Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on May 20, 2021

• Add change note.

  

  Sebastian Bauersfeld

  committed
  ffcca4d

  Copy full SHA for ffcca4d

• Add method invocations of Spring's SavedRequest as a remote sources.

  

  Sebastian Bauersfeld

  committed
  28f5974

  Copy full SHA for 28f5974

Commits on May 18, 2021

• Optimize the sink and update qldoc

  luchua-bc

  committed
  02aa9c6

  Copy full SHA for 02aa9c6

• Update qldoc

  luchua-bc

  committed
  d4323a4

  Copy full SHA for d4323a4

• Refactor inconsistent method names

  luchua-bc

  committed
  9d39226

  Copy full SHA for 9d39226

• Update method name and qldoc

  luchua-bc

  committed
  2fa249a

  Copy full SHA for 2fa249a

• Use inline implementation for ScriptEngineFactory

  luchua-bc

  committed
  2c1374b

  Copy full SHA for 2c1374b

• Allow all arguments of methods in ScriptEngineFactory

  luchua-bc

  committed
  0ac8453

  Copy full SHA for 0ac8453

• Optimize the query

  luchua-bc

  committed
  e4699f7

  Copy full SHA for e4699f7

• Include more scenarios and update qldoc

  luchua-bc

  committed
  d664aa6

  Copy full SHA for d664aa6

• Refactor the ScriptEngine query and the Rhino code injection query into one

  luchua-bc

  committed
  852bcfb

  Copy full SHA for 852bcfb

• Rhino code injection

  luchua-bc

  committed
  b0b5338

  Copy full SHA for b0b5338

• Merge pull request #5819 from luchua-bc/java/jpython-injection

  Show description for 4230869
  smowton

  authored
  4230869

  Copy full SHA for 4230869

• Merge pull request #5844 from haby0/SpringRedirects

  Show description for 71f540a
  smowton

  authored
  71f540a

  Copy full SHA for 71f540a

• Optimize the sink and update method name

  luchua-bc

  committed
  2a0721b

  Copy full SHA for 2a0721b

• Solve errors caused by private ownership

  haby0

  committed
  e46de44

  Copy full SHA for e46de44

• modified comment

  haby0

  committed
  caf5f4d

  Copy full SHA for caf5f4d

• Merge pull request #5814 from JLLeitschuh/feat/JLL/jackson_as_taint_step

  Show description for 9b0e3b1
  aschackmull

  authored
  9b0e3b1

  Copy full SHA for 9b0e3b1

• Add filtering of String.format

  haby0

  committed
  a0cd551

  Copy full SHA for a0cd551

Commits on May 17, 2021

• Update method name and qldoc

  luchua-bc

  committed
  e652d87

  Copy full SHA for e652d87

• Make private

  aschackmull

  authored
  77c93dc

  Copy full SHA for 77c93dc

Commits on May 14, 2021

• Remove the isAdditionalTaintStep predicate

  luchua-bc

  committed
  1497fba

  Copy full SHA for 1497fba

• Add lines-of-code tags

  Show description for f378513
  rneatherway

  committed
  f378513

  Copy full SHA for f378513

• Add left value, Add return expression tracing flow

  haby0

  committed
  498c99e

  Copy full SHA for 498c99e

Commits on May 13, 2021

• Delete RedirectBuilderFlowConfig

  haby0

  committed
  02e4150

  Copy full SHA for 02e4150

• Add spring url redirection detect

  haby0

  committed
  effa2b1

  Copy full SHA for effa2b1

Commits on May 12, 2021

• Update java/ql/src/semmle/code/java/frameworks/jackson/JacksonSerializability.qll

  Show description for 48b50f9
  

  JLLeitschuh

  and

  atorralba

  authored
  48b50f9

  Copy full SHA for 48b50f9

• Add change notes.

  

  Sebastian Bauersfeld

  committed
  b05512a

  Copy full SHA for b05512a

• Consider boxed booleans to avoid false positives for XXE.ql

  

  Sebastian Bauersfeld

  committed
  bf4d881

  Copy full SHA for bf4d881

• Merge pull request #5843 from JLLeitschuh/feat/JLL/improve_kryo_support

  Show description for a247ae4
  aschackmull

  authored
  a247ae4

  Copy full SHA for a247ae4

• Merge pull request #5773 from hvitved/dataflow/aggressive-caching

  Show description for 74ae2e0
  aschackmull

  authored
  74ae2e0

  Copy full SHA for 74ae2e0

Commits on May 11, 2021

• Optimize the query

  luchua-bc

  committed
  e7cd6c9

  Copy full SHA for e7cd6c9

• Cleanup Jackson logic after code review

  JLLeitschuh

  committed
  5a68ac8

  Copy full SHA for 5a68ac8

• [Java] Jackson add support for 2 step deserialization taint flow

  JLLeitschuh

  committed
  bacc3ef

  Copy full SHA for bacc3ef

• Support field access data flow for JacksonDeserializedTaintStep

  JLLeitschuh

  committed
  e97bad3

  Copy full SHA for e97bad3