Commits

Commit history

1. Commits on Nov 3, 2026

   • Merge pull request #22826 from owen-mc/java/constant-comparison-sanitizer

     Show description for aee0b13
     owen-mc

     authored
     aee0b13View commit details

     Copy full SHA for aee0b13

     View code at this pointBrowse repository at this point

   • Java: Exclude unnamed variables from java/local-variable-is-never-read

     Show description for f12b7a2
     

     riemenschneider

     and

     claude

     committed
     f12b7a2View commit details

     Copy full SHA for f12b7a2

     View code at this pointBrowse repository at this point
2. Commits on Oct 16, 2026

   • Java: Require non-null host allowlist matches

     Show description for a620278
     

     owen-mc

     and

     Copilot

     committed
     a620278View commit details

     Copy full SHA for a620278

     View code at this pointBrowse repository at this point

   • Java: Add null host allowlist regression tests

     Show description for df832a4
     

     owen-mc

     and

     Copilot

     committed
     df832a4View commit details

     Copy full SHA for df832a4

     View code at this pointBrowse repository at this point

   • Model substring match sanitizer guards

     Show description for 54fbda0
     

     owen-mc

     and

     Copilot

     committed
     54fbda0View commit details

     Copy full SHA for 54fbda0

     View code at this pointBrowse repository at this point

   • Model string match sanitizer guards

     Show description for c720695
     

     owen-mc

     and

     Copilot

     committed
     c720695View commit details

     Copy full SHA for c720695

     View code at this pointBrowse repository at this point

   • Add string replacement and removal concepts

     Show description for b633b8c
     

     owen-mc

     and

     Copilot

     committed
     b633b8cView commit details

     Copy full SHA for b633b8c

     View code at this pointBrowse repository at this point

   • Add barrier models for sanitizers where possible

     Show description for 5c929a3
     

     owen-mc

     and

     Copilot

     committed
     5c929a3View commit details

     Copy full SHA for 5c929a3

     View code at this pointBrowse repository at this point

   • Add tests with SPURIOUS results for sanitization

     Show description for b23b5ae
     

     owen-mc

     and

     Copilot

     committed
     b23b5aeView commit details

     Copy full SHA for b23b5ae

     View code at this pointBrowse repository at this point
3. Commits on Oct 15, 2026

   • Add string equality to ListOfConstantsSanitizer

     owen-mc

     committed
     e78e6b6View commit details

     Copy full SHA for e78e6b6

     View code at this pointBrowse repository at this point
4. Commits on Oct 14, 2026

   • Integrate URI host comparison tests into query suites

     theinfosecguy

     committed
     dac9f1bView commit details

     Copy full SHA for dac9f1b

     View code at this pointBrowse repository at this point
5. Commits on Sep 15, 2026

   • Improve URI host allowlist checks

     theinfosecguy

     committed
     b9af1d0View commit details

     Copy full SHA for b9af1d0

     View code at this pointBrowse repository at this point
6. Commits on Sep 3, 2026

   • Merge pull request #22269 from ppkarwasz/feat/xml-commons

     Show description for 18dae28
     owen-mc

     authored
     18dae28View commit details

     Copy full SHA for 18dae28

     View code at this pointBrowse repository at this point
7. Commits on Sep 2, 2026

   • Merge pull request #21387 from github/nicolaswill/micronaut

     Show description for ed2b77e
     owen-mc

     authored
     ed2b77eView commit details

     Copy full SHA for ed2b77e

     View code at this pointBrowse repository at this point
8. Commits on Aug 31, 2026

   • Merge remote-tracking branch 'ppkarwasz/feat/xml-commons' into feat/xml-commons

     ppkarwasz

     committed
     619da40View commit details

     Copy full SHA for 619da40

     View code at this pointBrowse repository at this point

   • Java: update the Commons XML model to the commons-secure-xml 1.0.0 API

     Show description for 546e64d
     ppkarwasz

     committed
     546e64dView commit details

     Copy full SHA for 546e64d

     View code at this pointBrowse repository at this point
9. Commits on Aug 25, 2026

   • Merge branch 'main' into feat/xml-commons

     ppkarwasz

     authored
     af6d1daView commit details

     Copy full SHA for af6d1da

     View code at this pointBrowse repository at this point
10. Commits on Aug 18, 2026

    • Java: update newSchemaFactory to the merged Commons XML 0.1.0 API

      Show description for 5f1e8b8
      ppkarwasz

      committed
      5f1e8b8View commit details

      Copy full SHA for 5f1e8b8

      View code at this pointBrowse repository at this point
11. Commits on Aug 10, 2026

    • Java: test safe R2DBC parameter binding

      Show description for 6919c3d
      felickz

      committed
      6919c3dView commit details

      Copy full SHA for 6919c3d

      View code at this pointBrowse repository at this point
12. Commits on Aug 4, 2026

    • Java: add R2DBC SPI SQL injection sinks

      Show description for 90b78c9
      felickz

      committed
      90b78c9View commit details

      Copy full SHA for 90b78c9

      View code at this pointBrowse repository at this point

    • Java: cover R2DBC fluent execution paths

      Show description for e079fdf
      felickz

      committed
      e079fdfView commit details

      Copy full SHA for e079fdf

      View code at this pointBrowse repository at this point

    • Java: model R2DBC SQL injection sinks

      Show description for 2e4a174
      felickz

      committed
      2e4a174View commit details

      Copy full SHA for 2e4a174

      View code at this pointBrowse repository at this point

    • Fix Micronaut inline test expectations

      nicolaswill

      committed
      126c292View commit details

      Copy full SHA for 126c292

      View code at this pointBrowse repository at this point

    • Merge remote-tracking branch 'origin/main' into nicolaswill-audit-micronaut-pr

      Show description for 9d164d0
      nicolaswill

      committed
      9d164d0View commit details

      Copy full SHA for 9d164d0

      View code at this pointBrowse repository at this point
13. Commits on Aug 2, 2026

    • Java: model org.apache.commons.xml XmlFactories as safe XXE sources

      Show description for dc16cbe
      ppkarwasz

      committed
      dc16cbeView commit details

      Copy full SHA for dc16cbe

      View code at this pointBrowse repository at this point
14. Commits on Jul 29, 2026

    • Correct Micronaut cookie and map coverage

      nicolaswill

      committed
      26b37adView commit details

      Copy full SHA for 26b37ad

      View code at this pointBrowse repository at this point

    • Address Micronaut modeling review feedback

      nicolaswill

      committed
      6ac1a72View commit details

      Copy full SHA for 6ac1a72

      View code at this pointBrowse repository at this point
15. Commits on Jul 11, 2026

    • Fix path sanitizer

      owen-mc

      committed
      6057b4bView commit details

      Copy full SHA for 6057b4b

      View code at this pointBrowse repository at this point
16. Commits on Jul 8, 2026

    • Merge pull request #22119 from owen-mc/java/fix-tainted-path-pattern-sanitization

      Show description for 134e302
      owen-mc

      authored
      134e302View commit details

      Copy full SHA for 134e302

      View code at this pointBrowse repository at this point
17. Commits on Jul 7, 2026

    • Java: Model Spring reactive `WebClient.uri` as a request forgery sink

      joshimar

      committed
      1db3132View commit details

      Copy full SHA for 1db3132

      View code at this pointBrowse repository at this point
18. Commits on Jul 3, 2026

    • Fix @Pattern sanitizer for TaintedPath

      owen-mc

      committed
      76b4f4fView commit details

      Copy full SHA for 76b4f4f

      View code at this pointBrowse repository at this point

    • Add failing TaintedPath test for @Pattern sanitizer

      owen-mc

      committed
      077b531View commit details

      Copy full SHA for 077b531

      View code at this pointBrowse repository at this point
19. Commits on Jun 12, 2026

    • Remove confusing comments

      owen-mc

      committed
      4bc083fView commit details

      Copy full SHA for 4bc083f

      View code at this pointBrowse repository at this point

    • Add SPURIOUS and MISSING alerts based on existing comments

      owen-mc

      committed
      89c1d66View commit details

      Copy full SHA for 89c1d66

      View code at this pointBrowse repository at this point
20. Commits on Jun 10, 2026

    • Second pass

      owen-mc

      committed
      3693185View commit details

      Copy full SHA for 3693185

      View code at this pointBrowse repository at this point