Commits

Commit history

1. Commits on Aug 9, 2021

   • Merge pull request #6006 from artem-smotrakov/timing-attacks

     Show description for 5ba9347
     smowton

     authored
     5ba9347View commit details

     Copy full SHA for 5ba9347

     View code at this pointBrowse repository at this point

   • Fix test reference and expectations

     smowton

     committed
     171dc26View commit details

     Copy full SHA for 171dc26

     View code at this pointBrowse repository at this point
2. Commits on Aug 5, 2021

   • Merge pull request #6424 from github/workflow/coverage/update

     Show description for c29353d
     aschackmull

     authored
     c29353dView commit details

     Copy full SHA for c29353d

     View code at this pointBrowse repository at this point

   • Merge pull request #5911 from atorralba/atorralba/promote-missing-jwt-signature-check

     Show description for 0356ed7
     atorralba

     authored
     0356ed7View commit details

     Copy full SHA for 0356ed7

     View code at this pointBrowse repository at this point

   • Merge pull request #6419 from smowton/smowton/admin/unsafe-deserialization-jabsorb

     Show description for 1932f60
     aschackmull

     authored
     1932f60View commit details

     Copy full SHA for 1932f60

     View code at this pointBrowse repository at this point

   • Add changed framework coverage reports

     github-actions[bot]

     committed
     9d13edbView commit details

     Copy full SHA for 9d13edb

     View code at this pointBrowse repository at this point
3. Commits on Aug 4, 2021

   • Renamed queries and merged qhelp files

     artem-smotrakov

     committed
     b913928View commit details

     Copy full SHA for b913928

     View code at this pointBrowse repository at this point

   • Move test files to appropriate package directories

     smowton

     committed
     1f08c3fView commit details

     Copy full SHA for 1f08c3f

     View code at this pointBrowse repository at this point

   • Code review suggestions

     Show description for 5a42448
     smowton

     committed
     5a42448View commit details

     Copy full SHA for 5a42448

     View code at this pointBrowse repository at this point

   • Add unsafe-deserialization support for Jabsorb

     Show description for 69549e9
     smowton

     committed
     69549e9View commit details

     Copy full SHA for 69549e9

     View code at this pointBrowse repository at this point

   • Update java/ql/src/semmle/code/java/security/JWT.qll

     aschackmull

     authored
     5f9f857View commit details

     Copy full SHA for 5f9f857

     View code at this pointBrowse repository at this point

   • Update java/ql/src/semmle/code/java/security/JWT.qll

     aschackmull

     authored
     78998d0View commit details

     Copy full SHA for 78998d0

     View code at this pointBrowse repository at this point

   • Merge pull request #5931 from atorralba/atorralba/promote-jndi-injection

     Show description for 6a09a56
     aschackmull

     authored
     6a09a56View commit details

     Copy full SHA for 6a09a56

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     Show description for bc9563c
     

     atorralba

     and

     aschackmull

     authored
     bc9563cView commit details

     Copy full SHA for bc9563c

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     Show description for 989afb4
     

     atorralba

     and

     aschackmull

     authored
     989afb4View commit details

     Copy full SHA for 989afb4

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     atorralba

     committed
     a046d75View commit details

     Copy full SHA for a046d75

     View code at this pointBrowse repository at this point

   • Refactor to path query

     atorralba

     committed
     452fd9aView commit details

     Copy full SHA for 452fd9a

     View code at this pointBrowse repository at this point

   • Update Security-Severity for CWE-918

     turbo

     committed
     a8f84daView commit details

     Copy full SHA for a8f84da

     View code at this pointBrowse repository at this point

   • Make the additional flow step abstract

     atorralba

     committed
     b586f3eView commit details

     Copy full SHA for b586f3e

     View code at this pointBrowse repository at this point

   • Renamed JWTQuery so that it's named after the actual query name

     atorralba

     committed
     f4bc4dfView commit details

     Copy full SHA for f4bc4df

     View code at this pointBrowse repository at this point

   • Add changed framework coverage reports

     github-actions[bot]

     committed
     8a2acdaView commit details

     Copy full SHA for 8a2acda

     View code at this pointBrowse repository at this point
4. Commits on Aug 3, 2021

   • Merge pull request #6162 from smowton/smowton/feature/jax-rs-content-type-sensitivity-fixes

     Show description for eaf3d3c
     smowton

     authored
     eaf3d3cView commit details

     Copy full SHA for eaf3d3c

     View code at this pointBrowse repository at this point

   • Merge pull request #5894 from atorralba/atorralba/promote-ognl-injection

     Show description for 7fb1e15
     aschackmull

     authored
     7fb1e15View commit details

     Copy full SHA for 7fb1e15

     View code at this pointBrowse repository at this point

   • Merge pull request #6382 from bmuskalla/stringValueOfTaint

     Show description for be6fd7c
     aschackmull

     authored
     be6fd7cView commit details

     Copy full SHA for be6fd7c

     View code at this pointBrowse repository at this point

   • Apply suggestions from code review

     smowton

     authored
     3bf4149View commit details

     Copy full SHA for 3bf4149

     View code at this pointBrowse repository at this point

   • Avoid taint for valueOf(Object)

     

     Benjamin Muskalla

     committed
     8ce8414View commit details

     Copy full SHA for 8ce8414

     View code at this pointBrowse repository at this point

   • Merge pull request #5846 from atorralba/atorralba/promote-unsafe-android-webview-fetch

     Show description for c0d76da
     aschackmull

     authored
     c0d76daView commit details

     Copy full SHA for c0d76da

     View code at this pointBrowse repository at this point

   • Fix tests affected by Jackson stubs changes

     atorralba

     committed
     f5cbec4View commit details

     Copy full SHA for f5cbec4

     View code at this pointBrowse repository at this point

   • Merge pull request #6062 from atorralba/atorralba/promote-groovy-injection

     Show description for fb9feab
     aschackmull

     authored
     fb9feabView commit details

     Copy full SHA for fb9feab

     View code at this pointBrowse repository at this point

   • Fix tests affected by Jackson stubs changes

     atorralba

     committed
     a33e0bcView commit details

     Copy full SHA for a33e0bc

     View code at this pointBrowse repository at this point

   • Fix reference to PostUpdateNode

     atorralba

     committed
     c44de87View commit details

     Copy full SHA for c44de87

     View code at this pointBrowse repository at this point

   • Resync dataflow clone

     smowton

     committed
     3637914View commit details

     Copy full SHA for 3637914

     View code at this pointBrowse repository at this point

   • Make imports private where possible

     Show description for afa8278
     

     smowton

     and

     aschackmull

     committed
     afa8278View commit details

     Copy full SHA for afa8278

     View code at this pointBrowse repository at this point

   • Improve docs

     smowton

     committed
     a52c474View commit details

     Copy full SHA for a52c474

     View code at this pointBrowse repository at this point

   • Create a dataflow instance specifically for the Serializability library

     Show description for 75310a6
     smowton

     committed
     75310a6View commit details

     Copy full SHA for 75310a6

     View code at this pointBrowse repository at this point