Commits

Breadcrumbs

History for

ona23b8a4

User selector

All users

All time

Commit History

Commits on Jul 29, 2021

• QLDoc improvements from code review

  Show description for bdf0f58
  

  3 peopleauthored
  bdf0f58

  Copy full SHA for bdf0f58

• Improve qhelp

  atorralba

  committed
  90b5e02

  Copy full SHA for 90b5e02

• Update java/ql/src/Security/CWE/CWE-347/MissingJWTSignatureCheck.ql

  Show description for 4ea6729
  

  atorralba

  and

  mchammer01

  authored
  4ea6729

  Copy full SHA for 4ea6729

• Update JndiInjection.qhelp

  Show description for 0a986ad
  mchammer01

  authored
  0a986ad

  Copy full SHA for 0a986ad

• Doc improvements

  atorralba

  committed
  3edc8bc

  Copy full SHA for 3edc8bc

• Update MvelInjection.qhelp

  Show description for 8f1fc9e
  mchammer01

  authored
  8f1fc9e

  Copy full SHA for 8f1fc9e

• Update MissingJWTSignatureCheck.qhelp

  Show description for ebf004a
  mchammer01

  authored
  ebf004a

  Copy full SHA for ebf004a

Commits on Jul 27, 2021

• Update GroovyInjection.qhelp

  mchammer01

  authored
  10a3dcb

  Copy full SHA for 10a3dcb

Commits on Jul 20, 2021

• Decouple UnsafeAndroidAccess.qll to reuse the taint tracking configuration

  atorralba

  committed
  26999c7

  Copy full SHA for 26999c7

• Merge branch 'main' into atorralba/promote-unsafe-android-webview-fetch

  atorralba

  committed
  99e66cf

  Copy full SHA for 99e66cf

• Decouple OgnlInjection.qll to reuse the taint tracking configuration

  atorralba

  committed
  3259ead

  Copy full SHA for 3259ead

• Merge branch 'main' into atorralba/promote-ognl-injection

  atorralba

  committed
  b6904a7

  Copy full SHA for b6904a7

• Refactor JWT.qll

  atorralba

  committed
  22c9baa

  Copy full SHA for 22c9baa

• Merge branch 'main' into atorralba/promote-missing-jwt-signature-check

  atorralba

  committed
  430d9f1

  Copy full SHA for 430d9f1

• Decouple JndiInjection.qll to reuse the taint tracking configuration

  atorralba

  committed
  42b6b26

  Copy full SHA for 42b6b26

• Merge branch 'main' into atorralba/promote-jndi-injection

  atorralba

  committed
  b8ea833

  Copy full SHA for b8ea833

Commits on Jul 19, 2021

• Decouple MvelInjection.qll to reuse the taint tracking configuration

  atorralba

  committed
  46faf68

  Copy full SHA for 46faf68

• Merge branch 'main' into atorralba/promote-mvel-injection

  atorralba

  committed
  5ca8b38

  Copy full SHA for 5ca8b38

• Decouple GrovyInjection.qll to reuse the taint tracking configuration

  atorralba

  committed
  441e8af

  Copy full SHA for 441e8af

• Merge branch 'main' into atorralba/promote-groovy-injection

  atorralba

  committed
  b08f417

  Copy full SHA for b08f417

Commits on Jul 16, 2021

• Refactored the query for unsafe deserialization

  artem-smotrakov

  committed
  6d7cb48

  Copy full SHA for 6d7cb48

Commits on Jul 12, 2021

• Removed fromSource() check in looksLikeResolveClassStep()

  artem-smotrakov

  committed
  09ae779

  Copy full SHA for 09ae779

Commits on Jul 9, 2021

• Added Jackson to UnsafeDeserialization.qhelp

  artem-smotrakov

  committed
  ea0991c

  Copy full SHA for ea0991c

• First draft of sinks for unsafe deserialization with Jackson

  artem-smotrakov

  committed
  3eb2af1

  Copy full SHA for 3eb2af1

Commits on Jul 2, 2021

• Deduplicate Jexl configuration

  smowton

  committed
  a51154a

  Copy full SHA for a51154a

• Split up JexlInjection.qll

  Show description for 747a8e4
  smowton

  committed
  747a8e4

  Copy full SHA for 747a8e4

• Split up Random.qll

  Show description for 643f7df
  smowton

  committed
  643f7df

  Copy full SHA for 643f7df

Commits on Jul 1, 2021

• Deduplicate shared body of regular and experimental versions of `java/command-line-injection` query.

  smowton

  committed
  d5a9f3d

  Copy full SHA for d5a9f3d

Commits on Jun 30, 2021

• XSS: expose extension point for defining barrier sinks

  smowton

  committed
  3e7ea34

  Copy full SHA for 3e7ea34

Commits on Jun 25, 2021

• Move back to experimental.........

  intrigus

  committed
  36575bb

  Copy full SHA for 36575bb

• Java: Move comments to separate lines.

  Show description for fe923fa
  intrigus

  committed
  fe923fa

  Copy full SHA for fe923fa

• Apply suggestions from code review.

  Show description for f527df7
  

  2 peopleauthored and

  intrigus

  committed
  f527df7

  Copy full SHA for f527df7

• Java: Fix qhelp errors.

  intrigus

  committed
  6bfdf8d

  Copy full SHA for 6bfdf8d

• Java: Factor out `SecurityFlag` library.

  intrigus

  committed
  dc0b06a

  Copy full SHA for dc0b06a

• Apply suggestions from code review

  Show description for 51fdcf8
  

  2 peopleauthored and

  intrigus

  committed
  51fdcf8

  Copy full SHA for 51fdcf8