-
Notifications
You must be signed in to change notification settings - Fork 2k
Pull requests: github/codeql
Author
Label
Projects
Milestones
Reviews
Assignee
Sort
Pull requests list
Java: catch delayed unsafe deserialization
Java
#8766
opened Apr 17, 2022 by
artem-smotrakov
Contributor
Loading…
Add auto-remediation to InsecureDependencyResolution.qhelp
documentation
Java
#8790
opened Apr 20, 2022 by
JLLeitschuh
Contributor
Loading…
Java: Add support for data flow through thrown exceptions.
Java
#9914
opened Jul 28, 2022 by
aschackmull
Contributor
•
Draft
Java: port the bad-tag-filter to java
documentation
Java
#10058
opened Aug 16, 2022 by
erik-krogh
Contributor
•
Draft
Java: Improve
ImportStaticTypeMember and ImportStaticOnDemand
documentation
Java
#10497
opened Sep 20, 2022 by
Marcono1234
Contributor
Loading…
Java: Add
getJavadoc predicate for JavadocParent and JavadocElement
documentation
Java
#10499
opened Sep 20, 2022 by
Marcono1234
Contributor
Loading…
Java: Check whether there are internal files in the App that can be read and written by any other App
documentation
Java
#11016
opened Oct 27, 2022 by
kangr0
Loading…
Bump shiro-core from 1.8.0 to 1.10.0 in /java/ql/test/utils/flowtestcasegenerator
dependencies
Pull requests that update a dependency file
Java
#11444
opened Nov 28, 2022 by
dependabot
Bot
Loading…
Bump log4j-core from 2.14.1 to 2.17.1 in /java/ql/test/utils/flowtestcasegenerator
dependencies
Pull requests that update a dependency file
Java
#11445
opened Nov 28, 2022 by
dependabot
Bot
Loading…
Bump spring-web from 5.3.18 to 6.0.0 in /java/ql/test/utils/flowtestcasegenerator
dependencies
Pull requests that update a dependency file
Java
#11646
opened Dec 10, 2022 by
dependabot
Bot
Loading…
Java: exclude parameterless static methods from This PR does not need a change note
DataFlowTargetApi and from ExternalApi
Java
no-change-note-required
[Java] Add Unicode Bypass Validation query, test and help file
documentation
Java
#12995
opened May 2, 2023 by
Sim4n6
Contributor
Loading…
Java: Adapt unsafe deserialization to SnakeYaml 2.0, which is secure by default
documentation
Java
#13347
opened Jun 1, 2023 by
jorgectf
Contributor
Loading…
Java: Improve Partial Path Traversal
Java
#13375
opened Jun 5, 2023 by
JLLeitschuh
Contributor
Loading…
Java: Enable data flow consistency checks.
Java
#13436
opened Jun 12, 2023 by
aschackmull
Contributor
•
Draft
Java: Update Encryption.qll in line with NIST.SP.800-131Ar2
Java
#13830
opened Jul 27, 2023 by
unprovable
Contributor
Loading…
Java: Add new Apache CXF generated models
Java
no-change-note-required
This PR does not need a change note
Bump junit:junit from 4.11 to 4.13.1 in /java/ql/integration-tests/all-platforms/java/buildless-maven
dependencies
Pull requests that update a dependency file
Java
#14287
opened Sep 21, 2023 by
dependabot
Bot
Loading…
ProTip!
Type g p on any issue or pull request to go back to the pull request listing page.