Commits

Breadcrumbs

History for

on8a7f6b7

User selector

All users

All time

Commit History

Commits on Jun 25, 2021

• Java: Remove overlapping code

  intrigus

  committed
  1b96d0a

  Copy full SHA for 1b96d0a

Commits on Jun 24, 2021

• Merge pull request #5955 from haby0/java/JShellCodeInjection

  Show description for 2acb4de
  smowton

  authored
  2acb4de

  Copy full SHA for 2acb4de

Commits on Jun 23, 2021

• Apply suggestions from code review

  Show description for 0dfb869
  

  artem-smotrakov

  and

  smowton

  authored
  0dfb869

  Copy full SHA for 0dfb869

• Added sinks for RmiBasedExporter and HessianExporter

  artem-smotrakov

  committed
  14e724b

  Copy full SHA for 14e724b

Commits on Jun 18, 2021

• Modify isAdditionalTaintStep

  haby0

  committed
  2b77f7d

  Copy full SHA for 2b77f7d

• Update java/ql/src/experimental/Security/CWE/CWE-094/JShellInjection.qhelp

  Show description for a71757f
  

  haby0

  and

  Marcono1234

  committed
  a71757f

  Copy full SHA for a71757f

• using isAdditionalTaintStep

  haby0

  committed
  bfe0d40

  Copy full SHA for bfe0d40

• Fix 1

  haby0

  committed
  3a2a99e

  Copy full SHA for 3a2a99e

• add isAdditionalTaintStep

  haby0

  committed
  ed0aabe

  Copy full SHA for ed0aabe

• Jshell Injection

  haby0

  committed
  921b8e8

  Copy full SHA for 921b8e8

• Fix error

  haby0

  committed
  a73cb3f

  Copy full SHA for a73cb3f

• BeanShell Injection

  haby0

  committed
  0d18e4f

  Copy full SHA for 0d18e4f

Commits on Jun 17, 2021

• Remove no-longer-needed BasicRequestLine model from InsecureBasicAuth.ql; adjust test expectations accordingly

  smowton

  committed
  7509e36

  Copy full SHA for 7509e36

• Promote SSRF query to main query set

  smowton

  committed
  487c1db

  Copy full SHA for 487c1db

• Merge pull request #6034 from owen-mc/java/jax-rs

  Show description for 8fe2f4a
  aschackmull

  authored
  8fe2f4a

  Copy full SHA for 8fe2f4a

Commits on Jun 11, 2021

• Merge pull request #5818 from artem-smotrakov/rmi-deserialization

  Show description for 7683880
  smowton

  authored
  7683880

  Copy full SHA for 7683880

Commits on Jun 10, 2021

• Update experimental query using NewCookie

  owen-mc

  committed
  e0130a9

  Copy full SHA for e0130a9

• Fix tests for experimental httponly query

  owen-mc

  committed
  ee6019a

  Copy full SHA for ee6019a

Commits on Jun 3, 2021

• Merge branch 'main' into promote-jexl-injection

  atorralba

  authored
  56a429a

  Copy full SHA for 56a429a

Commits on Jun 2, 2021

• Java: Add missing metadata.

  aschackmull

  committed
  5e96e28

  Copy full SHA for 5e96e28

Commits on Jun 1, 2021

• Merge pull request #5704 from edvraa/regexj

  Show description for a4661e1
  aschackmull

  authored
  a4661e1

  Copy full SHA for a4661e1

• Better recommendation in UnsafeDeserializationRmi.qhelp

  Show description for 8dc1451
  

  artem-smotrakov

  and

  smowton

  authored
  8dc1451

  Copy full SHA for 8dc1451

Commits on May 29, 2021

• Fixed errors in UnsafeDeserializationRmi.qhelp

  artem-smotrakov

  committed
  b28d639

  Copy full SHA for b28d639

• Simplified UnsafeDeserializationRmi.ql

  artem-smotrakov

  committed
  62c6bee

  Copy full SHA for 62c6bee

Commits on May 23, 2021

• Added an example with deserialization filter to UnsafeDeserializationRmi.qhelp

  artem-smotrakov

  committed
  1b51dd4

  Copy full SHA for 1b51dd4

• Added test cases with sanitizers for UnsafeDeserializationRmi.ql

  artem-smotrakov

  committed
  c837605

  Copy full SHA for c837605

• Renamed RmiUnsafeDeserialization.ql -> UnsafeDeserializationRmi.ql

  artem-smotrakov

  committed
  d2e29fc

  Copy full SHA for d2e29fc

• Covered deserialization filters in RmiUnsafeDeserialization.ql

  artem-smotrakov

  committed
  2d93eea

  Copy full SHA for 2d93eea

• Look for remote callable method only in RmiUnsafeDeserialization.ql

  artem-smotrakov

  committed
  e28f919

  Copy full SHA for e28f919

• Added RmiUnsafeDeserialization.qhelp

  artem-smotrakov

  committed
  0182dfe

  Copy full SHA for 0182dfe

• Cover Registry in RmiUnsafeDeserialization.ql

  artem-smotrakov

  committed
  efa4b4f

  Copy full SHA for efa4b4f

• First draft of RmiUnsafeDeserialization.ql

  artem-smotrakov

  committed
  8b96ff9

  Copy full SHA for 8b96ff9

Commits on May 18, 2021

• Optimize the sink and update qldoc

  luchua-bc

  committed
  02aa9c6

  Copy full SHA for 02aa9c6

• Update qldoc

  luchua-bc

  committed
  d4323a4

  Copy full SHA for d4323a4

• Refactor inconsistent method names

  luchua-bc

  committed
  9d39226

  Copy full SHA for 9d39226