Skip to content
Navigation Menu
Sign in
Products
Platform
GitHub
Repository hosting, code review, and collaboration
Copilot
AI coding agent for tasks, projects and automated work
Build & Ship
Actions
CI/CD and automation
Code Quality
Quality analysis, fixes, and enforcement
Codespaces
Cloud development environments
Secure
Code Security
Vulnerability detection and remediation
Secret Protection
Secret scanning and leak prevention
All Features
Developers
Learn
Documentation
Training
Certifications
Build
Build with Copilot
Customize Copilot
Integrations
Explore
Trending repos
GitHub Sponsors
Events
Changelog
Changelog
Your source for the latest features, improvements, and fixes across GitHub products, all in one place.
Businesses
By Stage
Enterprises
Team
Startups
Nonprofits
By Industry
Healthcare
Financial services
Manufacturing
Government
See all industries
Evaluate GitHub
Why GitHub
Customer Stories
Business insights
Trust Center
Add-ons
GitHub Advanced Security
Enterprise-grade code security
Copilot for business
Enterprise-grade AI features
Premium Support
Enterprise-grade 24/7 support
Resources
Learn & Connect
Documentation
Resource center
Blog
Events & webinars
Community Forum
Customer Stories
Integrations
Support
Customer support
Training
GitHub Status
Company
About
Partners
Changelog
GitHub Universe
GitHub Universe
The event for developers, by developers — talks, workshops, and what’s next for GitHub.
Pricing
Search
/
Sign in
Sign up
Appearance settings
You signed in with another tab or window.
Reload
to refresh your session.
You signed out in another tab or window.
Reload
to refresh your session.
You switched accounts on another tab or window.
Reload
to refresh your session.
Dismiss alert
{{ message }}
github
codeql
Repository navigation
Code
Issues
1k
(1k)
Pull requests
502
(502)
Discussions
Actions
Projects
Security and quality
Insights
More
items
Commits
Breadcrumbs
History for
codeql
java
ql
lib
ext
on
codeql-cli-2.17.4
User selector
All users
Datepicker
All time
Commit history
Commits on May 22, 2024
Java: Change most java.time.* df-generated taint models to neutrals.
aschackmull
committed
ba97c36
View commit details
Copy full SHA for ba97c36
View code at this point
Browse repository at this point
Java: Add a neutral model.
aschackmull
committed
54f2316
View commit details
Copy full SHA for 54f2316
View code at this point
Browse repository at this point
Commits on May 2, 2024
Fix grammar in comment
owen-mc
committed
83249cd
View commit details
Copy full SHA for 83249cd
View code at this point
Browse repository at this point
Commits on May 1, 2024
Standardise comment explaining why extensible predicates must be defined
owen-mc
committed
16dcc09
View commit details
Copy full SHA for 16dcc09
View code at this point
Browse repository at this point
Name files with empty definitions of MaD extensible predicates to erowdmpty.model.yml
owen-mc
committed
09e59cc
View commit details
Copy full SHA for 09e59cc
View code at this point
Browse repository at this point
Commits on Apr 9, 2024
Delete models for JDK internal packages
owen-mc
committed
ae8240a
View commit details
Copy full SHA for ae8240a
View code at this point
Browse repository at this point
Commits on Apr 4, 2024
Merge pull request #14919 from github/java/jdk-model-autogeneration
Show description for e10333b
owen-mc
authored
e10333b
View commit details
Copy full SHA for e10333b
View code at this point
Browse repository at this point
Commits on Apr 1, 2024
Remove df-gen models we have deliberately modeled
Show description for 919436e
owen-mc
committed
919436e
View commit details
Copy full SHA for 919436e
View code at this point
Browse repository at this point
Commits on Mar 29, 2024
Merge pull request #14854 from jcogs33/jcogs33/unsafe-url-forward-promotion
Show description for d889e3c
jcogs33
authored
d889e3c
View commit details
Copy full SHA for d889e3c
View code at this point
Browse repository at this point
Commits on Mar 27, 2024
Remove df-gen models for incidentally modelled APIs
Show description for 311512c
owen-mc
committed
311512c
View commit details
Copy full SHA for 311512c
View code at this point
Browse repository at this point
Run generation script
Show description for f03a56f
owen-mc
committed
f03a56f
View commit details
Copy full SHA for f03a56f
View code at this point
Browse repository at this point
Update java/ql/lib/ext/java.net.model.yml
Show description for 7a04467
atorralba
and
owen-mc
authored
7a04467
View commit details
Copy full SHA for 7a04467
View code at this point
Browse repository at this point
Commits on Mar 26, 2024
Java: Add more neutrals
Show description for d786ea9
atorralba
committed
d786ea9
View commit details
Copy full SHA for d786ea9
View code at this point
Browse repository at this point
Commits on Mar 19, 2024
Merge pull request #15946 from owen-mc/java/more-manual-models
Show description for b8608a1
owen-mc
authored
b8608a1
View commit details
Copy full SHA for b8608a1
View code at this point
Browse repository at this point
Provenance should be "df-manual"
owen-mc
committed
7371f5e
View commit details
Copy full SHA for 7371f5e
View code at this point
Browse repository at this point
Commits on Mar 18, 2024
Fix model for `java.util.Scanner#findall(String)`
Show description for 764e99b
owen-mc
and
aschackmull
authored
764e99b
View commit details
Copy full SHA for 764e99b
View code at this point
Browse repository at this point
Fix duplicate "df-" in "df-df-manual"
owen-mc
committed
7fb05f4
View commit details
Copy full SHA for 7fb05f4
View code at this point
Browse repository at this point
Java: remove experimental files
Jami Cogswell
authored and
Jami Cogswell
committed
658fffe
View commit details
Copy full SHA for 658fffe
View code at this point
Browse repository at this point
Commits on Mar 17, 2024
Fix model provenance to df-manual
owen-mc
committed
754d4cd
View commit details
Copy full SHA for 754d4cd
View code at this point
Browse repository at this point
Add df-manual models related to existing df-manual models
owen-mc
committed
23a58a0
View commit details
Copy full SHA for 23a58a0
View code at this point
Browse repository at this point
Fix df-manual model with wrong parameter type
owen-mc
committed
fc36704
View commit details
Copy full SHA for fc36704
View code at this point
Browse repository at this point
Commits on Mar 15, 2024
Add df-manual models in manually modeled classes
owen-mc
committed
8e52483
View commit details
Copy full SHA for 8e52483
View code at this point
Browse repository at this point
Commits on Mar 14, 2024
Add manual neutral models for java.lang.ClassLoader
owen-mc
committed
2bd0883
View commit details
Copy full SHA for 2bd0883
View code at this point
Browse repository at this point
Add manual neutral models for java.util.Locale and its subclasses
owen-mc
committed
5b734c7
View commit details
Copy full SHA for 5b734c7
View code at this point
Browse repository at this point
Recognize the model generator involvement in the models' provenances
atorralba
committed
eecab91
View commit details
Copy full SHA for eecab91
View code at this point
Browse repository at this point
A few more neutrals
atorralba
committed
5b88b8a
View commit details
Copy full SHA for 5b88b8a
View code at this point
Browse repository at this point
Model more EnumSet methods as neutrals
atorralba
committed
36f6a6f
View commit details
Copy full SHA for 36f6a6f
View code at this point
Browse repository at this point
Commits on Mar 13, 2024
Java: remove todo comments from ext files
Jami Cogswell
authored and
Jami Cogswell
committed
f573032
View commit details
Copy full SHA for f573032
View code at this point
Browse repository at this point
Java: convert SpringModelAndViewSink to MaD
Jami Cogswell
authored and
Jami Cogswell
committed
1da1e89
View commit details
Copy full SHA for 1da1e89
View code at this point
Browse repository at this point
Java: switch StaplerResponse.forward from request-forgery sink to url-forward sink
Jami Cogswell
authored and
Jami Cogswell
committed
8d66097
View commit details
Copy full SHA for 8d66097
View code at this point
Browse repository at this point
Java: convert RequestDispatcherSink to MaD
Jami Cogswell
authored and
Jami Cogswell
committed
42e3825
View commit details
Copy full SHA for 42e3825
View code at this point
Browse repository at this point
Java: move MaD models to correct files, delete ones that already exist
Jami Cogswell
authored and
Jami Cogswell
committed
2a68299
View commit details
Copy full SHA for 2a68299
View code at this point
Browse repository at this point
Java: remove path-injection related models and tests for now
Jami Cogswell
authored and
Jami Cogswell
committed
915e106
View commit details
Copy full SHA for 915e106
View code at this point
Browse repository at this point
Java: copy files from experimental
Jami Cogswell
authored and
Jami Cogswell
committed
0d38a96
View commit details
Copy full SHA for 0d38a96
View code at this point
Browse repository at this point
Java: Add more neutral JDK models
Show description for 039bea1
atorralba
committed
039bea1
View commit details
Copy full SHA for 039bea1
View code at this point
Browse repository at this point
Previous
Next
You can’t perform that action at this time.