Commits

Breadcrumbs

History for

on8a7f6b7

User selector

All users

All time

Commit History

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jul 9, 2020

• Move source and sink into importable library

  rvermeulen

  committed
  7435dac

  Copy full SHA for 7435dac

• Extend source and sink from DataFlow::Node instead of DataFlow::exprNode

  rvermeulen

  committed
  b66f391

  Copy full SHA for b66f391

• Rename TrustedSource to SafeHeaderSplittingSource

  rvermeulen

  committed
  fed506a

  Copy full SHA for fed506a

Commits on Jul 8, 2020

• Extract `HeaderSplittingSink` and `WhitelistedSource`

  Show description for 5f560e0
  rvermeulen

  committed
  5f560e0

  Copy full SHA for 5f560e0

Commits on Feb 5, 2020

• Update java/ql/src/Security/CWE/CWE-113/NettyResponseSplitting.ql

  JLLeitschuh

  authored
  60f2fa9

  Copy full SHA for 60f2fa9

Commits on Feb 4, 2020

• Add DefaultFullHttpResponse to Netty Check

  JLLeitschuh

  authored
  832a4f2

  Copy full SHA for 832a4f2

Commits on Jan 3, 2020

• Netty Response Splitting use CompileTimeConstantExpr

  Show description for 0e2c5db
  

  JLLeitschuh

  and

  aschackmull

  authored
  0e2c5db

  Copy full SHA for 0e2c5db

Commits on Dec 17, 2019

• Add io.netty.handler.codec.http.DefaultHttpResponse to Netty Response Splitting Detection

  Show description for b218374
  JLLeitschuh

  committed
  b218374

  Copy full SHA for b218374

Commits on Oct 25, 2019

• Apply suggestions from code review for netty DefaultHttpHeaders

  Show description for 934eed9
  

  JLLeitschuh

  and

  aschackmull

  authored
  934eed9

  Copy full SHA for 934eed9

Commits on Oct 24, 2019

• Add CWE-113 check for io.netty.handler.codec.http.DefaultHttpHeaders

  Show description for dcbd6e0
  JLLeitschuh

  committed
  dcbd6e0

  Copy full SHA for dcbd6e0

Commits on Jun 27, 2019

• Java: Add simple sanitizer for java/http-response-splitting.

  aschackmull

  committed
  85eac80

  Copy full SHA for 85eac80

Commits on May 6, 2019

• Java: Deprecate RemoteUserInput.

  aschackmull

  committed
  f367427

  Copy full SHA for f367427

Commits on Nov 16, 2018

• Java: Convert security queries to path-problems.

  aschackmull

  committed
  5e03b6f

  Copy full SHA for 5e03b6f

Commits on Oct 25, 2018

• Java: Whitelist Cookie::getName for HTTP response splitting.

  aschackmull

  committed
  1188e18

  Copy full SHA for 1188e18

Commits on Oct 12, 2018

• Merge pull request #312 from aschackmull/java/autoformat-libs

  Show description for a8be7f2
  semmle-qlci

  authored
  a8be7f2

  Copy full SHA for a8be7f2

• Java: Autoformat libs outside semmle.code.java.

  aschackmull

  committed
  67d1c72

  Copy full SHA for 67d1c72

Commits on Oct 11, 2018

• Java: Autoformat most queries.

  aschackmull

  committed
  dd5a8f0

  Copy full SHA for dd5a8f0

Commits on Aug 30, 2018

• Migrate Java code to separate QL repo.

  pavgust

  committed
  846c9d5

  Copy full SHA for 846c9d5

Loading