Commits

Breadcrumbs

History for

ona167577

User selector

All users

All time

Commit History

Commits on Jan 30, 2020

• Java: Add java.lang.Number as a sanitizer for SQL injection.

  aschackmull

  committed
  a167577

  Copy full SHA for a167577

Commits on Jan 29, 2020

• Java: Autoformat.

  aschackmull

  committed
  9b7a728

  Copy full SHA for 9b7a728

Commits on Jan 27, 2020

• Merge pull request #2586 from ggolawski/spring_disable_csrf

  Show description for 816a8d1
  aschackmull

  authored
  816a8d1

  Copy full SHA for 816a8d1

Commits on Jan 24, 2020

• java: sharpen java/maven/non-https-url to allow localhost URLs

  esbena

  committed
  57b3a55

  Copy full SHA for 57b3a55

Commits on Jan 22, 2020

• Add check for disabled CSRF protection in Spring

  Show description for 5596944
  ggolawski

  committed
  5596944

  Copy full SHA for 5596944

Commits on Jan 21, 2020

• Add check for disabled CSRF protection in Spring

  Show description for c5a9747
  ggolawski

  committed
  c5a9747

  Copy full SHA for c5a9747

Commits on Jan 7, 2020

• Merge pull request #2550 from JLLeitschuh/task/JLL/improve_netty_response_splitting_detection

  Show description for d918cb1
  aschackmull

  authored
  d918cb1

  Copy full SHA for d918cb1

Commits on Jan 5, 2020

• Simplify the query

  ggolawski

  committed
  4ce25c0

  Copy full SHA for 4ce25c0

Commits on Jan 3, 2020

• Add check for disabled CSRF protection in Spring

  ggolawski

  committed
  ab49397

  Copy full SHA for ab49397

• Netty Response Splitting use CompileTimeConstantExpr

  Show description for 0e2c5db
  

  JLLeitschuh

  and

  aschackmull

  authored
  0e2c5db

  Copy full SHA for 0e2c5db

Commits on Jan 2, 2020

• Merge pull request #2413 from JLLeitschuh/feature/JLL/maven_insecure_artifact_resolution

  Show description for 7e987c5
  aschackmull

  authored
  7e987c5

  Copy full SHA for 7e987c5

Commits on Dec 18, 2019

• Update java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.qhelp

  Show description for 75939af
  

  JLLeitschuh

  and

  aschackmull

  authored
  75939af

  Copy full SHA for 75939af

Commits on Dec 17, 2019

• Add io.netty.handler.codec.http.DefaultHttpResponse to Netty Response Splitting Detection

  Show description for b218374
  JLLeitschuh

  committed
  b218374

  Copy full SHA for b218374

Commits on Dec 12, 2019

• Update java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.ql

  JLLeitschuh

  authored
  0c2da8a

  Copy full SHA for 0c2da8a

Commits on Dec 10, 2019

• Update InsecureDependencyResolution with code review comments

  JLLeitschuh

  committed
  2296224

  Copy full SHA for 2296224

• Apply suggestions from code review

  Show description for f341234
  

  3 peopleauthored
  f341234

  Copy full SHA for f341234

Commits on Nov 26, 2019

• Java: Improve performance by normalizing import order to reduce cache invalidation.

  aschackmull

  committed
  deb6a6e

  Copy full SHA for deb6a6e

Commits on Nov 21, 2019

• Java: Use of HTTP/FTP to download/upload Maven artifacts

  Show description for 21193bd
  JLLeitschuh

  committed
  21193bd

  Copy full SHA for 21193bd

Commits on Nov 11, 2019

• Merge pull request #2230 from yh-semmle/java-move-cwe502-lib

  Show description for b0fecbc
  aschackmull

  authored
  b0fecbc

  Copy full SHA for b0fecbc

Commits on Nov 7, 2019

• Update links to OWASP cheat sheet

  

  Sauyon Lee

  committed
  0040c9f

  Copy full SHA for 0040c9f

Commits on Oct 30, 2019

• Java: move `UnsafeDeserialization.qll` to standard library location

  yh-semmle

  committed
  8620b05

  Copy full SHA for 8620b05

Commits on Oct 25, 2019

• Apply suggestions from code review for netty DefaultHttpHeaders

  Show description for 934eed9
  

  JLLeitschuh

  and

  aschackmull

  authored
  934eed9

  Copy full SHA for 934eed9

Commits on Oct 24, 2019

• Add CWE-113 check for io.netty.handler.codec.http.DefaultHttpHeaders

  Show description for dcbd6e0
  JLLeitschuh

  committed
  dcbd6e0

  Copy full SHA for dcbd6e0

Commits on Oct 15, 2019

• Move qll file to support import from custom QL queries

  

  alexey

  committed
  715f1dd

  Copy full SHA for 715f1dd

Commits on Aug 20, 2019

• Java: Don't use the deprecated Configuration2

  jbj

  committed
  9ac0cdd

  Copy full SHA for 9ac0cdd

Commits on Aug 13, 2019

• Java/C++/C#: Add support for BarrierGuards.

  aschackmull

  committed
  4550175

  Copy full SHA for 4550175

• Merge pull request #1724 from aschackmull/java/google-xmlreader

  Show description for 5e910a4
  yh-semmle

  authored
  5e910a4

  Copy full SHA for 5e910a4

Commits on Aug 9, 2019

• Java: Treat SecureJDKXercesXMLReader as a secure XMLReader.

  aschackmull

  committed
  41763e6

  Copy full SHA for 41763e6

Commits on Aug 8, 2019

• Java: Fix copy-paste typo.

  aschackmull

  committed
  b3e56d5

  Copy full SHA for b3e56d5

Commits on Aug 7, 2019

• Java: Improve barriers for the CWE-190 Arithmetic* queries.

  aschackmull

  committed
  20e6f55

  Copy full SHA for 20e6f55

• Merge pull request #1639 from aschackmull/java/in-out-barriers

  Show description for 033879f
  yh-semmle

  authored
  033879f

  Copy full SHA for 033879f

Commits on Aug 5, 2019

• Java: Change in/out barriers to be explicit in the configuration.

  aschackmull

  committed
  f880494

  Copy full SHA for f880494

Commits on Aug 2, 2019

• Java: Improve the precision of java/hardcoded-credential-api-call.

  aschackmull

  committed
  b1b1ede

  Copy full SHA for b1b1ede

Commits on Jul 31, 2019

• Java: update XXE qhelp with note on processing limits

  yh-semmle

  committed
  dc45ba5

  Copy full SHA for dc45ba5

Commits on Jul 26, 2019

• Java: Deprecate isBarrierEdge.

  aschackmull

  committed
  7c30c1a

  Copy full SHA for 7c30c1a