Commits

Breadcrumbs

History for

ona98d93b

User selector

All users

All time

Commit History

Commits on Jan 27, 2025

• Java: Deprecate experimental queries.

  michaelnebel

  committed
  e3997f6

  Copy full SHA for e3997f6

Commits on Oct 24, 2023

• Autoformat

  smowton

  committed
  e8c9708

  Copy full SHA for e8c9708

• Mass-rename MethodAccess -> MethodCall

  smowton

  authored
  f552a15

  Copy full SHA for f552a15

Commits on May 3, 2023

• Java: Make implicit this receivers explicit

  kaspersv

  committed
  081085e

  Copy full SHA for 081085e

Commits on Apr 13, 2023

• Add UnsafeDeserializationRmi

  egregius313

  committed
  478309c

  Copy full SHA for 478309c

Commits on Dec 14, 2022

• Tag all security queries in supported languages' experimental directories with an experimental tag

  turbo

  committed
  4ec401a

  Copy full SHA for 4ec401a

Commits on Oct 11, 2022

• spelling: deserialization

  Show description for 3b9546f
  jsoref

  committed
  3b9546f

  Copy full SHA for 3b9546f

Commits on Sep 26, 2022

• update alert-messsages of java queries

  erik-krogh

  committed
  46b5bf3

  Copy full SHA for 46b5bf3

Commits on Feb 21, 2022

• Java: Performance tweaks

  igfoo

  committed
  7ce9b16

  Copy full SHA for 7ce9b16

Commits on Oct 29, 2021

• Java: Deprecate `StringLiteral.getRepresentedString()`

  Marcono1234

  committed
  bfb9577

  Copy full SHA for bfb9577

Commits on Oct 11, 2021

• Java: Add TypeObjectInputStream

  Marcono1234

  committed
  b009886

  Copy full SHA for b009886

Commits on Jun 23, 2021

• Apply suggestions from code review

  Show description for 0dfb869
  

  artem-smotrakov

  and

  smowton

  authored
  0dfb869

  Copy full SHA for 0dfb869

• Added sinks for RmiBasedExporter and HessianExporter

  artem-smotrakov

  committed
  14e724b

  Copy full SHA for 14e724b

Commits on Jun 1, 2021

• Better recommendation in UnsafeDeserializationRmi.qhelp

  Show description for 8dc1451
  

  artem-smotrakov

  and

  smowton

  authored
  8dc1451

  Copy full SHA for 8dc1451

Commits on May 29, 2021

• Fixed errors in UnsafeDeserializationRmi.qhelp

  artem-smotrakov

  committed
  b28d639

  Copy full SHA for b28d639

• Simplified UnsafeDeserializationRmi.ql

  artem-smotrakov

  committed
  62c6bee

  Copy full SHA for 62c6bee

Commits on May 23, 2021

• Added an example with deserialization filter to UnsafeDeserializationRmi.qhelp

  artem-smotrakov

  committed
  1b51dd4

  Copy full SHA for 1b51dd4

• Added test cases with sanitizers for UnsafeDeserializationRmi.ql

  artem-smotrakov

  committed
  c837605

  Copy full SHA for c837605

• Renamed RmiUnsafeDeserialization.ql -> UnsafeDeserializationRmi.ql

  artem-smotrakov

  committed
  d2e29fc

  Copy full SHA for d2e29fc

• Covered deserialization filters in RmiUnsafeDeserialization.ql

  artem-smotrakov

  committed
  2d93eea

  Copy full SHA for 2d93eea

• Look for remote callable method only in RmiUnsafeDeserialization.ql

  artem-smotrakov

  committed
  e28f919

  Copy full SHA for e28f919

• Added RmiUnsafeDeserialization.qhelp

  artem-smotrakov

  committed
  0182dfe

  Copy full SHA for 0182dfe

• Cover Registry in RmiUnsafeDeserialization.ql

  artem-smotrakov

  committed
  efa4b4f

  Copy full SHA for efa4b4f

• First draft of RmiUnsafeDeserialization.ql

  artem-smotrakov

  committed
  8b96ff9

  Copy full SHA for 8b96ff9

Commits on Mar 11, 2021

• Added a comment for getBeanIdentifier()

  Show description for 4b7c57c
  

  artem-smotrakov

  and

  smowton

  authored
  4b7c57c

  Copy full SHA for 4b7c57c

Commits on Mar 10, 2021

• Cover more configurations in UnsafeSpringExporterInConfigurationClass.ql

  artem-smotrakov

  committed
  0a5d58e

  Copy full SHA for 0a5d58e

• Split qhelp files

  artem-smotrakov

  committed
  df60268

  Copy full SHA for df60268

Commits on Mar 8, 2021

• Split SpringExporterUnsafeDeserialization.ql

  artem-smotrakov

  committed
  a78f211

  Copy full SHA for a78f211

Commits on Mar 6, 2021

• Use correct file names in SpringExporterUnsafeDeserialization.qhelp

  artem-smotrakov

  committed
  891b975

  Copy full SHA for 891b975

• Added another example for SpringExporterUnsafeDeserialization.ql

  artem-smotrakov

  committed
  bda2237

  Copy full SHA for bda2237

• Renamed SpringHttpInvokerUnsafeDeserialization.ql

  artem-smotrakov

  committed
  82cb4a8

  Copy full SHA for 82cb4a8

• Cover beans from XML configs in SpringHttpInvokerUnsafeDeserialization.ql

  artem-smotrakov

  committed
  dcabce6

  Copy full SHA for dcabce6

Commits on Mar 2, 2021

• Improved docs for SpringHttpInvokerUnsafeDeserialization.ql

  artem-smotrakov

  committed
  617ba65

  Copy full SHA for 617ba65

Commits on Feb 27, 2021

• Simplified returnsRemoteInvocationSerializingExporter()

  artem-smotrakov

  committed
  15a43ff

  Copy full SHA for 15a43ff

Commits on Feb 24, 2021

• Improved SpringHttpInvokerUnsafeDeserialization.qhelp

  artem-smotrakov

  committed
  e02b51f

  Copy full SHA for e02b51f