Commits

Breadcrumbs

History for

onpython/class-instance

User selector

All users

All time

Commit History

Commits on Jun 3, 2026

• Merge pull request #21804 from github/copilot/add-tests-for-models

  Show description for 52f2a58
  owen-mc

  authored
  52f2a58

  Copy full SHA for 52f2a58

Commits on May 28, 2026

• Build `RequestBuilder` more realistically

  owen-mc

  committed
  d95d998

  Copy full SHA for d95d998

• Improve how `org.apache.http.client.HttpClient` is created in test

  owen-mc

  committed
  37589dd

  Copy full SHA for 37589dd

• Change variable name in test

  owen-mc

  committed
  a159dc1

  Copy full SHA for a159dc1

Commits on May 7, 2026

• Update test output

  owen-mc

  committed
  dd35bc0

  Copy full SHA for dd35bc0

Commits on May 6, 2026

• Replace fluent SSRF changes with Apache HttpClient execute model tests

  Show description for 043ec85
  

  Copilot

  and

  owen-mc

  authored
  043ec85

  Copy full SHA for 043ec85

• Add SSRF tests and stubs for Apache Http fluent Request models

  Show description for f5b17b0
  

  Copilot

  and

  owen-mc

  authored
  f5b17b0

  Copy full SHA for f5b17b0

Commits on May 1, 2026

• Merge branch 'main' into fix/path-injection-read-subkind

  MarkLee131

  authored
  bafa892

  Copy full SHA for bafa892

• Java: move File inspection methods to path-injection[read]

  Show description for 119994b
  MarkLee131

  committed
  119994b

  Copy full SHA for 119994b

Commits on Apr 30, 2026

• Merge pull request #21654 from MarkLee131/fix/sensitive-log-hash-sanitizer

  Show description for 87c35e6
  owen-mc

  authored
  87c35e6

  Copy full SHA for 87c35e6

• Merge branch 'main' into fix/path-injection-read-subkind

  MarkLee131

  authored
  90741b1

  Copy full SHA for 90741b1

Commits on Apr 29, 2026

• Merge remote-tracking branch 'origin/main' into fix/sensitive-log-hash-sanitizer

  Show description for 28a6ff2
  MarkLee131

  committed
  28a6ff2

  Copy full SHA for 28a6ff2

• Update java/ql/test/query-tests/security/CWE-532/Test.java

  Show description for 75162bb
  

  MarkLee131

  and

  owen-mc

  authored
  75162bb

  Copy full SHA for 75162bb

• Merge branch 'main' into fix/trust-boundary-regexp-barrier

  MarkLee131

  authored
  49d014c

  Copy full SHA for 49d014c

Commits on Apr 24, 2026

• Merge pull request #21749 from github/copilot/add-hibernate-sql-injection-tests

  Show description for 9fbe447
  owen-mc

  authored
  9fbe447

  Copy full SHA for 9fbe447

Commits on Apr 23, 2026

• Model additional Hibernate query sinks

  Show description for 25d232b
  

  Copilot

  and

  owen-mc

  authored
  25d232b

  Copy full SHA for 25d232b

• Add Hibernate SQL injection sink tests

  Show description for 081ad03
  

  Copilot

  and

  owen-mc

  authored
  081ad03

  Copy full SHA for 081ad03

• Merge branch 'main' into fix/path-injection-torealpath

  owen-mc

  authored
  9f19791

  Copy full SHA for 9f19791

Commits on Apr 21, 2026

• Merge branch 'main' into fix/trust-boundary-regexp-barrier

  MarkLee131

  authored
  af794ed

  Copy full SHA for af794ed

• Merge branch 'github:main' into fix/path-injection-read-subkind

  MarkLee131

  authored
  07e97e2

  Copy full SHA for 07e97e2

• Merge pull request #21650 from MarkLee131/fix/sensitive-log-fp-regex

  Show description for c91b5b3
  owen-mc

  authored
  c91b5b3

  Copy full SHA for c91b5b3

Commits on Apr 20, 2026

• Java: split read-only path sinks into path-injection[read]

  Show description for c336a15
  MarkLee131

  committed
  c336a15

  Copy full SHA for c336a15

• Merge pull request #21734 from owen-mc/java/fix-partial-path-traversal

  Show description for 9f310c2
  owen-mc

  authored
  9f310c2

  Copy full SHA for 9f310c2

Commits on Apr 19, 2026

• Fix bug so `+= File.separator` is recognized

  owen-mc

  committed
  6d4a397

  Copy full SHA for 6d4a397

• Add SPURIOUS test for `+= File.separator`

  owen-mc

  committed
  6099c5d

  Copy full SHA for 6099c5d

• Use inline expectations with second test

  Show description for 63d20a5
  

  owen-mc

  and

  Copilot

  committed
  63d20a5

  Copy full SHA for 63d20a5

Commits on Apr 18, 2026

• Make inline expectation comments specify query

  owen-mc

  committed
  dca7046

  Copy full SHA for dca7046

Commits on Apr 17, 2026

• Java: Add XXE sink model for Woodstox WstxInputFactory

  Show description for f5131f9
  

  Salah Baddou

  authored and

  chmodxxx

  committed
  f5131f9

  Copy full SHA for f5131f9

Commits on Apr 7, 2026

• Java: Pin CWE-676 test to --release 25

  Show description for 5a6eb79
  IdrissRio

  committed
  5a6eb79

  Copy full SHA for 5a6eb79

Commits on Apr 4, 2026

• Add @Pattern annotation test case and javax-validation-constraints stub

  Show description for b49c6dc
  MarkLee131

  committed
  b49c6dc

  Copy full SHA for b49c6dc

• Update java/ql/test/query-tests/security/CWE-501/TrustBoundaryViolations.java

  Show description for 258a53e
  

  MarkLee131

  and

  Copilot

  authored
  258a53e

  Copy full SHA for 258a53e

• Remove secretQuestion from FP exclusion list

  Show description for 46ef020
  MarkLee131

  committed
  46ef020

  Copy full SHA for 46ef020

• Java: add RegexpCheckBarrier to trust-boundary-violation sanitizers

  Show description for 345b842
  MarkLee131

  committed
  345b842

  Copy full SHA for 345b842

• Java: treat hash/encrypt/digest methods as sensitive-log sanitizers

  Show description for f338ded
  MarkLee131

  committed
  f338ded

  Copy full SHA for f338ded

• Java: reduce false positives in sensitive-log by expanding FP exclusion regex

  Show description for 20cfe29
  MarkLee131

  committed
  20cfe29

  Copy full SHA for 20cfe29