Anders Schack-Mulligen 6eafa9d396 Merge pull request #5133 from pwntester/fix_SnakeYaml ...

Remove sanitizing condition which does not prevent vulnerability.

2021-02-16 12:58:47 +01:00

..

2020-05-21-mongodb-sql-injection-sinks.md

Java: Add change note for https://github.com/github/codeql/pull/3542

2020-10-29 16:27:51 +01:00

2020-05-21-websocket-taintsource.md

Java: Add change note for https://github.com/github/codeql/pull/3543

2020-10-29 16:14:56 +01:00

2020-06-30-jooq-sql-injection-sinks.md

Java: Add change note for https://github.com/github/codeql/pull/3855

2020-10-29 16:09:01 +01:00

2020-07-03-more-pathcreations.md

Java: Add change note for https://github.com/github/codeql/pull/3881

2020-10-29 15:54:25 +01:00

2020-07-09-untrusted-data-to-external-api.md

Java: Add change note for https://github.com/github/codeql/pull/3938

2020-10-29 16:02:34 +01:00

2020-07-13-stacktraceexposure-fp-fix.md

Java: Add change note for https://github.com/github/codeql/pull/3948

2020-10-29 15:30:09 +01:00

2020-08-11-printwriter-format-xss-sink.md

Java: Add change note for https://github.com/github/codeql/pull/4044

2020-10-29 16:05:43 +01:00

2020-08-14-dataflow-dispatch-instance-arg-ctx.md

Java: Add change note for https://github.com/github/codeql/pull/4081

2020-10-29 16:25:11 +01:00

2020-08-17-string-formatted.md

Java: Add change note for https://github.com/github/codeql/pull/4088

2020-10-29 16:11:26 +01:00

2020-08-24-records-flow.md

Java: Add change note for https://github.com/github/codeql/pull/4123

2020-10-29 16:20:35 +01:00

2020-08-31-extensible-security-queries.md

Java: Add change note for extensible security queries.

2020-10-29 15:37:35 +01:00

2020-09-08-blockstmt.md

Java: Move existing change note to new format.

2020-10-29 16:35:27 +01:00

2020-09-17-exectainted-array.md

Java: Add change note for https://github.com/github/codeql/pull/4287

2020-10-29 16:33:09 +01:00

2020-09-21-jhipster-gen-prng-query.md

Java: Add change note for https://github.com/github/codeql/pull/4312.

2020-10-29 15:24:28 +01:00

2020-09-22-hibernate-sql-sinks.md

Java: improve change note

2020-09-23 15:37:55 +02:00

2020-09-23-spring-multipart-request-sources.md

Java: add Spring::MultipartRequest as taint source

2020-09-22 19:01:10 +02:00

2020-10-03-android-intent-taintsource.md

Java: Add change note for #3812.

2020-11-04 10:15:08 +01:00

2020-10-07-fastjson-deserialization-sink.md

Java: Add support for FastJson in unsafe deserialization.

2020-11-16 11:47:58 +01:00

2020-10-16-guava-flow-steps.md

Java: Update Guava version in test stubs and change note

2020-10-19 11:56:28 +01:00

2020-10-27-insecure-bean-validation.md

Update java/change-notes/2020-10-27-insecure-bean-validation.md

2020-10-27 21:10:46 +01:00

2020-11-04-commonslang-unsafe-deserialization-sinks.md

Update java/change-notes/2020-11-04-commonslang-unsafe-deserialization-sinks.md

2020-11-04 10:58:27 +01:00

2020-12-09-xxe-fp-fix.md

Add change note

2020-12-09 16:41:31 +00:00

2021-01-12-unsafe-hostname-verification.md

Java: Add change note for #4771

2021-01-12 15:37:45 +01:00

2021-01-14-java-15-support.md

Java: update documentation on supported language versions

2021-01-14 20:29:16 -05:00

2021-01-19-struts-xml-extraction.md

Java: add change note for struts.xml extraction

2021-01-19 10:19:18 -05:00

2021-02-15-commons-array-utils.md

add change note for new ArrayUtils support

2021-02-15 14:41:18 +01:00

2021-02-15-snakeyaml-fn-fix.md

add change note

2021-02-15 14:53:16 +01:00