Commits

History for

oncodeql-cli/v2.19.3

Commits on Sep 30, 2024

Merge pull request #17579 from aschackmull/java/type-sanitizers
aschackmull
authored
a017f92

Commits on Sep 26, 2024

Merge pull request #17424 from RasmusWL/active-threat-model-source
RasmusWL
authored
381ea93

Commits on Sep 25, 2024

Java: Add more type-based sanitizers.
aschackmull
committed
aaecb9b

Commits on Sep 20, 2024

Java: apply query alert restrictions
cklin
committed
75ec8ce

Commits on Sep 12, 2024

mass rename to ActiveThreatModelSource
RasmusWL
committed
8c10155

Commits on Sep 3, 2024

delete imports to a deleted file
erik-krogh
committed
846882d
delete some deprecated files
erik-krogh
committed
20dfdc9
use my script to delete outdated deprecations
erik-krogh
committed
0fdd06f

Commits on Aug 6, 2024

Java: Fix bad join
hvitved
committed
a7410e4

Commits on Aug 2, 2024

Merge pull request #17075 from RobbingDaHood/17052-second-try-do-not-expose-error-message
aschackmull
authored
4d023f1

Commits on Jul 30, 2024

Add "tokenizer" to sensitive variable name FPs
owen-mc
committed
e259b25
Factor out matching sensitive variable name FPs
owen-mc
committed
0704946

Commits on Jul 25, 2024

Now alerts about exposing `exception.getMessage()` in servlet responses are split out of `java/stack-trace-exposure` into its own alert `java/error-message-exposure` because this is a better fit.
subaio-daniel-petersen
committed
1c1ba77

Commits on Jul 23, 2024

Commits on Jul 22, 2024

Move SensitiveLoggerConfig source to extensible format
Salah Baddou
committed
2ad70cb

Commits on Jul 16, 2024

Merge pull request #16914 from owen-mc/java/android-app-detection
owen-mc
authored
e2356d9
Java: Remove superfluous clone models.
aschackmull
committed
938f46b

Commits on Jul 6, 2024

Update Android app detection
owen-mc
committed
5347770

Commits on Jul 5, 2024

Move detection of Android app to one place
owen-mc
committed
9c82966

Commits on Jun 17, 2024

Java: Opt-in the tainted permissions check query to threat models.
michaelnebel
committed
327dab6

Commits on Jun 4, 2024

Commits on May 30, 2024

Update SpringCsrfProtection.qll
mbaluda
authored
bbe888c
Disable csrf for ServerHttpSecurity
mbaluda
committed
e2479a7

Commits on May 22, 2024

Java: Add simple type sanitization to java/zipslip.
aschackmull
committed
d82acf5

Commits on May 16, 2024

Merge pull request #16362 from michaelnebel/java/removelocalqueries
michaelnebel
authored
b1329fd

Commits on May 13, 2024

Java: Clean up some instances of getQualifiedName.
aschackmull
committed
76e740b

Commits on May 3, 2024

Java: Address review comments and some other code quality improvements.
michaelnebel
committed
8def1c2

Commits on May 1, 2024