Commits

Commit history

1. Commits on Nov 16, 2023

   • Merge pull request #14793 from github/max-schaefer/tainted-path-qhelp

     Show description for ca33402
     max-schaefer

     authored
     ca33402View commit details

     Copy full SHA for ca33402

     View code at this pointBrowse repository at this point

   • Revert "Add additional example."

     Show description for a5e7ef4
     

     Max Schaefer

     committed
     a5e7ef4View commit details

     Copy full SHA for a5e7ef4

     View code at this pointBrowse repository at this point

   • Add additional example.

     

     Max Schaefer

     committed
     947b094View commit details

     Copy full SHA for 947b094

     View code at this pointBrowse repository at this point

   • Address suggestions from review.

     

     Max Schaefer

     committed
     009d580View commit details

     Copy full SHA for 009d580

     View code at this pointBrowse repository at this point
2. Commits on Nov 15, 2023

   • Java: Improve QHelp for `java/path-injection` to mention less disruptive fixes.

     

     Max Schaefer

     committed
     a46a7faView commit details

     Copy full SHA for a46a7fa

     View code at this pointBrowse repository at this point
3. Commits on Oct 26, 2023

   • Java: Add JMS sink to java/unsafe-deserialization

     atorralba

     committed
     7af3d23View commit details

     Copy full SHA for 7af3d23

     View code at this pointBrowse repository at this point
4. Commits on Oct 24, 2023

   • Mass-rename MethodAccess -> MethodCall

     smowton

     authored
     f552a15View commit details

     Copy full SHA for f552a15

     View code at this pointBrowse repository at this point
5. Commits on Oct 17, 2023

   • Add consistency check exception

     atorralba

     committed
     4ecda9cView commit details

     Copy full SHA for 4ecda9c

     View code at this pointBrowse repository at this point
6. Commits on Oct 16, 2023

   • Java: Improve java/spring-disabled-csrf-protection

     atorralba

     committed
     d08ee76View commit details

     Copy full SHA for d08ee76

     View code at this pointBrowse repository at this point
7. Commits on Sep 22, 2023

   • Java: Add missing flow step for ThreadLocal.initialValue.

     aschackmull

     committed
     8ee1f8aView commit details

     Copy full SHA for 8ee1f8a

     View code at this pointBrowse repository at this point
8. Commits on Sep 21, 2023

   • Merge pull request #14268 from aschackmull/java/xmlparsers-typetrack

     Show description for 7e04ac5
     aschackmull

     authored
     7e04ac5View commit details

     Copy full SHA for 7e04ac5

     View code at this pointBrowse repository at this point
9. Commits on Sep 20, 2023

   • Java: Switch XmlParsers lib to lightweight data flow.

     aschackmull

     committed
     5c40d55View commit details

     Copy full SHA for 5c40d55

     View code at this pointBrowse repository at this point
10. Commits on Sep 18, 2023

    • Merge pull request #13778 from geoffw0/javaparsemode

      Show description for 4a37c2f
      yoff

      authored
      4a37c2fView commit details

      Copy full SHA for 4a37c2f

      View code at this pointBrowse repository at this point

    • Merge pull request #14029 from atorralba/atorralba/apache-cxf-models

      Show description for b08e410
      atorralba

      authored
      b08e410View commit details

      Copy full SHA for b08e410

      View code at this pointBrowse repository at this point
11. Commits on Sep 13, 2023

    • Java: Fix test comment.

      geoffw0

      committed
      af3d8c8View commit details

      Copy full SHA for af3d8c8

      View code at this pointBrowse repository at this point

    • Java: Port regex mode flag character fix from Python.

      geoffw0

      committed
      8c3e778View commit details

      Copy full SHA for 8c3e778

      View code at this pointBrowse repository at this point
12. Commits on Aug 30, 2023

    • Merge branch 'main' into starcke/automodel-pack

      starcke

      committed
      361ae17View commit details

      Copy full SHA for 361ae17

      View code at this pointBrowse repository at this point
13. Commits on Aug 29, 2023

    • Merge pull request #13954 from github/kaeluka/add-provenance-to-metadata

      Show description for 41726f5
      jhelie

      authored
      41726f5View commit details

      Copy full SHA for 41726f5

      View code at this pointBrowse repository at this point

    • Java: Automodel Framework Mode: Add Candidates for Regression Testing

      jhelie

      committed
      de76c07View commit details

      Copy full SHA for de76c07

      View code at this pointBrowse repository at this point
14. Commits on Aug 25, 2023

    • Java: Add new Apache CXF models

      atorralba

      committed
      2448bc8View commit details

      Copy full SHA for 2448bc8

      View code at this pointBrowse repository at this point
15. Commits on Aug 24, 2023

    • Java: Remove redundant inline expectation test imports

      jketema

      committed
      b550c06View commit details

      Copy full SHA for b550c06

      View code at this pointBrowse repository at this point

    • Consolidate all `InlineFlowTest` libraries in the dataflow qlpack

      jketema

      committed
      9d573e5View commit details

      Copy full SHA for 9d573e5

      View code at this pointBrowse repository at this point

    • Merge pull request #13903 from atorralba/atorralba/jaxrs-mad-models

      Show description for 8c32919
      atorralba

      authored
      8c32919View commit details

      Copy full SHA for 8c32919

      View code at this pointBrowse repository at this point
16. Commits on Aug 23, 2023

    • Merge pull request #13773 from atorralba/atorralba/java/mdht-xxe-sink

      Show description for 0f3918a
      atorralba

      authored
      0f3918aView commit details

      Copy full SHA for 0f3918a

      View code at this pointBrowse repository at this point
17. Commits on Aug 21, 2023

    • Java: Update SupportedExternalApis expected test output.

      michaelnebel

      committed
      699ed10View commit details

      Copy full SHA for 699ed10

      View code at this pointBrowse repository at this point

    • Java: Update the comments in SupportedExternalApis to include the neutral kind and add a sink neutral example.

      michaelnebel

      committed
      6deeb36View commit details

      Copy full SHA for 6deeb36

      View code at this pointBrowse repository at this point
18. Commits on Aug 17, 2023

    • Typos and style fixes

      Show description for 929090a
      

      egregius313

      and

      atorralba

      committed
      929090aView commit details

      Copy full SHA for 929090a

      View code at this pointBrowse repository at this point

    • Added ESAPI sanitizer

      egregius313

      committed
      55fae2dView commit details

      Copy full SHA for 55fae2d

      View code at this pointBrowse repository at this point

    • Stubs for `org.owasp.esapi`

      egregius313

      committed
      97d6e82View commit details

      Copy full SHA for 97d6e82

      View code at this pointBrowse repository at this point

    • Trust Boundary Work

      egregius313

      committed
      f58590cView commit details

      Copy full SHA for f58590c

      View code at this pointBrowse repository at this point

    • TrustBoundary test ql file

      egregius313

      committed
      2aba425View commit details

      Copy full SHA for 2aba425

      View code at this pointBrowse repository at this point

    • Merge branch 'main' into starcke/automodel-pack

      starcke

      committed
      56871c7View commit details

      Copy full SHA for 56871c7

      View code at this pointBrowse repository at this point
19. Commits on Aug 16, 2023

    • Merge branch 'main' into kaeluka/add-provenance-to-metadata

      

      Stephan Brandauer

      authored
      44a9cf9View commit details

      Copy full SHA for 44a9cf9

      View code at this pointBrowse repository at this point

    • Java: Automodel framework mode: track exact ai- provenance in alreadyAiModeled meta data property

      

      Stephan Brandauer

      committed
      808dc3eView commit details

      Copy full SHA for 808dc3e

      View code at this pointBrowse repository at this point

    • Merge pull request #13886 from github/kaeluka/java-automodel-variadic-args

      Show description for 20254c3
      

      Stephan Brandauer

      authored
      20254c3View commit details

      Copy full SHA for 20254c3

      View code at this pointBrowse repository at this point