FazBrowse GitHub Viewer
|
Trending
|
URL:
|
Home
Tools:
[Download Repo ZIP]
[Original HTTPS Page]
History for java/ql/src/Security - github/codeql · GitHub
github
codeql
Repository navigation
Code
Issues
1k
(1k)
Pull requests
489
(489)
Discussions
Actions
Projects
Security and quality
Insights
Commits
Breadcrumbs
History for
codeql
java
ql
src
Security
on
main
User selector
Datepicker
Commit history
Commits on Aug 22, 2026
Use HTTPS for Wikimedia query-help links
miachillgood
committed
c8afb1d
View commit details
Copy full SHA for c8afb1d
View code at this point
Browse repository at this point
Commits on May 8, 2026
Note that common standard library types can be vulnerable to gadget-chain attacks
owen-mc
committed
a5ef036
View commit details
Copy full SHA for a5ef036
View code at this point
Browse repository at this point
Commits on May 7, 2026
Do not make such a strong security claim
Show description for f2ea3b9
owen-mc
and
Copilot
authored
f2ea3b9
View commit details
Copy full SHA for f2ea3b9
View code at this point
Browse repository at this point
Clarify that deserialization that follows a schema is safe
owen-mc
committed
427b73e
View commit details
Copy full SHA for 427b73e
View code at this point
Browse repository at this point
Remove double spaces from qhelp
owen-mc
committed
7aa3fd8
View commit details
Copy full SHA for 7aa3fd8
View code at this point
Browse repository at this point
Commits on Mar 13, 2026
Change @security-severity for log injection queries from 7.8 to 6.1
owen-mc
committed
056aa34
View commit details
Copy full SHA for 056aa34
View code at this point
Browse repository at this point
Change @security-severity for XSS queries from 6.1 to 7.8
owen-mc
committed
f58a6e5
View commit details
Copy full SHA for f58a6e5
View code at this point
Browse repository at this point
Commits on Mar 4, 2026
Java: Inline expectation should have space after $
Show description for ef345a3
owen-mc
committed
ef345a3
View commit details
Copy full SHA for ef345a3
View code at this point
Browse repository at this point
Commits on Feb 16, 2026
Fix places which already dealt with both javax and jakarta
owen-mc
committed
3184090
View commit details
Copy full SHA for 3184090
View code at this point
Browse repository at this point
Replace "javax" with `javaxOrJakarta()`
Show description for a5e6f6d
owen-mc
committed
a5e6f6d
View commit details
Copy full SHA for a5e6f6d
View code at this point
Browse repository at this point
Commits on Feb 4, 2026
Java: Rename ReturnStmt.getResult to getExpr.
aschackmull
committed
6f40ac1
View commit details
Copy full SHA for 6f40ac1
View code at this point
Browse repository at this point
Java: Rename UnaryExpr.getExpr to getOperand.
aschackmull
committed
5e6e64b
View commit details
Copy full SHA for 5e6e64b
View code at this point
Browse repository at this point
Commits on Dec 3, 2025
Use flowFrom.
aschackmull
committed
dc6d3fe
View commit details
Copy full SHA for dc6d3fe
View code at this point
Browse repository at this point
Commits on Nov 28, 2025
Improve formatting of tags #2
owen-mc
committed
220fd08
View commit details
Copy full SHA for 220fd08
View code at this point
Browse repository at this point
Commits on Oct 22, 2025
Java: Lower security-severity for Insecure Cookie query to 4.0
Napalys
committed
91b0aaa
View commit details
Copy full SHA for 91b0aaa
View code at this point
Browse repository at this point
CWE-020: Lower security-severity for OverlyLargeRange queries to 4.0
Napalys
committed
fa47174
View commit details
Copy full SHA for fa47174
View code at this point
Browse repository at this point
Commits on Oct 17, 2025
Merge pull request #20603 from owen-mc/update-broken-algo-qhelp
Show description for 66f95bc
owen-mc
authored
66f95bc
View commit details
Copy full SHA for 66f95bc
View code at this point
Browse repository at this point
Commits on Oct 14, 2025
Review suggestions - update comments and description
joefarebrother
committed
d8b37d0
View commit details
Copy full SHA for d8b37d0
View code at this point
Browse repository at this point
Commits on Oct 13, 2025
Update comments
joefarebrother
committed
093b04f
View commit details
Copy full SHA for 093b04f
View code at this point
Browse repository at this point
Update tests and add inline expectations
joefarebrother
committed
c799f93
View commit details
Copy full SHA for c799f93
View code at this point
Browse repository at this point
Update documentation, rename things and add more comments to explain how the implementation works, remove filter for test code (prefer to filter in code scanning ui than in query logic)
joefarebrother
committed
e1cf3d3
View commit details
Copy full SHA for e1cf3d3
View code at this point
Browse repository at this point
Copy experimental query to main
joefarebrother
committed
54aefe0
View commit details
Copy full SHA for 54aefe0
View code at this point
Browse repository at this point
Commits on Oct 8, 2025
Improve qhelp for broken crypto algo queries
Show description for 0bcdb91
owen-mc
committed
0bcdb91
View commit details
Copy full SHA for 0bcdb91
View code at this point
Browse repository at this point
Commits on Aug 26, 2025
Merge branch 'main' into jcogs33/java/insecure-spring-actuator-config-promotion
jcogs33
authored
3675e4b
View commit details
Copy full SHA for 3675e4b
View code at this point
Browse repository at this point
Commits on Jul 21, 2025
Merge pull request #20018 from owen-mc/java/snakeyaml-safe-unsafe-deserialization
Show description for 472a6b5
owen-mc
authored
472a6b5
View commit details
Copy full SHA for 472a6b5
View code at this point
Browse repository at this point
Merge pull request #20077 from d10c/d10c/diff-informed-phase-3-java
Show description for fbee6bb
d10c
authored
fbee6bb
View commit details
Copy full SHA for fbee6bb
View code at this point
Browse repository at this point
Commits on Jul 19, 2025
Java: remove version debugging from alert message
Jami Cogswell
authored and
Jami Cogswell
committed
0dd33b2
View commit details
Copy full SHA for 0dd33b2
View code at this point
Browse repository at this point
Commits on Jul 18, 2025
Java: rename to align with 'java/spring-boot-exposed-actuators' query
Jami Cogswell
authored and
Jami Cogswell
committed
70d5150
View commit details
Copy full SHA for 70d5150
View code at this point
Browse repository at this point
Java: adjust metadata and alert msg
Jami Cogswell
authored and
Jami Cogswell
committed
ea529b0
View commit details
Copy full SHA for ea529b0
View code at this point
Browse repository at this point
Java: minor refactoring
Jami Cogswell
authored and
Jami Cogswell
committed
7d5e939
View commit details
Copy full SHA for 7d5e939
View code at this point
Browse repository at this point
Java: update qhelp
Jami Cogswell
authored and
Jami Cogswell
committed
afa6610
View commit details
Copy full SHA for afa6610
View code at this point
Browse repository at this point
Commits on Jul 17, 2025
Java: add related location to alert message
Jami Cogswell
authored and
Jami Cogswell
committed
0d2a422
View commit details
Copy full SHA for 0d2a422
View code at this point
Browse repository at this point
Java: fix test case for version 1.4
Show description for 2bfc4b4
Jami Cogswell
authored and
Jami Cogswell
committed
2bfc4b4
View commit details
Copy full SHA for 2bfc4b4
View code at this point
Browse repository at this point
Java: move code to .qll file
Jami Cogswell
authored and
Jami Cogswell
committed
1b90a30
View commit details
Copy full SHA for 1b90a30
View code at this point
Browse repository at this point
Java: remove deprecation
Jami Cogswell
authored and
Jami Cogswell
committed
38260e7
View commit details
Copy full SHA for 38260e7
View code at this point
Browse repository at this point
Previous
Next
Back
|
FazBrowse Home
|
New Git URL