Commits

Breadcrumbs

History for

onf4b9efc

User selector

All users

All time

Commit History

Commits on Jul 25, 2024

• Now alerts about exposing `exception.getMessage()` in servlet responses are split out of `java/stack-trace-exposure` into its own alert `java/error-message-exposure` because this is a better fit.

  subaio-daniel-petersen

  committed
  1c1ba77

  Copy full SHA for 1c1ba77

Commits on Jul 11, 2024

• Java: Tag `java/non-https-url` with CWE-345

  max-schaefer

  authored
  d5d0cf5

  Copy full SHA for d5d0cf5

Commits on May 23, 2024

• Switch source and sink in TrustBoundaryViolation.ql

  aibaars

  authored
  b5b5fef

  Copy full SHA for b5b5fef

• Update TrustBoundaryViolation.ql

  aibaars

  committed
  d540675

  Copy full SHA for d540675

Commits on May 22, 2024

• Java: Reword recommendation section of XXE query

  atorralba

  committed
  5ec3335

  Copy full SHA for 5ec3335

Commits on May 16, 2024

• Merge pull request #16362 from michaelnebel/java/removelocalqueries

  Show description for b1329fd
  michaelnebel

  authored
  b1329fd

  Copy full SHA for b1329fd

Commits on May 15, 2024

• Simplify query.

  

  Max Schaefer

  committed
  3c47c11

  Copy full SHA for 3c47c11

Commits on May 13, 2024

• Java: Clean up some instances of getQualifiedName.

  aschackmull

  committed
  76e740b

  Copy full SHA for 76e740b

Commits on May 1, 2024

• Java: Deprecate the local content of UrlRedirectLocalQuery and remove the local query variant.

  michaelnebel

  committed
  d9c7401

  Copy full SHA for d9c7401

• Java: Deprecate the local content of TaintedPathQuery and remove the local query variant.

  michaelnebel

  committed
  ed7538d

  Copy full SHA for ed7538d

• Java: Deprecate the content of SqlTaintedLocalQuery and remove the local query variant.

  michaelnebel

  committed
  5b89bd2

  Copy full SHA for 5b89bd2

• Java: Deprecate the content of ResponseSplittingLocalQuery and remove local query variant.

  michaelnebel

  committed
  b68abab

  Copy full SHA for b68abab

• Java: Deprecate the content of NumericCastTaintedLocalQuery, remove the local query variant and update the non-local query variant.

  michaelnebel

  committed
  d05c5e3

  Copy full SHA for d05c5e3

• Java: Deprecate the content of ImproperValidationOrArray and remove local query variants.

  michaelnebel

  committed
  301a6cc

  Copy full SHA for 301a6cc

• Java: Deprecate the content of ExternallyControlledFormatStringLocalQuery and remove the externally controlled format string local query variant.

  michaelnebel

  committed
  acd0fa4

  Copy full SHA for acd0fa4

• Java: Deprecate the local content of CommandLineQuery and remove the exec tainted local query variant.

  michaelnebel

  committed
  85a4dd0

  Copy full SHA for 85a4dd0

• Java: Deprecate the content of ArithmeticTaintedLocalQuery and remove the arithmetic tainted local query variant.

  michaelnebel

  committed
  072f190

  Copy full SHA for 072f190

• Java: Deprecate the content of XxeLocalQuery and remove the Xxe local query variant.

  michaelnebel

  committed
  93988e5

  Copy full SHA for 93988e5

• Java: Deprecate the content of XssLocalQuery and remove the Xss local query variant.

  michaelnebel

  committed
  e0c2a43

  Copy full SHA for e0c2a43

Commits on Mar 29, 2024

• Merge pull request #14854 from jcogs33/jcogs33/unsafe-url-forward-promotion

  Show description for d889e3c
  jcogs33

  authored
  d889e3c

  Copy full SHA for d889e3c

Commits on Mar 28, 2024

• docs wording updates

  Show description for 2f8c4df
  

  jcogs33

  and

  subatoi

  authored
  2f8c4df

  Copy full SHA for 2f8c4df

Commits on Mar 13, 2024

• fix typo

  erik-krogh

  committed
  ef8368c

  Copy full SHA for ef8368c

• Java: update qhelp

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  c331393

  Copy full SHA for c331393

• Java: rename 'UnsafeUrlForward' to 'UrlForward'

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  09bc21d

  Copy full SHA for 09bc21d

• Java: update query metadata and alert message

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  6e7c054

  Copy full SHA for 6e7c054

• Java: move config to Query.qll file

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  2793f28

  Copy full SHA for 2793f28

• Java: copy files from experimental

  

  Jami Cogswell

  authored and

  Jami Cogswell

  committed
  0d38a96

  Copy full SHA for 0d38a96

• Java: update the url-redirection in the same style as the C# qhelp

  erik-krogh

  committed
  013ed7a

  Copy full SHA for 013ed7a

Commits on Feb 22, 2024

• Merge pull request #15548 from joefarebrother/android-local-auth-keys

  Show description for 2ebb80b
  joefarebrother

  authored
  2ebb80b

  Copy full SHA for 2ebb80b

• Remove period from 'name'

  Show description for 4810657
  felicitymay

  authored
  4810657

  Copy full SHA for 4810657

• Apply suggestions from documentation review

  Show description for ef12469
  

  joefarebrother

  and

  sabrowning1

  authored
  ef12469

  Copy full SHA for ef12469

Commits on Feb 16, 2024

• Address reveiws - Add BAD example to doc, add doc example to tests and fix typo.

  joefarebrother

  committed
  9ad05fe

  Copy full SHA for 9ad05fe

Commits on Feb 14, 2024

• Fix typo in NettyRequestSplitting.java

  JLLeitschuh

  authored
  50056d6

  Copy full SHA for 50056d6

Commits on Feb 12, 2024

• Merge pull request #15533 from JLLeitschuh/patch-5

  Show description for b6385f7
  atorralba

  authored
  b6385f7

  Copy full SHA for b6385f7

• Add change note + update severity

  joefarebrother

  committed
  3a4a841

  Copy full SHA for 3a4a841