Commits

Breadcrumbs

History for

ondb55ec2

User selector

All users

All time

Commit History

Commits on Jan 30, 2020

• Rename CWE-90 to CWE-090

  ggolawski

  committed
  db55ec2

  Copy full SHA for db55ec2

Commits on Jan 29, 2020

• Update java/ql/src/Security/CWE/CWE-90/LdapInjection.qhelp

  Show description for ebd2b93
  

  ggolawski

  and

  felicitymay

  authored
  ebd2b93

  Copy full SHA for ebd2b93

Commits on Jan 28, 2020

• Apply suggestion from code review

  ggolawski

  committed
  bbcfbd7

  Copy full SHA for bbcfbd7

Commits on Jan 27, 2020

• Apply suggestion from code review

  ggolawski

  committed
  7b2192d

  Copy full SHA for 7b2192d

• Apply suggestions from code review

  Show description for 408c49a
  

  ggolawski

  and

  felicitymay

  authored
  408c49a

  Copy full SHA for 408c49a

Commits on Jan 23, 2020

• Query to detect LDAP injections in Java

  Show description for 968c18d
  ggolawski

  committed
  968c18d

  Copy full SHA for 968c18d

Commits on Jan 22, 2020

• Query to detect LDAP injections in Java

  Show description for bed6a98
  ggolawski

  committed
  bed6a98

  Copy full SHA for bed6a98

Commits on Jan 18, 2020

• Query to detect LDAP injections in Java

  Show description for 00ee3d2
  ggolawski

  committed
  00ee3d2

  Copy full SHA for 00ee3d2

• Query to detect LDAP injections in Java

  Show description for 95723b0
  ggolawski

  committed
  95723b0

  Copy full SHA for 95723b0

• Query to detect LDAP injections in Java

  Show description for 8cec463
  ggolawski

  committed
  8cec463

  Copy full SHA for 8cec463

Commits on Jan 14, 2020

• Query to detect LDAP injections in Java

  Show description for b732523
  ggolawski

  committed
  b732523

  Copy full SHA for b732523

Commits on Jan 12, 2020

• Query to detect LDAP injections in Java

  Show description for 3e86dd1
  ggolawski

  committed
  3e86dd1

  Copy full SHA for 3e86dd1

• Query to detect LDAP injections in Java

  Show description for c01aa3d
  ggolawski

  committed
  c01aa3d

  Copy full SHA for c01aa3d

Commits on Jan 11, 2020

• Query to detect LDAP injections in Java

  Show description for 7570fa9
  ggolawski

  committed
  7570fa9

  Copy full SHA for 7570fa9

Commits on Jan 2, 2020

• Merge pull request #2413 from JLLeitschuh/feature/JLL/maven_insecure_artifact_resolution

  Show description for 7e987c5
  aschackmull

  authored
  7e987c5

  Copy full SHA for 7e987c5

Commits on Dec 18, 2019

• Update java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.qhelp

  Show description for 75939af
  

  JLLeitschuh

  and

  aschackmull

  authored
  75939af

  Copy full SHA for 75939af

Commits on Dec 12, 2019

• Update java/ql/src/Security/CWE/CWE-829/InsecureDependencyResolution.ql

  JLLeitschuh

  authored
  0c2da8a

  Copy full SHA for 0c2da8a

Commits on Dec 10, 2019

• Update InsecureDependencyResolution with code review comments

  JLLeitschuh

  committed
  2296224

  Copy full SHA for 2296224

• Apply suggestions from code review

  Show description for f341234
  

  3 peopleauthored
  f341234

  Copy full SHA for f341234

Commits on Nov 26, 2019

• Java: Improve performance by normalizing import order to reduce cache invalidation.

  aschackmull

  committed
  deb6a6e

  Copy full SHA for deb6a6e

Commits on Nov 21, 2019

• Java: Use of HTTP/FTP to download/upload Maven artifacts

  Show description for 21193bd
  JLLeitschuh

  committed
  21193bd

  Copy full SHA for 21193bd

Commits on Nov 11, 2019

• Merge pull request #2230 from yh-semmle/java-move-cwe502-lib

  Show description for b0fecbc
  aschackmull

  authored
  b0fecbc

  Copy full SHA for b0fecbc

Commits on Nov 7, 2019

• Update links to OWASP cheat sheet

  

  Sauyon Lee

  committed
  0040c9f

  Copy full SHA for 0040c9f

Commits on Oct 30, 2019

• Java: move `UnsafeDeserialization.qll` to standard library location

  yh-semmle

  committed
  8620b05

  Copy full SHA for 8620b05

Commits on Oct 25, 2019

• Apply suggestions from code review for netty DefaultHttpHeaders

  Show description for 934eed9
  

  JLLeitschuh

  and

  aschackmull

  authored
  934eed9

  Copy full SHA for 934eed9

Commits on Oct 24, 2019

• Add CWE-113 check for io.netty.handler.codec.http.DefaultHttpHeaders

  Show description for dcbd6e0
  JLLeitschuh

  committed
  dcbd6e0

  Copy full SHA for dcbd6e0

Commits on Oct 15, 2019

• Move qll file to support import from custom QL queries

  

  alexey

  committed
  715f1dd

  Copy full SHA for 715f1dd

Commits on Aug 20, 2019

• Java: Don't use the deprecated Configuration2

  jbj

  committed
  9ac0cdd

  Copy full SHA for 9ac0cdd

Commits on Aug 13, 2019

• Java/C++/C#: Add support for BarrierGuards.

  aschackmull

  committed
  4550175

  Copy full SHA for 4550175

• Merge pull request #1724 from aschackmull/java/google-xmlreader

  Show description for 5e910a4
  yh-semmle

  authored
  5e910a4

  Copy full SHA for 5e910a4

Commits on Aug 9, 2019

• Java: Treat SecureJDKXercesXMLReader as a secure XMLReader.

  aschackmull

  committed
  41763e6

  Copy full SHA for 41763e6

Commits on Aug 8, 2019

• Java: Fix copy-paste typo.

  aschackmull

  committed
  b3e56d5

  Copy full SHA for b3e56d5

Commits on Aug 7, 2019

• Java: Improve barriers for the CWE-190 Arithmetic* queries.

  aschackmull

  committed
  20e6f55

  Copy full SHA for 20e6f55

• Merge pull request #1639 from aschackmull/java/in-out-barriers

  Show description for 033879f
  yh-semmle

  authored
  033879f

  Copy full SHA for 033879f

Commits on Aug 5, 2019

• Java: Change in/out barriers to be explicit in the configuration.

  aschackmull

  committed
  f880494

  Copy full SHA for f880494