Commits

Breadcrumbs

History for

onmain

User selector

All users

All time

Commit History

Commits on May 1, 2026

• Merge branch 'main' into fix/path-injection-read-subkind

  MarkLee131

  authored
  bafa892

  Copy full SHA for bafa892

• Java: move File inspection methods to path-injection[read]

  Show description for 119994b
  MarkLee131

  committed
  119994b

  Copy full SHA for 119994b

Commits on Apr 30, 2026

• Merge pull request #21654 from MarkLee131/fix/sensitive-log-hash-sanitizer

  Show description for 87c35e6
  owen-mc

  authored
  87c35e6

  Copy full SHA for 87c35e6

• Merge branch 'main' into fix/path-injection-read-subkind

  MarkLee131

  authored
  90741b1

  Copy full SHA for 90741b1

Commits on Apr 29, 2026

• Merge remote-tracking branch 'origin/main' into fix/sensitive-log-hash-sanitizer

  Show description for 28a6ff2
  MarkLee131

  committed
  28a6ff2

  Copy full SHA for 28a6ff2

• Update java/ql/test/query-tests/security/CWE-532/Test.java

  Show description for 75162bb
  

  MarkLee131

  and

  owen-mc

  authored
  75162bb

  Copy full SHA for 75162bb

• Merge branch 'main' into fix/trust-boundary-regexp-barrier

  MarkLee131

  authored
  49d014c

  Copy full SHA for 49d014c

Commits on Apr 24, 2026

• Merge pull request #21749 from github/copilot/add-hibernate-sql-injection-tests

  Show description for 9fbe447
  owen-mc

  authored
  9fbe447

  Copy full SHA for 9fbe447

Commits on Apr 23, 2026

• Model additional Hibernate query sinks

  Show description for 25d232b
  

  Copilot

  and

  owen-mc

  authored
  25d232b

  Copy full SHA for 25d232b

• Add Hibernate SQL injection sink tests

  Show description for 081ad03
  

  Copilot

  and

  owen-mc

  authored
  081ad03

  Copy full SHA for 081ad03

• Merge branch 'main' into fix/path-injection-torealpath

  owen-mc

  authored
  9f19791

  Copy full SHA for 9f19791

Commits on Apr 21, 2026

• Merge branch 'main' into fix/trust-boundary-regexp-barrier

  MarkLee131

  authored
  af794ed

  Copy full SHA for af794ed

• Merge branch 'github:main' into fix/path-injection-read-subkind

  MarkLee131

  authored
  07e97e2

  Copy full SHA for 07e97e2

• Merge pull request #21650 from MarkLee131/fix/sensitive-log-fp-regex

  Show description for c91b5b3
  owen-mc

  authored
  c91b5b3

  Copy full SHA for c91b5b3

Commits on Apr 20, 2026

• Java: split read-only path sinks into path-injection[read]

  Show description for c336a15
  MarkLee131

  committed
  c336a15

  Copy full SHA for c336a15

• Merge pull request #21734 from owen-mc/java/fix-partial-path-traversal

  Show description for 9f310c2
  owen-mc

  authored
  9f310c2

  Copy full SHA for 9f310c2

Commits on Apr 19, 2026

• Fix bug so `+= File.separator` is recognized

  owen-mc

  committed
  6d4a397

  Copy full SHA for 6d4a397

• Add SPURIOUS test for `+= File.separator`

  owen-mc

  committed
  6099c5d

  Copy full SHA for 6099c5d

• Use inline expectations with second test

  Show description for 63d20a5
  

  owen-mc

  and

  Copilot

  committed
  63d20a5

  Copy full SHA for 63d20a5

Commits on Apr 18, 2026

• Make inline expectation comments specify query

  owen-mc

  committed
  dca7046

  Copy full SHA for dca7046

Commits on Apr 17, 2026

• Java: Add XXE sink model for Woodstox WstxInputFactory

  Show description for f5131f9
  

  Salah Baddou

  authored and

  chmodxxx

  committed
  f5131f9

  Copy full SHA for f5131f9

Commits on Apr 7, 2026

• Java: Pin CWE-676 test to --release 25

  Show description for 5a6eb79
  IdrissRio

  committed
  5a6eb79

  Copy full SHA for 5a6eb79

Commits on Apr 4, 2026

• Add @Pattern annotation test case and javax-validation-constraints stub

  Show description for b49c6dc
  MarkLee131

  committed
  b49c6dc

  Copy full SHA for b49c6dc

• Update java/ql/test/query-tests/security/CWE-501/TrustBoundaryViolations.java

  Show description for 258a53e
  

  MarkLee131

  and

  Copilot

  authored
  258a53e

  Copy full SHA for 258a53e

• Remove secretQuestion from FP exclusion list

  Show description for 46ef020
  MarkLee131

  committed
  46ef020

  Copy full SHA for 46ef020

• Java: add RegexpCheckBarrier to trust-boundary-violation sanitizers

  Show description for 345b842
  MarkLee131

  committed
  345b842

  Copy full SHA for 345b842

• Java: treat hash/encrypt/digest methods as sensitive-log sanitizers

  Show description for f338ded
  MarkLee131

  committed
  f338ded

  Copy full SHA for f338ded

• Java: reduce false positives in sensitive-log by expanding FP exclusion regex

  Show description for 20cfe29
  MarkLee131

  committed
  20cfe29

  Copy full SHA for 20cfe29

• Java: recognize Path.toRealPath() as path normalization sanitizer

  Show description for 9ff4ed2
  MarkLee131

  committed
  9ff4ed2

  Copy full SHA for 9ff4ed2

Commits on Mar 29, 2026

• Address review: update QLDoc comment and fix expected test output

  Show description for e6adfbc
  MarkLee131

  committed
  e6adfbc

  Copy full SHA for e6adfbc

• Merge branch 'main' into fix/tainted-arithmetic-bounds-check-barrier

  MarkLee131

  authored
  938039d

  Copy full SHA for 938039d

• Update java/ql/test/query-tests/security/CWE-190/semmle/tests/ArithmeticTainted.java

  Show description for f5cfc5e
  

  MarkLee131

  and

  owen-mc

  authored
  f5cfc5e

  Copy full SHA for f5cfc5e

Commits on Mar 28, 2026

• Exclude bounds-check arithmetic from tainted-arithmetic sinks

  Show description for 0c5e89a
  MarkLee131

  committed
  0c5e89a

  Copy full SHA for 0c5e89a

• Address PR review: add Signature.getInstance sink, HMAC/PBKDF2 whitelist, fix test APIs

  Show description for da4a223
  MarkLee131

  committed
  da4a223

  Copy full SHA for da4a223

• Add EC to secure algorithm whitelist for Java CWE-327 query

  MarkLee131

  committed
  a9449cc

  Copy full SHA for a9449cc