Commits

Commit history

1. Commits on Oct 26, 2026

   • Merge pull request #22880 from geoffw0/deadlink2

     Show description for ee9ff23
     geoffw0

     authored
     ee9ff23View commit details

     Copy full SHA for ee9ff23

     View code at this pointBrowse repository at this point
2. Commits on Oct 23, 2026

   • Replace dead link in many qhelp files.

     geoffw0

     committed
     e0654e0View commit details

     Copy full SHA for e0654e0

     View code at this pointBrowse repository at this point
3. Commits on Oct 21, 2026

   • Remove prohibited CWE-730 tag from queries

     Show description for bd80295
     

     jketema

     and

     Copilot

     committed
     bd80295View commit details

     Copy full SHA for bd80295

     View code at this pointBrowse repository at this point
4. Commits on Aug 22, 2026

   • Use HTTPS for Wikimedia query-help links

     miachillgood

     committed
     c8afb1dView commit details

     Copy full SHA for c8afb1d

     View code at this pointBrowse repository at this point
5. Commits on May 8, 2026

   • Note that common standard library types can be vulnerable to gadget-chain attacks

     owen-mc

     committed
     a5ef036View commit details

     Copy full SHA for a5ef036

     View code at this pointBrowse repository at this point
6. Commits on May 7, 2026

   • Do not make such a strong security claim

     Show description for f2ea3b9
     

     owen-mc

     and

     Copilot

     authored
     f2ea3b9View commit details

     Copy full SHA for f2ea3b9

     View code at this pointBrowse repository at this point

   • Clarify that deserialization that follows a schema is safe

     owen-mc

     committed
     427b73eView commit details

     Copy full SHA for 427b73e

     View code at this pointBrowse repository at this point

   • Remove double spaces from qhelp

     owen-mc

     committed
     7aa3fd8View commit details

     Copy full SHA for 7aa3fd8

     View code at this pointBrowse repository at this point
7. Commits on Mar 13, 2026

   • Change @security-severity for log injection queries from 7.8 to 6.1

     owen-mc

     committed
     056aa34View commit details

     Copy full SHA for 056aa34

     View code at this pointBrowse repository at this point

   • Change @security-severity for XSS queries from 6.1 to 7.8

     owen-mc

     committed
     f58a6e5View commit details

     Copy full SHA for f58a6e5

     View code at this pointBrowse repository at this point
8. Commits on Mar 4, 2026

   • Java: Inline expectation should have space after $

     Show description for ef345a3
     owen-mc

     committed
     ef345a3View commit details

     Copy full SHA for ef345a3

     View code at this pointBrowse repository at this point
9. Commits on Feb 16, 2026

   • Fix places which already dealt with both javax and jakarta

     owen-mc

     committed
     3184090View commit details

     Copy full SHA for 3184090

     View code at this pointBrowse repository at this point

   • Replace "javax" with `javaxOrJakarta()`

     Show description for a5e6f6d
     owen-mc

     committed
     a5e6f6dView commit details

     Copy full SHA for a5e6f6d

     View code at this pointBrowse repository at this point
10. Commits on Feb 4, 2026

    • Java: Rename ReturnStmt.getResult to getExpr.

      aschackmull

      committed
      6f40ac1View commit details

      Copy full SHA for 6f40ac1

      View code at this pointBrowse repository at this point

    • Java: Rename UnaryExpr.getExpr to getOperand.

      aschackmull

      committed
      5e6e64bView commit details

      Copy full SHA for 5e6e64b

      View code at this pointBrowse repository at this point
11. Commits on Dec 3, 2025

    • Use flowFrom.

      aschackmull

      committed
      dc6d3feView commit details

      Copy full SHA for dc6d3fe

      View code at this pointBrowse repository at this point
12. Commits on Nov 28, 2025

    • Improve formatting of tags #2

      owen-mc

      committed
      220fd08View commit details

      Copy full SHA for 220fd08

      View code at this pointBrowse repository at this point
13. Commits on Oct 22, 2025

    • Java: Lower security-severity for Insecure Cookie query to 4.0

      Napalys

      committed
      91b0aaaView commit details

      Copy full SHA for 91b0aaa

      View code at this pointBrowse repository at this point

    • CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

      Napalys

      committed
      fa47174View commit details

      Copy full SHA for fa47174

      View code at this pointBrowse repository at this point
14. Commits on Oct 17, 2025

    • Merge pull request #20603 from owen-mc/update-broken-algo-qhelp

      Show description for 66f95bc
      owen-mc

      authored
      66f95bcView commit details

      Copy full SHA for 66f95bc

      View code at this pointBrowse repository at this point
15. Commits on Oct 14, 2025

    • Review suggestions - update comments and description

      joefarebrother

      committed
      d8b37d0View commit details

      Copy full SHA for d8b37d0

      View code at this pointBrowse repository at this point
16. Commits on Oct 13, 2025

    • Update comments

      joefarebrother

      committed
      093b04fView commit details

      Copy full SHA for 093b04f

      View code at this pointBrowse repository at this point

    • Update tests and add inline expectations

      joefarebrother

      committed
      c799f93View commit details

      Copy full SHA for c799f93

      View code at this pointBrowse repository at this point

    • Update documentation, rename things and add more comments to explain how the implementation works, remove filter for test code (prefer to filter in code scanning ui than in query logic)

      joefarebrother

      committed
      e1cf3d3View commit details

      Copy full SHA for e1cf3d3

      View code at this pointBrowse repository at this point

    • Copy experimental query to main

      joefarebrother

      committed
      54aefe0View commit details

      Copy full SHA for 54aefe0

      View code at this pointBrowse repository at this point
17. Commits on Oct 8, 2025

    • Improve qhelp for broken crypto algo queries

      Show description for 0bcdb91
      owen-mc

      committed
      0bcdb91View commit details

      Copy full SHA for 0bcdb91

      View code at this pointBrowse repository at this point
18. Commits on Aug 26, 2025

    • Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config-promotion

      jcogs33

      authored
      3675e4bView commit details

      Copy full SHA for 3675e4b

      View code at this pointBrowse repository at this point
19. Commits on Jul 21, 2025

    • Merge pull request #20018 from owen-mc/java/snakeyaml-safe-unsafe-deserialization

      Show description for 472a6b5
      owen-mc

      authored
      472a6b5View commit details

      Copy full SHA for 472a6b5

      View code at this pointBrowse repository at this point

    • Merge pull request #20077 from d10c/d10c/diff-informed-phase-3-java

      Show description for fbee6bb
      d10c

      authored
      fbee6bbView commit details

      Copy full SHA for fbee6bb

      View code at this pointBrowse repository at this point
20. Commits on Jul 19, 2025

    • Java: remove version debugging from alert message

      

      Jami Cogswell

      authored and

      Jami Cogswell

      committed
      0dd33b2View commit details

      Copy full SHA for 0dd33b2

      View code at this pointBrowse repository at this point
21. Commits on Jul 18, 2025

    • Java: rename to align with 'java/spring-boot-exposed-actuators' query

      

      Jami Cogswell

      authored and

      Jami Cogswell

      committed
      70d5150View commit details

      Copy full SHA for 70d5150

      View code at this pointBrowse repository at this point

    • Java: adjust metadata and alert msg

      

      Jami Cogswell

      authored and

      Jami Cogswell

      committed
      ea529b0View commit details

      Copy full SHA for ea529b0

      View code at this pointBrowse repository at this point

    • Java: minor refactoring

      

      Jami Cogswell

      authored and

      Jami Cogswell

      committed
      7d5e939View commit details

      Copy full SHA for 7d5e939

      View code at this pointBrowse repository at this point

    • Java: update qhelp

      

      Jami Cogswell

      authored and

      Jami Cogswell

      committed
      afa6610View commit details

      Copy full SHA for afa6610

      View code at this pointBrowse repository at this point
22. Commits on Jul 17, 2025

    • Java: add related location to alert message

      

      Jami Cogswell

      authored and

      Jami Cogswell

      committed
      0d2a422View commit details

      Copy full SHA for 0d2a422

      View code at this pointBrowse repository at this point