Commits

Breadcrumbs

History for

onfc6af04

User selector

All users

All time

Commit History

Commits on Sep 27, 2021

• Moved from experimental

  atorralba

  committed
  fc6af04

  Copy full SHA for fc6af04

Commits on Sep 23, 2021

• Remove cached property from SensitiveSource::flowsTo

  atorralba

  committed
  51d2b52

  Copy full SHA for 51d2b52

• Remove unused library

  atorralba

  committed
  563e8a2

  Copy full SHA for 563e8a2

• Refactored cleartext storage libraries

  atorralba

  committed
  a30554e

  Copy full SHA for a30554e

Commits on Sep 17, 2021

• Merge pull request #6600 from atorralba/atorralba/fix-conditionalbypass

  Show description for 2cbad4a
  aschackmull

  authored
  2cbad4a

  Copy full SHA for 2cbad4a

Commits on Sep 16, 2021

• Java: Replace incorrect usage of `Literal.getLiteral()`

  

  Marcono1234

  authored and

  smowton

  committed
  58d2d5d

  Copy full SHA for 58d2d5d

Commits on Sep 15, 2021

• Refactored HttpsUrls.ql

  atorralba

  committed
  2e08c5d

  Copy full SHA for 2e08c5d

• Fix scope issues in the Java example

  atorralba

  committed
  c3c7337

  Copy full SHA for c3c7337

• Suggestions from code review

  atorralba

  committed
  0232646

  Copy full SHA for 0232646

• Update InsecureBasicAuth.qhelp

  

  mchammer01

  authored and

  atorralba

  committed
  0e7cbbf

  Copy full SHA for 0e7cbbf

• Added full stops

  

  mchammer01

  authored and

  atorralba

  committed
  e58b90e

  Copy full SHA for e58b90e

• Decouple InsecureBasicAuth.qll to reuse the taint tracking configuration

  atorralba

  committed
  30178d4

  Copy full SHA for 30178d4

• Remove CWE reference from qlhelp since it's obtained from metadata

  atorralba

  committed
  90df3fa

  Copy full SHA for 90df3fa

• Refactored into InsecureBasicAuth.qll

  atorralba

  committed
  2cada38

  Copy full SHA for 2cada38

• Moved from experimental

  atorralba

  committed
  905be67

  Copy full SHA for 905be67

Commits on Sep 14, 2021

• Merge pull request #6393 from luchua-bc/java/xss-jsf

  Show description for 6cff0d0
  smowton

  authored
  6cff0d0

  Copy full SHA for 6cff0d0

• Deprecated and replace uses of old name `ServletWriterSource`

  smowton

  committed
  a1ad1dd

  Copy full SHA for a1ad1dd

• Refactor to use ConditionalBypassQuery.qll

  atorralba

  committed
  1f7990d

  Copy full SHA for 1f7990d

• Use RemoteFlowSource instead of UserInput

  atorralba

  committed
  a484e9f

  Copy full SHA for a484e9f

• Remove JSF XSS Example

  Show description for cb8096f
  smowton

  committed
  cb8096f

  Copy full SHA for cb8096f

• Remove JSF example

  Show description for cca9ad0
  smowton

  committed
  cca9ad0

  Copy full SHA for cca9ad0

• Query to detect XSS with JavaServer Faces (JSF)

  

  luchua-bc

  authored and

  smowton

  committed
  24addd5

  Copy full SHA for 24addd5

Commits on Sep 10, 2021

• Add support for the Flexjson framework to the unsafe-deserialization query

  smowton

  committed
  9b48820

  Copy full SHA for 9b48820

Commits on Aug 24, 2021

• Downgrade precision of java/concatenated-sql-query

  smowton

  committed
  7f73efe

  Copy full SHA for 7f73efe

Commits on Aug 5, 2021

• Unsafe deserialization: add support for Jodd JSON library

  smowton

  committed
  0b6c991

  Copy full SHA for 0b6c991

• Merge pull request #5911 from atorralba/atorralba/promote-missing-jwt-signature-check

  Show description for 0356ed7
  atorralba

  authored
  0356ed7

  Copy full SHA for 0356ed7

• Merge pull request #6419 from smowton/smowton/admin/unsafe-deserialization-jabsorb

  Show description for 1932f60
  aschackmull

  authored
  1932f60

  Copy full SHA for 1932f60

Commits on Aug 4, 2021

• Add unsafe-deserialization support for Jabsorb

  Show description for 69549e9
  smowton

  committed
  69549e9

  Copy full SHA for 69549e9

• Merge pull request #5931 from atorralba/atorralba/promote-jndi-injection

  Show description for 6a09a56
  aschackmull

  authored
  6a09a56

  Copy full SHA for 6a09a56

• Apply suggestions from code review

  atorralba

  committed
  a046d75

  Copy full SHA for a046d75

• Refactor to path query

  atorralba

  committed
  452fd9a

  Copy full SHA for 452fd9a

• Update Security-Severity for CWE-918

  turbo

  committed
  a8f84da

  Copy full SHA for a8f84da

• Renamed JWTQuery so that it's named after the actual query name

  atorralba

  committed
  f4bc4df

  Copy full SHA for f4bc4df

Commits on Aug 3, 2021

• Merge pull request #6162 from smowton/smowton/feature/jax-rs-content-type-sensitivity-fixes

  Show description for eaf3d3c
  smowton

  authored
  eaf3d3c

  Copy full SHA for eaf3d3c

• Merge pull request #5894 from atorralba/atorralba/promote-ognl-injection

  Show description for 7fb1e15
  aschackmull

  authored
  7fb1e15

  Copy full SHA for 7fb1e15