Commits

Breadcrumbs

History for

ond839b40

User selector

All users

All time

Commit History

Commits on Mar 7, 2023

• Java: Refactor TaintedPath.ql

  aschackmull

  committed
  d839b40

  Copy full SHA for d839b40

Commits on Feb 11, 2023

• Java: update path-injection query to use new 'read-file' sink kind

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ce1c814

  Copy full SHA for ce1c814

Commits on Dec 2, 2022

• Java: fix syntax error in path-injection example fix

  smowton

  authored
  6e98c67

  Copy full SHA for 6e98c67

Commits on Oct 4, 2022

• Generalize file/path taint steps

  Show description for f19eb78
  atorralba

  committed
  f19eb78

  Copy full SHA for f19eb78

• Merge ZipSlip sanitization logic into PathSanitizer.qll

  Show description for 4e29c39
  atorralba

  committed
  4e29c39

  Copy full SHA for 4e29c39

• Use PathInjectionSanitizer in relevant queries

  atorralba

  committed
  08c67fb

  Copy full SHA for 08c67fb

• Apply TaintedPath recent changes to TaintedPathLocal

  atorralba

  committed
  dff878e

  Copy full SHA for dff878e

Commits on Sep 26, 2022

• update alert-messsages of java queries

  erik-krogh

  committed
  46b5bf3

  Copy full SHA for 46b5bf3

Commits on Sep 16, 2022

• Introduce TaintedPathAdditionalTaintStep

  Show description for fdc8453
  atorralba

  committed
  fdc8453

  Copy full SHA for fdc8453

• Address review comments.

  

  Sebastian Bauersfeld

  committed
  95478f1

  Copy full SHA for 95478f1

Commits on Sep 15, 2022

• Address review comments.

  

  Sebastian Bauersfeld

  committed
  20d7897

  Copy full SHA for 20d7897

Commits on Aug 3, 2022

• Make reporting locations consistent with PathCreation; add test

  smowton

  committed
  84a4b6a

  Copy full SHA for 84a4b6a

• Add missing import

  smowton

  authored
  83498f5

  Copy full SHA for 83498f5

Commits on Aug 2, 2022

• Don't require a PathCreation for every tainted-path sink

  smowton

  authored
  81f3bcd

  Copy full SHA for 81f3bcd

• Make java/path-injection recognise create-file MaD sinks

  smowton

  authored
  c95f17f

  Copy full SHA for c95f17f

Commits on May 24, 2022

• Java: Add support for BarrierGuards as parameterised modules.

  aschackmull

  committed
  a317736

  Copy full SHA for a317736

Commits on Feb 21, 2022

• Java: Performance tweaks

  igfoo

  committed
  7ce9b16

  Copy full SHA for 7ce9b16

Commits on Jun 15, 2021

• Update security-severity scores

  calumgrant

  committed
  771e686

  Copy full SHA for 771e686

Commits on Jun 10, 2021

• Add security-severity metadata

  calumgrant

  committed
  a594afb

  Copy full SHA for a594afb

Commits on Apr 22, 2021

• Improve documentation of csv sink models

  tamasvajk

  committed
  7134eb9

  Copy full SHA for 7134eb9

Commits on Apr 9, 2021

• Java: Convert zipslip sinks to CSV format

  tamasvajk

  committed
  9e2832a

  Copy full SHA for 9e2832a

Commits on Oct 1, 2020

• Fix OWASP broken links

  smowton

  committed
  578ea1a

  Copy full SHA for 578ea1a

Commits on Jul 18, 2020

• Move tainted path ad-hoc guard back.

  intrigus

  committed
  f94055f

  Copy full SHA for f94055f

• Rename to getAnInput and clarify doc.

  intrigus

  committed
  4570444

  Copy full SHA for 4570444

Commits on Jul 9, 2020

• Centralize and model additional path creations.

  intrigus

  committed
  641c5df

  Copy full SHA for 641c5df

Commits on Aug 13, 2019

• Java/C++/C#: Add support for BarrierGuards.

  aschackmull

  committed
  4550175

  Copy full SHA for 4550175

Commits on May 6, 2019

• Java: Deprecate RemoteUserInput.

  aschackmull

  committed
  f367427

  Copy full SHA for f367427

Commits on Feb 12, 2019

• Java: Autoformat qlls.

  aschackmull

  committed
  63a4dd0

  Copy full SHA for 63a4dd0

Commits on Feb 11, 2019

• Java: Add a flow step for `Path::toFile` in ZipSlip

  rneatherway

  committed
  4097338

  Copy full SHA for 4097338

Commits on Nov 16, 2018

• Java: Convert security queries to path-problems.

  aschackmull

  committed
  5e03b6f

  Copy full SHA for 5e03b6f

Commits on Oct 31, 2018

• Java: Change main ZipSlip location to the source.

  aschackmull

  committed
  c3f71c2

  Copy full SHA for c3f71c2

• Java: Fix performance issue, and add Path.resolve as taint step.

  aschackmull

  committed
  36f41a3

  Copy full SHA for 36f41a3

• Java: Add ZipSlip query.

  aschackmull

  committed
  bf6b7c4

  Copy full SHA for bf6b7c4

Commits on Oct 12, 2018

• Merge pull request #312 from aschackmull/java/autoformat-libs

  Show description for a8be7f2
  semmle-qlci

  authored
  a8be7f2

  Copy full SHA for a8be7f2

• Java: Autoformat libs outside semmle.code.java.

  aschackmull

  committed
  67d1c72

  Copy full SHA for 67d1c72