Commits

Breadcrumbs

History for

on46faf68

User selector

All users

All time

Commit History

Commits on Jun 17, 2021

• SSRF: don't consider results of fetches we initiated to be untrustworthy

  smowton

  committed
  26e10f3

  Copy full SHA for 26e10f3

• Sanitize StringBuilder appends that follow directly from a constructor.

  Show description for c63d598
  smowton

  committed
  c63d598

  Copy full SHA for c63d598

• SSRF query: add sanitizer looking for a variety of ways of prepending a sanitizing prefix, such as one that restricts the hostname a URI will refer to.

  smowton

  committed
  b5a450b

  Copy full SHA for b5a450b

• Promote SSRF query to main query set

  smowton

  committed
  487c1db

  Copy full SHA for 487c1db

Commits on Jun 16, 2021

• Merge branch 'main' into atorralba/promote-mvel-injection

  atorralba

  authored
  dab33b2

  Copy full SHA for dab33b2

• Merge branch 'main' into java/UnsafeDeserialization

  haby0

  authored
  c1ada6d

  Copy full SHA for c1ada6d

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jun 3, 2021

• Merge branch 'main' into promote-jexl-injection

  atorralba

  authored
  56a429a

  Copy full SHA for 56a429a

Commits on Jun 2, 2021

• Refactored into MvelInjection.qll using CSV models

  atorralba

  committed
  b30c92e

  Copy full SHA for b30c92e

• HTTP -> Http

  pwntester

  committed
  a3a215a

  Copy full SHA for a3a215a

• Moved from experimental

  atorralba

  committed
  59e6e1f

  Copy full SHA for 59e6e1f

Commits on Jun 1, 2021

• lift XssSink check to InformationLeakSink

  pwntester

  committed
  9aba923

  Copy full SHA for 9aba923

• fix failing test

  pwntester

  committed
  0fb6924

  Copy full SHA for 0fb6924

Commits on May 31, 2021

• Fix typos

  haby0

  committed
  d678276

  Copy full SHA for d678276

Commits on May 29, 2021

• Attempt to use information-leak sink category

  pwntester

  committed
  41d034d

  Copy full SHA for 41d034d

Commits on May 17, 2021

• add change notes

  haby0

  committed
  58d774a

  Copy full SHA for 58d774a

Commits on May 14, 2021

• Modify ql

  haby0

  committed
  60fc607

  Copy full SHA for 60fc607

Commits on May 12, 2021

• Add UnsafeDeserialization

  haby0

  committed
  12f47bc

  Copy full SHA for 12f47bc

Commits on May 7, 2021

• Merge branch 'main' into promote-jexl-injection

  atorralba

  authored
  e78e5b9

  Copy full SHA for e78e5b9

• Re-structure imports, add some new comments to tests

  atorralba

  committed
  b37b15c

  Copy full SHA for b37b15c

• Fix imports as suggested in code review

  atorralba

  committed
  b69be30

  Copy full SHA for b69be30

Commits on May 6, 2021

• Apply suggestions from code review

  Show description for f16605b
  

  atorralba

  and

  felicitymay

  authored
  f16605b

  Copy full SHA for f16605b

• Add safe example for dom4j

  atorralba

  committed
  7646855

  Copy full SHA for 7646855

• Move from experimental to standard

  atorralba

  committed
  26c3ff2

  Copy full SHA for 26c3ff2

Commits on May 4, 2021

• Fix failing checks

  atorralba

  committed
  f79d2e0

  Copy full SHA for f79d2e0

Commits on May 3, 2021

• Getters called on parameters propagate taint

  atorralba

  committed
  745a6f6

  Copy full SHA for 745a6f6

• Use InlineTest

  atorralba

  committed
  4d5ec87

  Copy full SHA for 4d5ec87

• Moved from experimental

  atorralba

  committed
  4bfd34b

  Copy full SHA for 4bfd34b

Commits on Apr 27, 2021

• Merge pull request #5557 from tamasvajk/feature/java-sinks-csv

  Show description for 4cc8866
  tamasvajk

  authored
  4cc8866

  Copy full SHA for 4cc8866

• Fix naming in HTTPS URL check

  tamasvajk

  committed
  5b79094

  Copy full SHA for 5b79094

• Add documentation for URL opening sinks

  tamasvajk

  committed
  e08b629

  Copy full SHA for e08b629

Commits on Apr 23, 2021

• Fix all dead qhelp links

  Show description for 455b840
  smowton

  committed
  455b840

  Copy full SHA for 455b840

Commits on Apr 22, 2021

• Merge branch 'main' into feature/java-sinks-csv

  tamasvajk

  authored
  cb28bc8

  Copy full SHA for cb28bc8

• Improve documentation of csv sink models

  tamasvajk

  committed
  7134eb9

  Copy full SHA for 7134eb9