Commits

Breadcrumbs

History for

on641c5df

User selector

All users

All time

Commit History

Commits on Jul 9, 2020

• Centralize and model additional path creations.

  intrigus

  committed
  641c5df

  Copy full SHA for 641c5df

Commits on Jun 30, 2020

• Java: Update uses.

  geoffw0

  committed
  f8425b8

  Copy full SHA for f8425b8

Commits on Feb 24, 2020

• Merge pull request #853 from joshhale/tweak-cwe-078-example

  Show description for 67b3279
  aschackmull

  authored
  67b3279

  Copy full SHA for 67b3279

Commits on Feb 5, 2020

• Update java/ql/src/Security/CWE/CWE-113/NettyResponseSplitting.ql

  JLLeitschuh

  authored
  60f2fa9

  Copy full SHA for 60f2fa9

Commits on Feb 4, 2020

• Add DefaultFullHttpResponse to Netty Check

  JLLeitschuh

  authored
  832a4f2

  Copy full SHA for 832a4f2

Commits on Jan 31, 2020

• Merge pull request #2651 from ggolawski/java-ldap-injection

  Show description for 3b81c3b
  aschackmull

  authored
  3b81c3b

  Copy full SHA for 3b81c3b

Commits on Jan 30, 2020

• Merge pull request #2725 from aschackmull/java/sqlinjection-number-barrier

  Show description for 7ca7bdf
  yo-h

  authored
  7ca7bdf

  Copy full SHA for 7ca7bdf

• Rename CWE-90 to CWE-090

  ggolawski

  committed
  db55ec2

  Copy full SHA for db55ec2

• Java: Add java.lang.Number as a sanitizer for SQL injection.

  aschackmull

  committed
  a167577

  Copy full SHA for a167577

• Java: Deprecate ParExpr.

  aschackmull

  committed
  75c549b

  Copy full SHA for 75c549b

Commits on Jan 29, 2020

• Update java/ql/src/Security/CWE/CWE-90/LdapInjection.qhelp

  Show description for ebd2b93
  

  ggolawski

  and

  felicitymay

  authored
  ebd2b93

  Copy full SHA for ebd2b93

• Java: Autoformat.

  aschackmull

  committed
  9b7a728

  Copy full SHA for 9b7a728

Commits on Jan 28, 2020

• Apply suggestion from code review

  ggolawski

  committed
  bbcfbd7

  Copy full SHA for bbcfbd7

Commits on Jan 27, 2020

• Apply suggestion from code review

  ggolawski

  committed
  7b2192d

  Copy full SHA for 7b2192d

• Apply suggestions from code review

  Show description for 408c49a
  

  ggolawski

  and

  felicitymay

  authored
  408c49a

  Copy full SHA for 408c49a

• Merge pull request #2586 from ggolawski/spring_disable_csrf

  Show description for 816a8d1
  aschackmull

  authored
  816a8d1

  Copy full SHA for 816a8d1

Commits on Jan 24, 2020

• java: sharpen java/maven/non-https-url to allow localhost URLs

  esbena

  committed
  57b3a55

  Copy full SHA for 57b3a55

Commits on Jan 23, 2020

• Query to detect LDAP injections in Java

  Show description for 968c18d
  ggolawski

  committed
  968c18d

  Copy full SHA for 968c18d

Commits on Jan 22, 2020

• Query to detect LDAP injections in Java

  Show description for bed6a98
  ggolawski

  committed
  bed6a98

  Copy full SHA for bed6a98

• Add check for disabled CSRF protection in Spring

  Show description for 5596944
  ggolawski

  committed
  5596944

  Copy full SHA for 5596944

Commits on Jan 21, 2020

• Add check for disabled CSRF protection in Spring

  Show description for c5a9747
  ggolawski

  committed
  c5a9747

  Copy full SHA for c5a9747

Commits on Jan 18, 2020

• Query to detect LDAP injections in Java

  Show description for 00ee3d2
  ggolawski

  committed
  00ee3d2

  Copy full SHA for 00ee3d2

• Query to detect LDAP injections in Java

  Show description for 95723b0
  ggolawski

  committed
  95723b0

  Copy full SHA for 95723b0

• Query to detect LDAP injections in Java

  Show description for 8cec463
  ggolawski

  committed
  8cec463

  Copy full SHA for 8cec463

Commits on Jan 14, 2020

• Query to detect LDAP injections in Java

  Show description for b732523
  ggolawski

  committed
  b732523

  Copy full SHA for b732523

Commits on Jan 12, 2020

• Query to detect LDAP injections in Java

  Show description for 3e86dd1
  ggolawski

  committed
  3e86dd1

  Copy full SHA for 3e86dd1

• Query to detect LDAP injections in Java

  Show description for c01aa3d
  ggolawski

  committed
  c01aa3d

  Copy full SHA for c01aa3d

Commits on Jan 11, 2020

• Query to detect LDAP injections in Java

  Show description for 7570fa9
  ggolawski

  committed
  7570fa9

  Copy full SHA for 7570fa9

Commits on Jan 7, 2020

• Merge pull request #2550 from JLLeitschuh/task/JLL/improve_netty_response_splitting_detection

  Show description for d918cb1
  aschackmull

  authored
  d918cb1

  Copy full SHA for d918cb1

Commits on Jan 5, 2020

• Simplify the query

  ggolawski

  committed
  4ce25c0

  Copy full SHA for 4ce25c0

Commits on Jan 3, 2020

• Add check for disabled CSRF protection in Spring

  ggolawski

  committed
  ab49397

  Copy full SHA for ab49397

• Netty Response Splitting use CompileTimeConstantExpr

  Show description for 0e2c5db
  

  JLLeitschuh

  and

  aschackmull

  authored
  0e2c5db

  Copy full SHA for 0e2c5db

Commits on Jan 2, 2020

• Merge pull request #2413 from JLLeitschuh/feature/JLL/maven_insecure_artifact_resolution

  Show description for 7e987c5
  aschackmull

  authored
  7e987c5

  Copy full SHA for 7e987c5

Commits on Dec 18, 2019

• Update java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.qhelp

  Show description for 75939af
  

  JLLeitschuh

  and

  aschackmull

  authored
  75939af

  Copy full SHA for 75939af

Commits on Dec 17, 2019

• Add io.netty.handler.codec.http.DefaultHttpResponse to Netty Response Splitting Detection

  Show description for b218374
  JLLeitschuh

  committed
  b218374

  Copy full SHA for b218374