Anders Schack-Mulligen 9b0e3b1950 Merge pull request #5814 from JLLeitschuh/feat/JLL/jackson_as_taint_step ...

[Java] Add taint tracking through Jackson deserialization

2021-05-18 09:31:16 +02:00

..

2020-05-21-mongodb-sql-injection-sinks.md

Java: Add change note for https://github.com/github/codeql/pull/3542

2020-10-29 16:27:51 +01:00

2020-05-21-websocket-taintsource.md

Java: Add change note for https://github.com/github/codeql/pull/3543

2020-10-29 16:14:56 +01:00

2020-06-30-jooq-sql-injection-sinks.md

Java: Add change note for https://github.com/github/codeql/pull/3855

2020-10-29 16:09:01 +01:00

2020-07-03-more-pathcreations.md

Java: Add change note for https://github.com/github/codeql/pull/3881

2020-10-29 15:54:25 +01:00

2020-07-09-untrusted-data-to-external-api.md

Java: Add change note for https://github.com/github/codeql/pull/3938

2020-10-29 16:02:34 +01:00

2020-07-13-stacktraceexposure-fp-fix.md

Java: Add change note for https://github.com/github/codeql/pull/3948

2020-10-29 15:30:09 +01:00

2020-08-11-printwriter-format-xss-sink.md

Java: Add change note for https://github.com/github/codeql/pull/4044

2020-10-29 16:05:43 +01:00

2020-08-14-dataflow-dispatch-instance-arg-ctx.md

Java: Add change note for https://github.com/github/codeql/pull/4081

2020-10-29 16:25:11 +01:00

2020-08-17-string-formatted.md

Java: Add change note for https://github.com/github/codeql/pull/4088

2020-10-29 16:11:26 +01:00

2020-08-24-records-flow.md

Java: Add change note for https://github.com/github/codeql/pull/4123

2020-10-29 16:20:35 +01:00

2020-08-31-extensible-security-queries.md

Java: Add change note for extensible security queries.

2020-10-29 15:37:35 +01:00

2020-09-08-blockstmt.md

Java: Move existing change note to new format.

2020-10-29 16:35:27 +01:00

2020-09-17-exectainted-array.md

Java: Add change note for https://github.com/github/codeql/pull/4287

2020-10-29 16:33:09 +01:00

2020-09-21-jhipster-gen-prng-query.md

Java: Add change note for https://github.com/github/codeql/pull/4312.

2020-10-29 15:24:28 +01:00

2020-09-22-hibernate-sql-sinks.md

Java: improve change note

2020-09-23 15:37:55 +02:00

2020-09-23-spring-multipart-request-sources.md

Java: add Spring::MultipartRequest as taint source

2020-09-22 19:01:10 +02:00

2020-10-03-android-intent-taintsource.md

Java: Add change note for #3812.

2020-11-04 10:15:08 +01:00

2020-10-07-fastjson-deserialization-sink.md

Java: Add support for FastJson in unsafe deserialization.

2020-11-16 11:47:58 +01:00

2020-10-16-guava-flow-steps.md

Java: Update Guava version in test stubs and change note

2020-10-19 11:56:28 +01:00

2020-10-27-insecure-bean-validation.md

Update java/change-notes/2020-10-27-insecure-bean-validation.md

2020-10-27 21:10:46 +01:00

2020-11-04-commonslang-unsafe-deserialization-sinks.md

Update java/change-notes/2020-11-04-commonslang-unsafe-deserialization-sinks.md

2020-11-04 10:58:27 +01:00

2020-12-09-xxe-fp-fix.md

Add change note

2020-12-09 16:41:31 +00:00

2021-01-12-unsafe-hostname-verification.md

Java: Add change note for #4771

2021-01-12 15:37:45 +01:00

2021-01-14-java-15-support.md

Java: update documentation on supported language versions

2021-01-14 20:29:16 -05:00

2021-01-19-struts-xml-extraction.md

Java: add change note for struts.xml extraction

2021-01-19 10:19:18 -05:00

2021-02-09-commons-string-utils.md

Add support for Apache Commons Lang StringUtils

2021-02-16 14:48:39 +00:00

2021-02-15-commons-array-utils.md

add change note for new ArrayUtils support

2021-02-15 14:41:18 +01:00

2021-02-15-snakeyaml-fn-fix.md

add change note

2021-02-15 14:53:16 +01:00

2021-02-17-apache-http.md

Add change note

2021-02-23 14:26:12 +00:00

2021-02-23-deprecated-jcenter-bintray.md

Add release notes

2021-02-24 11:19:20 -05:00

2021-03-01-fluent-interface-data-flow.md

Add change notes

2021-03-01 16:59:20 +00:00

2021-03-02-apache-text-misc.md

Add change note

2021-03-04 11:11:56 +00:00

2021-03-02-guava-io.md

Apply suggestions from code review

2021-03-05 11:19:55 +00:00

2021-03-05-commons-lang-randomutils.md

Improve comment and change-note accuracy

2021-03-08 11:00:05 +00:00

2021-03-05-commons-object-utils.md

Improve change note

2021-03-11 16:22:56 +00:00

2021-03-05-play-framework.md

Test fixes and change notes

2021-03-05 06:50:57 +05:30

2021-03-05-regex-utils.md

Improve change note

2021-03-09 15:11:13 +00:00

2021-03-23-guava-collections-and-preconditions.md

Update java/change-notes/2021-03-23-guava-collections-and-preconditions.md

2021-03-03 12:53:16 +01:00

2021-03-25-remove-legacy-code-duplication-library.md

Java: Add change note for code duplication library removal.

2021-03-25 10:12:58 +01:00

2021-03-25-remove-legacy-filter-queries.md

Java: Add change note for filter query removal.

2021-03-25 10:11:30 +01:00

2021-04-14-membertype.md

Add change note

2021-04-14 08:25:12 +01:00

2021-04-26-xpath-injection-query.md

Fix imports and stubs so that tests pass

2021-05-06 09:18:48 +02:00

2021-05-03-guava-first-non-null.md

[Java] Add support for com.google.common.base.MoreObjects#firstNonNull

2021-05-03 12:58:00 -04:00

2021-05-03-jackson-dataflow-deserialization.md

[Java] Add release note to Jackson change

2021-05-11 10:36:47 -04:00

2021-05-05-kryo-improvements.md

Update java/change-notes/2021-05-05-kryo-improvements.md

2021-05-11 08:29:50 -04:00

2021-05-12-xxe-fp-fix.md

Add change notes.

2021-05-12 16:58:24 +07:00