Tony Torralba
|
b58eb3a92c
|
Java: Add TemplateEngine.createTemplate as a groovy injection sink
|
2023-05-19 17:45:47 +02:00 |
|
Tony Torralba
|
770099f210
|
Merge branch 'main' into atorralba/java/promote-xxe-experimental-sinks
|
2023-05-16 09:49:34 +02:00 |
|
Tony Torralba
|
7d79d87d48
|
Add XPath.evaluate as XXE sink
|
2023-05-15 17:39:35 +02:00 |
|
github-actions[bot]
|
3bd29171fb
|
Release preparation for version 2.13.1
|
2023-04-28 12:14:35 +00:00 |
|
Tony Torralba
|
4606df5cb6
|
Add change note
|
2023-04-26 12:24:43 +02:00 |
|
github-actions[bot]
|
075d063370
|
Release preparation for version 2.13.0
|
2023-04-14 13:31:30 +00:00 |
|
Alex Ford
|
8c46bfd051
|
Merge pull request #12816 from github/rc/3.9
Merge `rc/3.9` into `main`
|
2023-04-13 12:35:41 +01:00 |
|
github-actions[bot]
|
0a3218676c
|
Release preparation for version 2.12.6
|
2023-03-30 19:25:06 +00:00 |
|
Edward Minnix III
|
43d79dc5b8
|
Apply docs review suggestions
Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com>
|
2023-03-27 12:16:44 -04:00 |
|
Ed Minnix
|
0f4709e769
|
Add change note
|
2023-03-27 12:16:44 -04:00 |
|
github-actions[bot]
|
fe4d27e8cc
|
Release preparation for version 2.12.5
|
2023-03-16 12:58:50 +00:00 |
|
Edward Minnix III
|
de1ecf943e
|
Merge pull request #11915 from egregius313/egregius313/arbitrary-apk-installation
Java: Arbitrary APK installation
|
2023-03-14 06:23:51 -04:00 |
|
Edward Minnix III
|
8ec5b5b7fa
|
Apply suggestions from code review
Co-authored-by: Jami <57204504+jcogs33@users.noreply.github.com>
|
2023-03-08 12:12:10 -05:00 |
|
Ed Minnix
|
cd5a46123e
|
Add a change note
|
2023-03-08 12:12:10 -05:00 |
|
github-actions[bot]
|
462da63970
|
Release preparation for version 2.12.4
|
2023-03-03 14:11:51 +00:00 |
|
github-actions[bot]
|
b0315119c6
|
Release preparation for version 2.12.3
|
2023-02-16 11:49:06 +00:00 |
|
Tony Torralba
|
422eb0d1bb
|
Add change note
|
2023-02-13 09:18:05 +01:00 |
|
Anders Schack-Mulligen
|
3c580896dc
|
Merge pull request #11712 from aschackmull/java/constant-guards
Java: Apply deadcode guard to data flow nodes.
|
2023-02-07 09:14:20 +01:00 |
|
Anders Schack-Mulligen
|
b4607d3fab
|
Java: Add change notes.
|
2023-02-06 13:55:34 +01:00 |
|
github-actions[bot]
|
a4fa984792
|
Release preparation for version 2.12.2
|
2023-02-02 14:34:55 +00:00 |
|
Joe Farebrother
|
97b2e852c9
|
Merge pull request #11713 from joefarebrother/sensitive-result-receiver
Java: Add query for leaking sensitive data through a ResultReceiver
|
2023-02-01 16:34:17 +00:00 |
|
Jeroen Ketema
|
cddaa0c8fa
|
Apply suggestions from code review
|
2023-01-20 14:10:27 +01:00 |
|
github-actions[bot]
|
005b3e4a47
|
Release preparation for version 2.12.1
|
2023-01-20 12:03:19 +00:00 |
|
Edward Minnix III
|
4c018759c8
|
Merge pull request #11283 from egregius313/egregius313/webview-setAllowContentAccess
Java: Android WebView Content Access Query
|
2023-01-17 11:02:47 -05:00 |
|
Joe Farebrother
|
e12febfd96
|
Add change note
|
2023-01-12 11:44:39 +00:00 |
|
Ed Minnix
|
f626d4794a
|
Change wording from "permit" to "allow" in id and name
|
2023-01-09 10:03:12 -05:00 |
|
Chris Smowton
|
efe23c1da7
|
Note that alerts should not be re-raised
|
2023-01-09 10:56:13 +00:00 |
|
Chris Smowton
|
994a46289f
|
Add change note
|
2023-01-09 10:56:13 +00:00 |
|
Nick Rolfe
|
6e07076151
|
tweak wording in 2.12 release notes
|
2023-01-05 16:46:44 +00:00 |
|
github-actions[bot]
|
b6a8193785
|
Release preparation for version 2.12.0
|
2023-01-05 16:32:14 +00:00 |
|
Ed Minnix
|
81df89f93e
|
Use proper @id in changenote
|
2023-01-03 15:19:26 -05:00 |
|
Ed Minnix
|
515fa21aad
|
Change notes
|
2022-12-31 17:18:37 -05:00 |
|
Arthur Baars
|
98c5b81456
|
Merge pull request #11723 from aibaars/alert-suppression
CodeQL alert suppression
|
2022-12-21 10:59:57 +01:00 |
|
Tony Torralba
|
149cae9603
|
Merge pull request #10971 from joefarebrother/android-certificate-pinning
Java: Add Android missing certificate pinning query (CWE-295)
|
2022-12-20 11:03:16 +01:00 |
|
Edward Minnix III
|
39a7c7bb12
|
Merge pull request #11282 from egregius313/egregiu313/webview-addjavascriptinterface
Java: Query for detecting addJavascriptInterface method calls
|
2022-12-19 11:28:45 -05:00 |
|
Arthur Baars
|
a8be5d7274
|
AlertSuppression: add change notes
|
2022-12-19 17:02:52 +01:00 |
|
Henry Mercer
|
30451ee950
|
Merge pull request #11681 from github/henrymercer/mergeback-3.8
Merge `rc/3.8` back to `main`
|
2022-12-16 17:43:12 +00:00 |
|
Jami
|
fd63348549
|
Merge pull request #11585 from jcogs33/jcogs33/mad-metrics-query
Java: add MaD metrics query
|
2022-12-15 19:26:51 -05:00 |
|
Michael Nebel
|
12c1ebd81c
|
C#/Java: Add change note.
|
2022-12-15 09:41:14 +01:00 |
|
Henry Mercer
|
7167f078be
|
Merge branch 'main' into henrymercer/mergeback-3.8
|
2022-12-13 18:40:53 +00:00 |
|
Jami
|
93d8a03e73
|
Merge branch 'main' into jcogs33/mad-metrics-query
|
2022-12-12 20:31:53 -05:00 |
|
Jami Cogswell
|
a77acd6745
|
Java: add change note
|
2022-12-12 17:28:12 -05:00 |
|
Edward Minnix III
|
0ebfee8b11
|
Merge pull request #11241 from egregius313/egregius313/webview-file-access
Java: Query to detect Android Webview file access
|
2022-12-12 11:12:26 -05:00 |
|
github-actions[bot]
|
0b2fb4f70a
|
Release preparation for version 2.11.6
|
2022-12-10 15:49:35 +00:00 |
|
Chris Smowton
|
af08fe8659
|
Add change note re: Kotlin version limit
|
2022-12-10 15:32:22 +00:00 |
|
Joe Farebrother
|
a14ebb7c03
|
Fixes
|
2022-12-09 13:41:18 +00:00 |
|
Joe Farebrother
|
fae4043008
|
Add change note
|
2022-12-09 13:41:18 +00:00 |
|
Chris Smowton
|
49bc524fd0
|
Merge remote-tracking branch 'origin/rc/3.8' into smowton/admin/merge-rc38-into-main
|
2022-12-08 11:12:30 +00:00 |
|
Edward Minnix III
|
170c9af9e8
|
Merge pull request #11238 from egregius313/egregius313/webview-setjavascriptenabled
Java: Query for detecting enabling Javascript in Android WebSettings
|
2022-12-07 09:31:58 -05:00 |
|
Jami
|
edfcc0cd6d
|
Merge pull request #11487 from jcogs33/jcogs33/supportedexternalapis-telemetry-query
Java/C#: add SupportedExternalApis telemetry query
|
2022-12-02 13:27:51 -05:00 |
|