Commits

Commit history

1. Commits on Feb 16, 2026

   • Fix places which already dealt with both javax and jakarta

     owen-mc

     committed
     3184090View commit details

     Copy full SHA for 3184090

     View code at this pointBrowse repository at this point

   • Replace "javax" with `javaxOrJakarta()`

     Show description for a5e6f6d
     owen-mc

     committed
     a5e6f6dView commit details

     Copy full SHA for a5e6f6d

     View code at this pointBrowse repository at this point
2. Commits on Jan 8, 2026

   • Delete experimental models that have been promoted

     Show description for cce6823
     owen-mc

     committed
     cce6823View commit details

     Copy full SHA for cce6823

     View code at this pointBrowse repository at this point
3. Commits on Jan 27, 2025

   • Java: Deprecate experimental queries.

     michaelnebel

     committed
     e3997f6View commit details

     Copy full SHA for e3997f6

     View code at this pointBrowse repository at this point
4. Commits on Dec 3, 2024

   • Java: Update references to deleted aliases.

     aschackmull

     committed
     f38602eView commit details

     Copy full SHA for f38602e

     View code at this pointBrowse repository at this point
5. Commits on Jul 30, 2024

   • use more specefic Classes instead of `Call`

     am0o0

     committed
     40eef25View commit details

     Copy full SHA for 40eef25

     View code at this pointBrowse repository at this point
6. Commits on Jul 29, 2024

   • update tests for zip4j, add aditional flow steps for zip4j, remove BombTypeInputStream class since we don't need it anymore, add a predicate which was for testing porpose and was junk

     am0o0

     committed
     4dc1a10View commit details

     Copy full SHA for 4dc1a10

     View code at this pointBrowse repository at this point
7. Commits on Jul 28, 2024

   • we don't need ConstructorCall for ZipFile anymore since we have a more accurate sink for this

     am0o0

     committed
     0593eaaView commit details

     Copy full SHA for 0593eaa

     View code at this pointBrowse repository at this point

   • we don't need TypeInputStreamConstructorArgumentSink anymore

     am0o0

     committed
     cc75211View commit details

     Copy full SHA for cc75211

     View code at this pointBrowse repository at this point

   • change apache commons sink

     am0o0

     committed
     7689db7View commit details

     Copy full SHA for 7689db7

     View code at this pointBrowse repository at this point
8. Commits on Jul 18, 2024

   • remove duplicate sinks

     Show description for 7bb7d83
     am0o0

     committed
     7bb7d83View commit details

     Copy full SHA for 7bb7d83

     View code at this pointBrowse repository at this point
9. Commits on Jul 13, 2024

   • add the snappy missed sink

     am0o0

     committed
     025aa77View commit details

     Copy full SHA for 025aa77

     View code at this pointBrowse repository at this point

   • remove duplicate parts thanks to @owen-mc

     am0o0

     committed
     8c10696View commit details

     Copy full SHA for 8c10696

     View code at this pointBrowse repository at this point

   • move DecompressionBombsFlow::PathGraph to DecompressionBomb.ql

     am0o0

     committed
     dd3cc33View commit details

     Copy full SHA for dd3cc33

     View code at this pointBrowse repository at this point
10. Commits on Jul 9, 2024

    • MethodAccess => MethodCall

      am0o0

      committed
      7a5838fView commit details

      Copy full SHA for 7a5838f

      View code at this pointBrowse repository at this point

    • remove redundent imports

      am0o0

      committed
      e87d2feView commit details

      Copy full SHA for e87d2fe

      View code at this pointBrowse repository at this point
11. Commits on Jul 4, 2024

    • add stubs, upgrade test to inline test, update test files

      am0o0

      committed
      fe1103dView commit details

      Copy full SHA for fe1103d

      View code at this pointBrowse repository at this point
12. Commits on Jul 1, 2024

    • remove additional taint steps and flow states

      am0o0

      committed
      a683394View commit details

      Copy full SHA for a683394

      View code at this pointBrowse repository at this point

    • merge all ne flow sources into one by extending current abstract class

      am0o0

      committed
      d31711bView commit details

      Copy full SHA for d31711b

      View code at this pointBrowse repository at this point
13. Commits on May 12, 2024

    • remove useless predicate

      Show description for 02b0b40
      am0o0

      committed
      02b0b40View commit details

      Copy full SHA for 02b0b40

      View code at this pointBrowse repository at this point

    • remove empty predicates, fix FP for zipFile

      am0o0

      committed
      9fffd78View commit details

      Copy full SHA for 9fffd78

      View code at this pointBrowse repository at this point

    • remove unused predicate

      am0o0

      committed
      c9daf91View commit details

      Copy full SHA for c9daf91

      View code at this pointBrowse repository at this point

    • upgrade FlowState to new DecompressionState

      am0o0

      committed
      3eb5778View commit details

      Copy full SHA for 3eb5778

      View code at this pointBrowse repository at this point

    • update to MethodCall

      am0o0

      committed
      e23cbedView commit details

      Copy full SHA for e23cbed

      View code at this pointBrowse repository at this point

    • add new additional taint steps, fix some comments

      am0o0

      committed
      4b68dd2View commit details

      Copy full SHA for 4b68dd2

      View code at this pointBrowse repository at this point

    • Merge branch 'github:main' into amammad-java-bombs

      am0o0

      authored
      9946e07View commit details

      Copy full SHA for 9946e07

      View code at this pointBrowse repository at this point
14. Commits on Oct 24, 2023

    • Mass-rename MethodAccess -> MethodCall

      smowton

      authored
      f552a15View commit details

      Copy full SHA for f552a15

      View code at this pointBrowse repository at this point
15. Commits on Oct 14, 2023

    • modularize

      am0o0

      committed
      7fcf392View commit details

      Copy full SHA for 7fcf392

      View code at this pointBrowse repository at this point
16. Commits on Jun 2, 2023

    • delete old deprecations

      erik-krogh

      committed
      44b6366View commit details

      Copy full SHA for 44b6366

      View code at this pointBrowse repository at this point
17. Commits on Dec 5, 2022

    • Java: Remove unneeded imports of ExternalFlow.qll.

      michaelnebel

      committed
      4c7cdc6View commit details

      Copy full SHA for 4c7cdc6

      View code at this pointBrowse repository at this point
18. Commits on Oct 4, 2022

    • Move PathSanitizer to the main library

      atorralba

      committed
      50ad234View commit details

      Copy full SHA for 50ad234

      View code at this pointBrowse repository at this point
19. Commits on Sep 23, 2022

    • Remove unused code and update qldoc

      luchua-bc

      committed
      8effbffView commit details

      Copy full SHA for 8effbff

      View code at this pointBrowse repository at this point

    • Add test cases and reduce FPs

      luchua-bc

      committed
      e33d786View commit details

      Copy full SHA for e33d786

      View code at this pointBrowse repository at this point

    • Query to detect unsafe resource loading in Java Spring applications

      luchua-bc

      committed
      311c9e4View commit details

      Copy full SHA for 311c9e4

      View code at this pointBrowse repository at this point
20. Commits on Sep 7, 2022

    • Move files from experimental

      atorralba

      committed
      cd61bd0View commit details

      Copy full SHA for cd61bd0

      View code at this pointBrowse repository at this point