Commits

Breadcrumbs

History for

onf4b9efc

User selector

All users

All time

Commit History

Commits on Oct 22, 2025

• Java: Lower security-severity for Insecure Cookie query to 4.0

  Napalys

  committed
  91b0aaa

  Copy full SHA for 91b0aaa

• CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0

  Napalys

  committed
  fa47174

  Copy full SHA for fa47174

Commits on Oct 17, 2025

• Merge pull request #20603 from owen-mc/update-broken-algo-qhelp

  Show description for 66f95bc
  owen-mc

  authored
  66f95bc

  Copy full SHA for 66f95bc

Commits on Oct 14, 2025

• Review suggestions - update comments and description

  joefarebrother

  committed
  d8b37d0

  Copy full SHA for d8b37d0

Commits on Oct 13, 2025

• Update comments

  joefarebrother

  committed
  093b04f

  Copy full SHA for 093b04f

• Update tests and add inline expectations

  joefarebrother

  committed
  c799f93

  Copy full SHA for c799f93

• Update documentation, rename things and add more comments to explain how the implementation works, remove filter for test code (prefer to filter in code scanning ui than in query logic)

  joefarebrother

  committed
  e1cf3d3

  Copy full SHA for e1cf3d3

• Copy experimental query to main

  joefarebrother

  committed
  54aefe0

  Copy full SHA for 54aefe0

Commits on Oct 8, 2025

• Improve qhelp for broken crypto algo queries

  Show description for 0bcdb91
  owen-mc

  committed
  0bcdb91

  Copy full SHA for 0bcdb91

Commits on Aug 26, 2025

• Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config-promotion

  jcogs33

  authored
  3675e4b

  Copy full SHA for 3675e4b

Commits on Jul 21, 2025

• Merge pull request #20018 from owen-mc/java/snakeyaml-safe-unsafe-deserialization

  Show description for 472a6b5
  owen-mc

  authored
  472a6b5

  Copy full SHA for 472a6b5

• Merge pull request #20077 from d10c/d10c/diff-informed-phase-3-java

  Show description for fbee6bb
  d10c

  authored
  fbee6bb

  Copy full SHA for fbee6bb

Commits on Jul 19, 2025

• Java: remove version debugging from alert message

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0dd33b2

  Copy full SHA for 0dd33b2

Commits on Jul 18, 2025

• Java: rename to align with 'java/spring-boot-exposed-actuators' query

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  70d5150

  Copy full SHA for 70d5150

• Java: adjust metadata and alert msg

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  ea529b0

  Copy full SHA for ea529b0

• Java: minor refactoring

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  7d5e939

  Copy full SHA for 7d5e939

• Java: update qhelp

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  afa6610

  Copy full SHA for afa6610

Commits on Jul 17, 2025

• Java: add related location to alert message

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0d2a422

  Copy full SHA for 0d2a422

• Java: fix test case for version 1.4

  Show description for 2bfc4b4
  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  2bfc4b4

  Copy full SHA for 2bfc4b4

• Java: move code to .qll file

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  1b90a30

  Copy full SHA for 1b90a30

• Java: remove deprecation

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  38260e7

  Copy full SHA for 38260e7

• Java: copy out of experimental

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  a39cb40

  Copy full SHA for a39cb40

• [DIFF-INFORMED] Java: AndroidWebViewSettingsAllowsContentAccess

  d10c

  committed
  05df1d3

  Copy full SHA for 05df1d3

• Java: Prune PathGraph for CsrfUnprotectedRequestType.ql

  aschackmull

  committed
  996de78

  Copy full SHA for 996de78

Commits on Jul 15, 2025

• Update SnakeYaml reference to note that it is outdated

  owen-mc

  committed
  9ef22ff

  Copy full SHA for 9ef22ff

Commits on Jul 10, 2025

• Update qhelp: SnakeYaml is safe from version 2.0

  owen-mc

  committed
  c39e5a7

  Copy full SHA for c39e5a7

Commits on Jul 3, 2025

• Fix java/netty-http-request-or-response-splitting overlay compilation regression

  kaspersv

  committed
  425448a

  Copy full SHA for 425448a

Commits on Jun 12, 2025

• Merge pull request #19738 from owen-mc/pr/felickz/19530

  Show description for 538a5af
  owen-mc

  authored
  538a5af

  Copy full SHA for 538a5af

Commits on Jun 10, 2025

• Update ExecUnescaped.ql - causing FPs with hard coded strings

  Show description for 857b51b
  apsscolari

  authored
  857b51b

  Copy full SHA for 857b51b

Commits on Jun 6, 2025

• Merge branch 'main' into cwe-134

  felickz

  authored
  77e49f1

  Copy full SHA for 77e49f1

Commits on May 19, 2025

• Set CWE-134 from 9.3 to 7.3 CVSS score for memory safe languages

  Show description for 8a81aa1
  felickz

  authored
  8a81aa1

  Copy full SHA for 8a81aa1

• Lower the precision of a range of harcoded password queries to remove them from query suites.

  michaelnebel

  committed
  03ecd24

  Copy full SHA for 03ecd24

Commits on Apr 30, 2025

• Fix cwe tags to include leading zero

  owen-mc

  committed
  cf614a5

  Copy full SHA for cf614a5

Commits on Mar 21, 2025

• Java: fix comma splice in alert message

  nickrolfe

  committed
  361fbba

  Copy full SHA for 361fbba

Commits on Mar 14, 2025

• Address review comments

  owen-mc

  committed
  7702e9d

  Copy full SHA for 7702e9d