Tony Torralba
|
2cbb7ed296
|
Java: Add XXE sinks for MDHT
|
2023-07-31 11:13:17 +02:00 |
|
github-actions[bot]
|
c936a920b0
|
Release preparation for version 2.14.1
|
2023-07-20 16:32:27 +00:00 |
|
Tony Torralba
|
ce600367df
|
Java: Add support for Kotlin's apply to java/android/unsafe-android-webview-fetch
|
2023-07-10 17:40:16 +02:00 |
|
github-actions[bot]
|
6484ee106e
|
Release preparation for version 2.14.0
|
2023-07-07 08:22:14 +00:00 |
|
Dave Bartolomeo
|
2bb9adfbf1
|
Merge remote-tracking branch 'origin/main' into dbartol/mergeback-3.10
|
2023-07-06 10:00:46 -04:00 |
|
github-actions[bot]
|
9d7987f822
|
Release preparation for version 2.13.5
|
2023-06-29 09:26:18 +00:00 |
|
Tony Torralba
|
3c3b53001f
|
Merge pull request #13550 from jorgectf/jorgectf/lang2-models
Java: Add models for `org.apache.commons.lang`
|
2023-06-27 11:20:59 +02:00 |
|
jorgectf
|
2dc4f23dbb
|
Add models for org.apache.commons.lang
|
2023-06-23 19:34:21 +02:00 |
|
Jorge
|
7d0b880bf7
|
Merge branch 'main' into jorgectf/deserialization-lookahead
|
2023-06-23 18:24:39 +02:00 |
|
jorgectf
|
b6e4ba6f9d
|
Add SerialKiller model
|
2023-06-23 18:19:43 +02:00 |
|
Henry Mercer
|
5afdaf8fe1
|
Merge pull request #13525 from github/rc/3.10
Merge `rc/3.10` back to `main`
|
2023-06-21 17:13:36 +01:00 |
|
Tony Torralba
|
433fc680ec
|
Apply suggestions from code review
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
|
2023-06-19 10:17:40 +02:00 |
|
Tony Torralba
|
c97868f774
|
Add change notes
|
2023-06-16 09:01:02 +02:00 |
|
github-actions[bot]
|
e4be303a23
|
Release preparation for version 2.13.4
|
2023-06-08 19:57:37 +00:00 |
|
Ian Lynagh
|
e49b278d61
|
Java/Kotlin: Add a changenote for the lines-of-code changes.
|
2023-06-05 16:33:12 +01:00 |
|
github-actions[bot]
|
7aa23cf11d
|
Release preparation for version 2.13.3
|
2023-05-22 20:47:00 +00:00 |
|
Tony Torralba
|
b58eb3a92c
|
Java: Add TemplateEngine.createTemplate as a groovy injection sink
|
2023-05-19 17:45:47 +02:00 |
|
Tony Torralba
|
770099f210
|
Merge branch 'main' into atorralba/java/promote-xxe-experimental-sinks
|
2023-05-16 09:49:34 +02:00 |
|
Tony Torralba
|
7d79d87d48
|
Add XPath.evaluate as XXE sink
|
2023-05-15 17:39:35 +02:00 |
|
github-actions[bot]
|
3bd29171fb
|
Release preparation for version 2.13.1
|
2023-04-28 12:14:35 +00:00 |
|
Tony Torralba
|
4606df5cb6
|
Add change note
|
2023-04-26 12:24:43 +02:00 |
|
github-actions[bot]
|
075d063370
|
Release preparation for version 2.13.0
|
2023-04-14 13:31:30 +00:00 |
|
Alex Ford
|
8c46bfd051
|
Merge pull request #12816 from github/rc/3.9
Merge `rc/3.9` into `main`
|
2023-04-13 12:35:41 +01:00 |
|
github-actions[bot]
|
0a3218676c
|
Release preparation for version 2.12.6
|
2023-03-30 19:25:06 +00:00 |
|
Edward Minnix III
|
43d79dc5b8
|
Apply docs review suggestions
Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com>
|
2023-03-27 12:16:44 -04:00 |
|
Ed Minnix
|
0f4709e769
|
Add change note
|
2023-03-27 12:16:44 -04:00 |
|
github-actions[bot]
|
fe4d27e8cc
|
Release preparation for version 2.12.5
|
2023-03-16 12:58:50 +00:00 |
|
Edward Minnix III
|
de1ecf943e
|
Merge pull request #11915 from egregius313/egregius313/arbitrary-apk-installation
Java: Arbitrary APK installation
|
2023-03-14 06:23:51 -04:00 |
|
Edward Minnix III
|
8ec5b5b7fa
|
Apply suggestions from code review
Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>
|
2023-03-08 12:12:10 -05:00 |
|
Ed Minnix
|
cd5a46123e
|
Add a change note
|
2023-03-08 12:12:10 -05:00 |
|
github-actions[bot]
|
462da63970
|
Release preparation for version 2.12.4
|
2023-03-03 14:11:51 +00:00 |
|
github-actions[bot]
|
b0315119c6
|
Release preparation for version 2.12.3
|
2023-02-16 11:49:06 +00:00 |
|
Tony Torralba
|
422eb0d1bb
|
Add change note
|
2023-02-13 09:18:05 +01:00 |
|
Anders Schack-Mulligen
|
3c580896dc
|
Merge pull request #11712 from aschackmull/java/constant-guards
Java: Apply deadcode guard to data flow nodes.
|
2023-02-07 09:14:20 +01:00 |
|
Anders Schack-Mulligen
|
b4607d3fab
|
Java: Add change notes.
|
2023-02-06 13:55:34 +01:00 |
|
github-actions[bot]
|
a4fa984792
|
Release preparation for version 2.12.2
|
2023-02-02 14:34:55 +00:00 |
|
Joe Farebrother
|
97b2e852c9
|
Merge pull request #11713 from joefarebrother/sensitive-result-receiver
Java: Add query for leaking sensitive data through a ResultReceiver
|
2023-02-01 16:34:17 +00:00 |
|
Jeroen Ketema
|
cddaa0c8fa
|
Apply suggestions from code review
|
2023-01-20 14:10:27 +01:00 |
|
github-actions[bot]
|
005b3e4a47
|
Release preparation for version 2.12.1
|
2023-01-20 12:03:19 +00:00 |
|
Edward Minnix III
|
4c018759c8
|
Merge pull request #11283 from egregius313/egregius313/webview-setAllowContentAccess
Java: Android WebView Content Access Query
|
2023-01-17 11:02:47 -05:00 |
|
Joe Farebrother
|
e12febfd96
|
Add change note
|
2023-01-12 11:44:39 +00:00 |
|
Ed Minnix
|
f626d4794a
|
Change wording from "permit" to "allow" in id and name
|
2023-01-09 10:03:12 -05:00 |
|
Chris Smowton
|
efe23c1da7
|
Note that alerts should not be re-raised
|
2023-01-09 10:56:13 +00:00 |
|
Chris Smowton
|
994a46289f
|
Add change note
|
2023-01-09 10:56:13 +00:00 |
|
Nick Rolfe
|
6e07076151
|
tweak wording in 2.12 release notes
|
2023-01-05 16:46:44 +00:00 |
|
github-actions[bot]
|
b6a8193785
|
Release preparation for version 2.12.0
|
2023-01-05 16:32:14 +00:00 |
|
Ed Minnix
|
81df89f93e
|
Use proper @id in changenote
|
2023-01-03 15:19:26 -05:00 |
|
Ed Minnix
|
515fa21aad
|
Change notes
|
2022-12-31 17:18:37 -05:00 |
|
Arthur Baars
|
98c5b81456
|
Merge pull request #11723 from aibaars/alert-suppression
CodeQL alert suppression
|
2022-12-21 10:59:57 +01:00 |
|
Tony Torralba
|
149cae9603
|
Merge pull request #10971 from joefarebrother/android-certificate-pinning
Java: Add Android missing certificate pinning query (CWE-295)
|
2022-12-20 11:03:16 +01:00 |
|