Commits

Commit history

1. Commits on Dec 12, 2023

   • Merge pull request #15073 from atorralba/atorralba/java/remove-invalid-ognl-sinks

     Show description for 27be5ba
     atorralba

     authored
     27be5baView commit details

     Copy full SHA for 27be5ba

     View code at this pointBrowse repository at this point

   • Update java/ql/lib/ext/struts2.model.yml

     Show description for fad53a2
     

     atorralba

     and

     aschackmull

     authored
     fad53a2View commit details

     Copy full SHA for fad53a2

     View code at this pointBrowse repository at this point

   • Java: Remove invalid OGNL sinks

     Show description for 103110f
     atorralba

     committed
     103110fView commit details

     Copy full SHA for 103110f

     View code at this pointBrowse repository at this point
2. Commits on Dec 11, 2023

   • Remove unnecessary crypto sinks

     egregius313

     committed
     1271cd3View commit details

     Copy full SHA for 1271cd3

     View code at this pointBrowse repository at this point

   • Move ESAPI models into the Weak Randomness query

     Show description for b9d2a26
     egregius313

     committed
     b9d2a26View commit details

     Copy full SHA for b9d2a26

     View code at this pointBrowse repository at this point

   • Remove extra `encryption-iv` models

     egregius313

     committed
     7f3995fView commit details

     Copy full SHA for 7f3995f

     View code at this pointBrowse repository at this point

   • Replace `convertBytesToString` with models

     egregius313

     committed
     7241e09View commit details

     Copy full SHA for 7241e09

     View code at this pointBrowse repository at this point

   • Remove use of `crypto-parameter` sink kind

     egregius313

     committed
     b8b2de2View commit details

     Copy full SHA for b8b2de2

     View code at this pointBrowse repository at this point

   • Cryptographic sinks

     egregius313

     committed
     0313f39View commit details

     Copy full SHA for 0313f39

     View code at this pointBrowse repository at this point
3. Commits on Nov 29, 2023

   • Java: switch to createRelative sink and add UrlPathHelper sources

     

     Jami Cogswell

     authored and

     Jami Cogswell

     committed
     ba3548bView commit details

     Copy full SHA for ba3548b

     View code at this pointBrowse repository at this point

   • Java: add taint steps for getResource sink

     

     Jami Cogswell

     authored and

     Jami Cogswell

     committed
     efa5ab1View commit details

     Copy full SHA for efa5ab1

     View code at this pointBrowse repository at this point
4. Commits on Nov 6, 2023

   • Add models for new Collections methods

     smowton

     committed
     24b4b05View commit details

     Copy full SHA for 24b4b05

     View code at this pointBrowse repository at this point

   • Java: model JDK21 SequencedCollection, Set and Map

     smowton

     committed
     5b72aeeView commit details

     Copy full SHA for 5b72aee

     View code at this pointBrowse repository at this point
5. Commits on Oct 31, 2023

   • Merge pull request #13978 from egregius313/egregius313/java/mad/convert-sensitive-api-to-mad

     Show description for 1ec1dd3
     egregius313

     authored
     1ec1dd3View commit details

     Copy full SHA for 1ec1dd3

     View code at this pointBrowse repository at this point
6. Commits on Oct 26, 2023

   • Merge remote-tracking branch 'origin/main' into dbartol/threat-models-2

     

     Dave Bartolomeo

     committed
     d2afb20View commit details

     Copy full SHA for d2afb20

     View code at this pointBrowse repository at this point
7. Commits on Oct 25, 2023

   • Add signature back to trilead ssh2 model

     egregius313

     committed
     f288ddcView commit details

     Copy full SHA for f288ddc

     View code at this pointBrowse repository at this point

   • Add signatures to models

     egregius313

     committed
     d923784View commit details

     Copy full SHA for d923784

     View code at this pointBrowse repository at this point

   • Remove additional net.schmizz.sshj models

     egregius313

     committed
     90c63abView commit details

     Copy full SHA for 90c63ab

     View code at this pointBrowse repository at this point

   • TrustType should be nested in sun.security.pkcs11.Secmod models

     Show description for 2fb4dfe
     

     egregius313

     and

     jcogs33

     committed
     2fb4dfeView commit details

     Copy full SHA for 2fb4dfe

     View code at this pointBrowse repository at this point

   • Make `SaltAndParams` be nested

     egregius313

     committed
     665b140View commit details

     Copy full SHA for 665b140

     View code at this pointBrowse repository at this point

   • Remove extra model

     Show description for 7002015
     

     egregius313

     and

     jcogs33

     committed
     7002015View commit details

     Copy full SHA for 7002015

     View code at this pointBrowse repository at this point

   • Set provenance of models from `otherApiCallableCredentialParam` to `manual` and remove extra models

     egregius313

     committed
     58dae6dView commit details

     Copy full SHA for 58dae6d

     View code at this pointBrowse repository at this point

   • Remove initialization vectors from SensitiveApi

     egregius313

     committed
     a28f19cView commit details

     Copy full SHA for a28f19c

     View code at this pointBrowse repository at this point

   • Remove extra models

     egregius313

     committed
     855d96dView commit details

     Copy full SHA for 855d96d

     View code at this pointBrowse repository at this point

   • Use `hq-generated` provenance

     egregius313

     committed
     02c98faView commit details

     Copy full SHA for 02c98fa

     View code at this pointBrowse repository at this point

   • Add missing GaloisCounterMode model

     egregius313

     committed
     1ad06f3View commit details

     Copy full SHA for 1ad06f3

     View code at this pointBrowse repository at this point

   • Replace crypto-parameter with credentials-key

     egregius313

     committed
     3b0b5e4View commit details

     Copy full SHA for 3b0b5e4

     View code at this pointBrowse repository at this point

   • Remove CipherBlockChaining#init

     egregius313

     committed
     a2bcc97View commit details

     Copy full SHA for a2bcc97

     View code at this pointBrowse repository at this point

   • Delete private methods

     egregius313

     committed
     743814aView commit details

     Copy full SHA for 743814a

     View code at this pointBrowse repository at this point

   • Remove redundant Cipher `init` methods

     Show description for c2d072e
     egregius313

     committed
     c2d072eView commit details

     Copy full SHA for c2d072e

     View code at this pointBrowse repository at this point

   • Delete private methods

     egregius313

     committed
     22d968fView commit details

     Copy full SHA for 22d968f

     View code at this pointBrowse repository at this point

   • Initialization vector models

     egregius313

     committed
     31b0690View commit details

     Copy full SHA for 31b0690

     View code at this pointBrowse repository at this point

   • Remove redundant `engineUnwrap` method models

     Show description for a8eb95a
     egregius313

     committed
     a8eb95aView commit details

     Copy full SHA for a8eb95a

     View code at this pointBrowse repository at this point

   • Delete private methods

     egregius313

     committed
     64d23d4View commit details

     Copy full SHA for 64d23d4

     View code at this pointBrowse repository at this point

   • Remove unneeded models

     egregius313

     committed
     5b2d226View commit details

     Copy full SHA for 5b2d226

     View code at this pointBrowse repository at this point