Commits

Commit history

1. Commits on Nov 5, 2026

   • fix(java): match RSA prefix case-insensitively in RsaWithoutOaepQuery

     sam-robson

     committed
     fbcefd3View commit details

     Copy full SHA for fbcefd3

     View code at this pointBrowse repository at this point

   • fix(java): match mixed-case weak crypto algorithm strings

     sam-robson

     committed
     400d4c4View commit details

     Copy full SHA for 400d4c4

     View code at this pointBrowse repository at this point
2. Commits on Nov 3, 2026

   • Merge pull request #22826 from owen-mc/java/constant-comparison-sanitizer

     Show description for aee0b13
     owen-mc

     authored
     aee0b13View commit details

     Copy full SHA for aee0b13

     View code at this pointBrowse repository at this point

   • Java: Exclude unnamed variables from java/local-variable-is-never-read

     Show description for f12b7a2
     

     riemenschneider

     and

     claude

     committed
     f12b7a2View commit details

     Copy full SHA for f12b7a2

     View code at this pointBrowse repository at this point
3. Commits on Oct 16, 2026

   • Java: Require non-null host allowlist matches

     Show description for a620278
     

     owen-mc

     and

     Copilot

     committed
     a620278View commit details

     Copy full SHA for a620278

     View code at this pointBrowse repository at this point

   • Java: Add null host allowlist regression tests

     Show description for df832a4
     

     owen-mc

     and

     Copilot

     committed
     df832a4View commit details

     Copy full SHA for df832a4

     View code at this pointBrowse repository at this point

   • Use string concepts in path sanitizers

     Show description for 9a2a2c6
     

     owen-mc

     and

     Copilot

     committed
     9a2a2c6View commit details

     Copy full SHA for 9a2a2c6

     View code at this pointBrowse repository at this point

   • Model substring match sanitizer guards

     Show description for 54fbda0
     

     owen-mc

     and

     Copilot

     committed
     54fbda0View commit details

     Copy full SHA for 54fbda0

     View code at this pointBrowse repository at this point

   • Model string match sanitizer guards

     Show description for c720695
     

     owen-mc

     and

     Copilot

     committed
     c720695View commit details

     Copy full SHA for c720695

     View code at this pointBrowse repository at this point

   • Add string replacement and removal concepts

     Show description for b633b8c
     

     owen-mc

     and

     Copilot

     committed
     b633b8cView commit details

     Copy full SHA for b633b8c

     View code at this pointBrowse repository at this point

   • Add barrier models for sanitizers where possible

     Show description for 5c929a3
     

     owen-mc

     and

     Copilot

     committed
     5c929a3View commit details

     Copy full SHA for 5c929a3

     View code at this pointBrowse repository at this point

   • Add tests with SPURIOUS results for sanitization

     Show description for b23b5ae
     

     owen-mc

     and

     Copilot

     committed
     b23b5aeView commit details

     Copy full SHA for b23b5ae

     View code at this pointBrowse repository at this point
4. Commits on Oct 15, 2026

   • Rename test folder

     owen-mc

     committed
     eba0abbView commit details

     Copy full SHA for eba0abb

     View code at this pointBrowse repository at this point

   • Rename test class

     owen-mc

     committed
     6f5965bView commit details

     Copy full SHA for 6f5965b

     View code at this pointBrowse repository at this point

   • Add string equality to ListOfConstantsSanitizer

     owen-mc

     committed
     e78e6b6View commit details

     Copy full SHA for e78e6b6

     View code at this pointBrowse repository at this point
5. Commits on Oct 14, 2026

   • Integrate URI host comparison tests into query suites

     theinfosecguy

     committed
     dac9f1bView commit details

     Copy full SHA for dac9f1b

     View code at this pointBrowse repository at this point
6. Commits on Sep 15, 2026

   • Improve URI host allowlist checks

     theinfosecguy

     committed
     b9af1d0View commit details

     Copy full SHA for b9af1d0

     View code at this pointBrowse repository at this point
7. Commits on Sep 3, 2026

   • Merge pull request #22269 from ppkarwasz/feat/xml-commons

     Show description for 18dae28
     owen-mc

     authored
     18dae28View commit details

     Copy full SHA for 18dae28

     View code at this pointBrowse repository at this point
8. Commits on Sep 2, 2026

   • Merge pull request #21387 from github/nicolaswill/micronaut

     Show description for ed2b77e
     owen-mc

     authored
     ed2b77eView commit details

     Copy full SHA for ed2b77e

     View code at this pointBrowse repository at this point
9. Commits on Aug 31, 2026

   • Merge remote-tracking branch 'ppkarwasz/feat/xml-commons' into feat/xml-commons

     ppkarwasz

     committed
     619da40View commit details

     Copy full SHA for 619da40

     View code at this pointBrowse repository at this point

   • Java: update the Commons XML model to the commons-secure-xml 1.0.0 API

     Show description for 546e64d
     ppkarwasz

     committed
     546e64dView commit details

     Copy full SHA for 546e64d

     View code at this pointBrowse repository at this point
10. Commits on Aug 25, 2026

    • Merge branch 'main' into feat/xml-commons

      ppkarwasz

      authored
      af6d1daView commit details

      Copy full SHA for af6d1da

      View code at this pointBrowse repository at this point
11. Commits on Aug 18, 2026

    • Java: update newSchemaFactory to the merged Commons XML 0.1.0 API

      Show description for 5f1e8b8
      ppkarwasz

      committed
      5f1e8b8View commit details

      Copy full SHA for 5f1e8b8

      View code at this pointBrowse repository at this point
12. Commits on Aug 14, 2026

    • Java: Adapt to FlowSummaryImpl changes

      hvitved

      committed
      b1c5b5bView commit details

      Copy full SHA for b1c5b5b

      View code at this pointBrowse repository at this point
13. Commits on Aug 13, 2026

    • Merge pull request #22315 from github/copilot/fix-valueof-call-site-issue

      Show description for 9d247d6
      hvitved

      authored
      9d247d6View commit details

      Copy full SHA for 9d247d6

      View code at this pointBrowse repository at this point
14. Commits on Aug 11, 2026

    • Merge pull request #22192 from michaelnebel/shared/modelgengeneric

      Show description for 4e31516
      michaelnebel

      authored
      4e31516View commit details

      Copy full SHA for 4e31516

      View code at this pointBrowse repository at this point

    • Java: Update test expectations

      hvitved

      committed
      7e3c144View commit details

      Copy full SHA for 7e3c144

      View code at this pointBrowse repository at this point

    • Simplify test method signature

      Show description for c601c6c
      

      Copilot

      and

      hvitved

      authored
      c601c6cView commit details

      Copy full SHA for c601c6c

      View code at this pointBrowse repository at this point

    • Java: replace non-existent String.valueOf(CharSequence) summary with a synthetic callable for valueOf(Object) on CharSequence arguments

      Show description for 925d3e2
      

      Copilot

      and

      hvitved

      authored
      925d3e2View commit details

      Copy full SHA for 925d3e2

      View code at this pointBrowse repository at this point
15. Commits on Aug 10, 2026

    • Java: test safe R2DBC parameter binding

      Show description for 6919c3d
      felickz

      committed
      6919c3dView commit details

      Copy full SHA for 6919c3d

      View code at this pointBrowse repository at this point
16. Commits on Aug 4, 2026

    • Java: add R2DBC SPI SQL injection sinks

      Show description for 90b78c9
      felickz

      committed
      90b78c9View commit details

      Copy full SHA for 90b78c9

      View code at this pointBrowse repository at this point

    • Java: cover R2DBC fluent execution paths

      Show description for e079fdf
      felickz

      committed
      e079fdfView commit details

      Copy full SHA for e079fdf

      View code at this pointBrowse repository at this point

    • Java: model R2DBC SQL injection sinks

      Show description for 2e4a174
      felickz

      committed
      2e4a174View commit details

      Copy full SHA for 2e4a174

      View code at this pointBrowse repository at this point

    • Fix Micronaut inline test expectations

      nicolaswill

      committed
      126c292View commit details

      Copy full SHA for 126c292

      View code at this pointBrowse repository at this point

    • Merge remote-tracking branch 'origin/main' into nicolaswill-audit-micronaut-pr

      Show description for 9d164d0
      nicolaswill

      committed
      9d164d0View commit details

      Copy full SHA for 9d164d0

      View code at this pointBrowse repository at this point