for a781522

     View code at this pointBrowse repository at this point
5. Commits on Jul 29, 2024

   • update tests for zip4j, add aditional flow steps for zip4j, remove BombTypeInputStream class since we don't need it anymore, add a predicate which was for testing porpose and was junk

     am0o0

     committed
     4dc1a10View commit details

     Copy full SHA for 4dc1a10

     View code at this pointBrowse repository at this point
6. Commits on Jul 28, 2024

   • Merge branch 'amammad-java-bombs' of https://github.com/am0o0/codeql into amammad-java-bombs

     am0o0

     committed
     c8749ffView commit details

     Copy full SHA for c8749ff

     View code at this pointBrowse repository at this point

   • we don't need ConstructorCall for ZipFile anymore since we have a more accurate sink for this

     am0o0

     committed
     0593eaaView commit details

     Copy full SHA for 0593eaa

     View code at this pointBrowse repository at this point

   • we don't need TypeInputStreamConstructorArgumentSink anymore

     am0o0

     committed
     cc75211View commit details

     Copy full SHA for cc75211

     View code at this pointBrowse repository at this point

   • change apache commons sink

     am0o0

     committed
     7689db7View commit details

     Copy full SHA for 7689db7

     View code at this pointBrowse repository at this point

   • remove flow states, remove string as sources

     am0o0

     committed
     b5e7716View commit details

     Copy full SHA for b5e7716

     View code at this pointBrowse repository at this point

   • use MethodCall instead of MethodAccess, change query id

     am0o0

     committed
     85b02b1View commit details

     Copy full SHA for 85b02b1

     View code at this pointBrowse repository at this point

   • Merge branch 'main' into amammad-java-JWT

     am0o0

     committed
     494f0b7View commit details

     Copy full SHA for 494f0b7

     View code at this pointBrowse repository at this point

   • comply with PascalCase/camelCase, remove redundant import

     am0o0

     committed
     14cf47bView commit details

     Copy full SHA for 14cf47b

     View code at this pointBrowse repository at this point
7. Commits on Jul 18, 2024

   • Merge branch 'main' into amammad-java-bombs

     owen-mc

     authored
     9a66e66View commit details

     Copy full SHA for 9a66e66

     View code at this pointBrowse repository at this point

   • remove duplicate sinks

     Show description for 7bb7d83
     am0o0

     committed
     7bb7d83View commit details

     Copy full SHA for 7bb7d83

     View code at this pointBrowse repository at this point
8. Commits on Jul 13, 2024

   • add the snappy missed sink

     am0o0

     committed
     025aa77View commit details

     Copy full SHA for 025aa77

     View code at this pointBrowse repository at this point

   • remove duplicate parts thanks to @owen-mc

     am0o0

     committed
     8c10696View commit details

     Copy full SHA for 8c10696

     View code at this pointBrowse repository at this point

   • fix examples

     am0o0

     committed
     8ba48e8View commit details

     Copy full SHA for 8ba48e8

     View code at this pointBrowse repository at this point

   • move DecompressionBombsFlow::PathGraph to DecompressionBomb.ql

     am0o0

     committed
     dd3cc33View commit details

     Copy full SHA for dd3cc33

     View code at this pointBrowse repository at this point

   • Update java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/DecompressionBomb.qhelp

     Show description for a3b5d2a
     

     am0o0

     and

     owen-mc

     authored
     a3b5d2aView commit details

     Copy full SHA for a3b5d2a

     View code at this pointBrowse repository at this point

   • Update java/ql/src/experimental/Security/CWE/CWE-522-DecompressionBombs/DecompressionBomb.qhelp

     Show description for 4fbf760
     

     am0o0

     and

     owen-mc

     authored
     4fbf760View commit details

     Copy full SHA for 4fbf760

     View code at this pointBrowse repository at this point
9. Commits on Jul 9, 2024

   • MethodAccess => MethodCall

     am0o0

     committed
     7a5838fView commit details

     Copy full SHA for 7a5838f

     View code at this pointBrowse repository at this point

   • remove redundent imports

     am0o0

     committed
     e87d2feView commit details

     Copy full SHA for e87d2fe

     View code at this pointBrowse repository at this point
10. Commits on Jul 4, 2024

    • add stubs, upgrade test to inline test, update test files

      am0o0

      committed
      fe1103dView commit details

      Copy full SHA for fe1103d

      View code at this pointBrowse repository at this point
11. Commits on Jul 1, 2024

    • remove additional taint steps and flow states

      am0o0

      committed
      a683394View commit details

      Copy full SHA for a683394

      View code at this pointBrowse repository at this point

    • merge all ne flow sources into one by extending current abstract class

      am0o0

      committed
      d31711bView commit details

      Copy full SHA for d31711b

      View code at this pointBrowse repository at this point

    • update qlhelp

      am0o0

      committed
      f1324a4View commit details

      Copy full SHA for f1324a4

      View code at this pointBrowse repository at this point
12. Commits on Jun 21, 2024

    • Align Java CommandInjectionRuntimeExec.ql Severity

      Show description for 472cca9
      JLLeitschuh

      authored
      472cca9View commit details

      Copy full SHA for 472cca9

      View code at this pointBrowse repository at this point
13. Commits on May 16, 2024

    • Merge pull request #16362 from michaelnebel/java/removelocalqueries

      Show description for b1329fd
      michaelnebel

      authored
      b1329fdView commit details

      Copy full SHA for b1329fd

      View code at this pointBrowse repository at this point