Commits

Breadcrumbs

History for

onc0d76da

User selector

All users

All time

Commit History

Commits on Jun 25, 2021

• Java: Remove "intention-guessing" sanitizer & simplify.

  Show description for e4775e0
  intrigus

  committed
  e4775e0

  Copy full SHA for e4775e0

• Java: Apply suggestions for QHelp

  intrigus

  committed
  8a7f6b7

  Copy full SHA for 8a7f6b7

• Java: Fix Typos

  intrigus

  committed
  d37d922

  Copy full SHA for d37d922

• Java: Use machine-in-the-middle consistently

  

  intrigus-lgtm

  authored and

  intrigus

  committed
  030c286

  Copy full SHA for 030c286

• Java: Apply suggestions from code review

  Show description for f52e438
  

  2 peopleauthored and

  intrigus

  committed
  f52e438

  Copy full SHA for f52e438

• Java: Add insecure trust manager query.

  intrigus

  committed
  87554a7

  Copy full SHA for 87554a7

Commits on Jun 18, 2021

• Merge pull request #6080 from github/calumgrant/security-severities

  Show description for 32f6a46
  calumgrant

  authored
  32f6a46

  Copy full SHA for 32f6a46

Commits on Jun 17, 2021

• Add `RequestForgerySanitizer`

  atorralba

  committed
  3ec2c13

  Copy full SHA for 3ec2c13

• Merge branch 'main' into atorralba/promote-unsafe-android-webview-fetch

  atorralba

  committed
  0c71393

  Copy full SHA for 0c71393

• Factor request-forgery config so it can be used in an inline-expectations test

  smowton

  committed
  b66dcbe

  Copy full SHA for b66dcbe

• Improve RequestForgery.qhelp recommendation

  smowton

  committed
  a665d5d

  Copy full SHA for a665d5d

• Copyedit comments and function names

  Show description for fb2989c
  

  smowton

  and

  felicitymay

  committed
  fb2989c

  Copy full SHA for fb2989c

• Java SSRF query: Server Side -> Server-Side everywhere.

  smowton

  committed
  575198a

  Copy full SHA for 575198a

• Java SSRF query: move RequestForgery qll file into semmle/code hierarchy

  Show description for 7899e17
  smowton

  committed
  7899e17

  Copy full SHA for 7899e17

• Java SSRF query: Provide hook for custom taint-propagating steps; make all default sinks/sanitizers/steps private.

  smowton

  committed
  532a10b

  Copy full SHA for 532a10b

• Java SSRF query: copyedit qhelp

  smowton

  committed
  e861336

  Copy full SHA for e861336

• Java SSRF query: sanitize primitives

  Show description for 3333e7d
  smowton

  committed
  3333e7d

  Copy full SHA for 3333e7d

• Add exactly the string '/' as a sanitizing prefix.

  Show description for 6933d06
  smowton

  committed
  6933d06

  Copy full SHA for 6933d06

• Fix typo

  smowton

  committed
  bc43b6d

  Copy full SHA for bc43b6d

• Add doc comments

  smowton

  committed
  e6249ee

  Copy full SHA for e6249ee

• SSRF: don't consider results of fetches we initiated to be untrustworthy

  smowton

  committed
  26e10f3

  Copy full SHA for 26e10f3

• Sanitize StringBuilder appends that follow directly from a constructor.

  Show description for c63d598
  smowton

  committed
  c63d598

  Copy full SHA for c63d598

• SSRF query: add sanitizer looking for a variety of ways of prepending a sanitizing prefix, such as one that restricts the hostname a URI will refer to.

  smowton

  committed
  b5a450b

  Copy full SHA for b5a450b

• Promote SSRF query to main query set

  smowton

  committed
  487c1db

  Copy full SHA for 487c1db

Commits on Jun 16, 2021

• Merge branch 'main' into atorralba/promote-mvel-injection

  atorralba

  authored
  dab33b2

  Copy full SHA for dab33b2

• Refactor to use CSV sink models

  atorralba

  committed
  7031e0a

  Copy full SHA for 7031e0a

• Moved from experimental

  atorralba

  committed
  356601c

  Copy full SHA for 356601c

• Merge branch 'main' into java/UnsafeDeserialization

  haby0

  authored
  c1ada6d

  Copy full SHA for c1ada6d

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Jun 3, 2021

• Merge branch 'main' into promote-jexl-injection

  atorralba

  authored
  56a429a

  Copy full SHA for 56a429a

Commits on Jun 2, 2021

• Refactored into MvelInjection.qll using CSV models

  atorralba

  committed
  b30c92e

  Copy full SHA for b30c92e

• HTTP -> Http

  pwntester

  committed
  a3a215a

  Copy full SHA for a3a215a

• Moved from experimental

  atorralba

  committed
  59e6e1f

  Copy full SHA for 59e6e1f

Commits on Jun 1, 2021

• lift XssSink check to InformationLeakSink

  pwntester

  committed
  9aba923

  Copy full SHA for 9aba923