René's URL Explorer Experiment


Title: Java: Promote experimental XXE sinks by atorralba · Pull Request #12932 · github/codeql · GitHub

Open Graph Title: Java: Promote experimental XXE sinks by atorralba · Pull Request #12932 · github/codeql

X Title: Java: Promote experimental XXE sinks by atorralba · Pull Request #12932 · github/codeql

Description: Promotes the experimental XXE sinks submitted in #6564. Also refactors the XXE tests to use InlineFlowTest. @aschackmull: In the first commit, I moved a class ConstantStringExpr that was present in XmlParsers.qll to RangeUtils.qll because I needed to use it in other files. I think it makes sense for it to be there, but please let me know if you disagree or if you foresee any performance issues.

Open Graph Description: Promotes the experimental XXE sinks submitted in #6564. Also refactors the XXE tests to use InlineFlowTest. @aschackmull: In the first commit, I moved a class ConstantStringExpr that was present in...

X Description: Promotes the experimental XXE sinks submitted in #6564. Also refactors the XXE tests to use InlineFlowTest. @aschackmull: In the first commit, I moved a class ConstantStringExpr that was present in...

Opengraph URL: https://github.com/github/codeql/pull/12932

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:88453ad9-ddef-7f3f-f361-8dbc0451b6b6
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idE450:2BC90B:6E1D7:9508D:6A4D2B4D
html-safe-nonce048c30dd602978f719e8660da4e85c351a0482ecacddd3eb13be516d682e74ec
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJFNDUwOjJCQzkwQjo2RTFENzo5NTA4RDo2QTREMkI0RCIsInZpc2l0b3JfaWQiOiIxMjQwNTIzNDAzMTE2MjI3NDA1IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmac1d22af231c9a3fb125733ba383e241c3c0e40bc38e3e6555402fa571958e09fb
hovercard-subject-tagpull_request:1328521534
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/12932/files
twitter:imagehttps://avatars.githubusercontent.com/u/11612352?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/11612352?s=400&v=4
og:image:altPromotes the experimental XXE sinks submitted in #6564. Also refactors the XXE tests to use InlineFlowTest. @aschackmull: In the first commit, I moved a class ConstantStringExpr that was present in...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None92571a8944142227b7e19cd10918b1ddd06e5066c1ad5bc7e4769cf6140a87e6
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release93f17a978ee60bc4668e1d7b90e6bd2d622261fd
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/12932/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F12932%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F12932%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/12932/files
Reloadhttps://github.com/github/codeql/pull/12932/files
Reloadhttps://github.com/github/codeql/pull/12932/files
Please reload this pagehttps://github.com/github/codeql/pull/12932/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 424 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
atorralbahttps://github.com/atorralba
github:mainhttps://github.com/github/codeql/tree/main
atorralba:atorralba/java/promote-xxe-experimental-sinkshttps://github.com/atorralba/codeql/tree/atorralba/java/promote-xxe-experimental-sinks
Conversation 4 https://github.com/github/codeql/pull/12932
Findings https://github.com/github/codeql/pull/12932/findings
Commits 7 https://github.com/github/codeql/pull/12932/commits
Checks 0 https://github.com/github/codeql/pull/12932/checks
Files changed https://github.com/github/codeql/pull/12932/files
Please reload this pagehttps://github.com/github/codeql/pull/12932/files
Java: Promote experimental XXE sinks https://github.com/github/codeql/pull/12932/files#top
Show all changes 7 commits https://github.com/github/codeql/pull/12932/files
8b65937 Move ConstantStringExpr to RangeUtils.qll atorralba Apr 26, 2023 https://github.com/github/codeql/pull/12932/commits/8b6593715937de30d66b9d144286661fceea5fa0
1e66a54 Promote exxperimental XXE sinks atorralba Apr 26, 2023 https://github.com/github/codeql/pull/12932/commits/1e66a544fd7afce688de975f03a1700d849322e0
db73e16 Add tests atorralba Apr 26, 2023 https://github.com/github/codeql/pull/12932/commits/db73e16b70b6ce50cf6d68764782393c7711c07e
e54eaed Refactor tests to use InlineFlowTest atorralba Apr 26, 2023 https://github.com/github/codeql/pull/12932/commits/e54eaed26f3babe80f67fd86fe96d8a170c00e86
fba61d5 Remove experimental files atorralba Apr 26, 2023 https://github.com/github/codeql/pull/12932/commits/fba61d51ed02ae1d7ed042fa071b55253338662b
4606df5 Add change note atorralba Apr 26, 2023 https://github.com/github/codeql/pull/12932/commits/4606df5cb69d0f2731fd047b3a9f7c618b58023a
770099f Merge branch 'main' into atorralba/java/promote-xxe-experimental-sinks atorralba May 16, 2023 https://github.com/github/codeql/pull/12932/commits/770099f210ebcc6cbe8526d42435811b9a4a421e
Clear filters https://github.com/github/codeql/pull/12932/files
Please reload this pagehttps://github.com/github/codeql/pull/12932/files
Please reload this pagehttps://github.com/github/codeql/pull/12932/files
RangeUtils.qll https://github.com/github/codeql/pull/12932/files#diff-4a6133d47fd761fbb14ef8645296d39714e398d2e98fa0ccc97534f17939a51e
CommonsXml.qll https://github.com/github/codeql/pull/12932/files#diff-b9e4dde5229efef427b6b5c7b34948cf6a6515a14266e031fd0e86812a0bfda2
Xml.qll https://github.com/github/codeql/pull/12932/files#diff-654593fb7f34123eb7a1034770479b22530fb06986f7f5f912041ec64f292cfe
Beans.qll https://github.com/github/codeql/pull/12932/files#diff-6f004c8ad61dc92a7b763080222fc567b1bd27753e8868f68fc4225e6929e1ac
RundeckXml.qll https://github.com/github/codeql/pull/12932/files#diff-bbf7ca4348d060ad347d1dcce5a3590d0b28eafd363a02db62793438a182796b
XmlParsers.qll https://github.com/github/codeql/pull/12932/files#diff-a0f62217138aaa9280a46b4e1b35b93299d2520cc8a4d3ab7493ad035e8733f7
2023-04-26-xxe-sinks-promotion.md https://github.com/github/codeql/pull/12932/files#diff-6e758603061b4f1e199630d150eacacbe6362112c87eef63ae780807e4ec9c71
XXE.java https://github.com/github/codeql/pull/12932/files#diff-8c93ad4a0bef845f3def1e3d8eeecf06860bea257917edb7653665604da0c04a
XXE.qhelp https://github.com/github/codeql/pull/12932/files#diff-e394ea437133384363b8338cdfd896b13ceb964339bc54c470f7ab4c2028d2ea
XXE.ql https://github.com/github/codeql/pull/12932/files#diff-4f04c86f6078cd24b81cca15276d85da2d0da0fd670ae9e9e5eb4f8f8f7ade69
XXELib.qll https://github.com/github/codeql/pull/12932/files#diff-f80d389382ed4bfbbbac8178bc1eca6022062a727d4ecc1693897866bdf398fe
XXELocal.qhelp https://github.com/github/codeql/pull/12932/files#diff-fcc417152e027bf2e060cf250afde4342cfbc68e3e53cdd12a7babd5482866c0
XXELocal.ql https://github.com/github/codeql/pull/12932/files#diff-6a0deaf62340102a7e061863618908cc3b825ef6fe92b204840cc2ac5bf4a3e1
XXE.expected https://github.com/github/codeql/pull/12932/files#diff-449fe70449c3230c6cfb224dd0be9d63e0c0c38631d07c1da3db888adc1850cb
XXE.java https://github.com/github/codeql/pull/12932/files#diff-70d8b8f54c2a1ccc54975880d3d132b7ec1e6fc22fb3bdab0e80b43a3f4bfeb5
XXE.qlref https://github.com/github/codeql/pull/12932/files#diff-d88ba338e14274964fc9e0bbf45190c3e2e89970d85b4468428b9bc30856c438
options https://github.com/github/codeql/pull/12932/files#diff-50b8c5bce716c7d83ae8becf8dca6040d6ba81fc974e38f369078018d69397e6
DigesterTests.java https://github.com/github/codeql/pull/12932/files#diff-49efb77f69ce38a5dcc147dd1a2af55dd8706f4c83e40cd3d10d692aea3fb900
DocumentBuilderTests.java https://github.com/github/codeql/pull/12932/files#diff-d36823a7890a9a09e4786c8747b0104a12e5d2f4030550f97c397ef50a08a2b3
ParserHelperTests.java https://github.com/github/codeql/pull/12932/files#diff-9c5ff441a7f03f277e5d2daeec899156f2e2571a91314be1be18340dcb4a628c
SAXBuilderTests.java https://github.com/github/codeql/pull/12932/files#diff-af873b5c8f30cac84b3f236ec6f115c9091445a475aa1bca3f5ca646ec5fc3e5
SAXParserTests.java https://github.com/github/codeql/pull/12932/files#diff-004dccb8d6cc30741b62ad294b2e50969afc01cba8e18fdce589577c82bee5e1
SAXReaderTests.java https://github.com/github/codeql/pull/12932/files#diff-d069053598b191f509b4a8c3ba3fc74aec1a84c10e93fc457cfa1ffff1805778
SAXSourceTests.java https://github.com/github/codeql/pull/12932/files#diff-e4588b0cee64a8fe8d694bf13ca5c0accacb28ff8eca33c488adac6cd79c52f3
SchemaTests.java https://github.com/github/codeql/pull/12932/files#diff-c2a65c8f9249cd9f6790977983ee3d2dd4c4cb00c4bbf146dcbe529ef7e34752
SimpleXMLTests.java https://github.com/github/codeql/pull/12932/files#diff-3f3e9244e45bd6e11ada7c6d70534d0056cc58a78db99323f80ae8b5d2fee57a
TransformerTests.java https://github.com/github/codeql/pull/12932/files#diff-5a8b38fe47764a18644fe3333fdf36c1ecc16d38253e4e774ff67c052f01eac3
UnmarshallerTests.java https://github.com/github/codeql/pull/12932/files#diff-cb9a259aa69f67c6bde79363353d24447a32451b655f0fb9490f5d216c5dfda8
ValidatorTests.java https://github.com/github/codeql/pull/12932/files#diff-b82e447ed27f23f99626ce223341af73dc094a2021d7ef8595d678e2067d398c
XMLDecoderTests.java https://github.com/github/codeql/pull/12932/files#diff-a205f856e4f7f5b96647e7125a97452b1212a0d2e42fde72a83c855b3d3bee81
XMLReaderTests.java https://github.com/github/codeql/pull/12932/files#diff-17709d11c582e93331ef2b87d99f99edf147574d04f9dd724dc16a27e5815d71
XPathExpressionTests.java https://github.com/github/codeql/pull/12932/files#diff-8ce88334910ad48804d0cae9ff88384cc0fcf499b6183ab1c0a4696cce83e0d8
XXE.expected https://github.com/github/codeql/pull/12932/files#diff-0f791397da6ebc6335b53652fcccd5eb3b9574379719a2a14f600c0439f46eff
XXE.ql https://github.com/github/codeql/pull/12932/files#diff-5e34e7e7e419eb3cbe8ae5ef93381d8bb2cd491ffa1910126f0ceb118bcd7799
XXE.qlref https://github.com/github/codeql/pull/12932/files#diff-c56158915abc730a0ed07ee12960d9a2e7fc6f7361898541e5dc4cb4471a25de
XmlInputFactoryTests.java https://github.com/github/codeql/pull/12932/files#diff-b4f1520e73f6debf296368f6ebf5579fce8318bf7cdb49e39a042c60d62092e8
options https://github.com/github/codeql/pull/12932/files#diff-a56577031b14243cbd499e46f11b849570a47e302bfa6dcd88eb0a5133001aea
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/dataflow/RangeUtils.qllhttps://github.com/github/codeql/pull/12932/files#diff-4a6133d47fd761fbb14ef8645296d39714e398d2e98fa0ccc97534f17939a51e
View file https://github.com/atorralba/codeql/blob/770099f210ebcc6cbe8526d42435811b9a4a421e/java/ql/lib/semmle/code/java/dataflow/RangeUtils.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/12932/{{ revealButtonHref }}
https://github.com/github/codeql/pull/12932/files#diff-4a6133d47fd761fbb14ef8645296d39714e398d2e98fa0ccc97534f17939a51e
https://github.com/github/codeql/pull/12932/files#diff-4a6133d47fd761fbb14ef8645296d39714e398d2e98fa0ccc97534f17939a51e
https://github.com/github/codeql/pull/12932/files#diff-4a6133d47fd761fbb14ef8645296d39714e398d2e98fa0ccc97534f17939a51e
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/frameworks/apache/CommonsXml.qllhttps://github.com/github/codeql/pull/12932/files#diff-b9e4dde5229efef427b6b5c7b34948cf6a6515a14266e031fd0e86812a0bfda2
View file https://github.com/atorralba/codeql/blob/770099f210ebcc6cbe8526d42435811b9a4a421e/java/ql/lib/semmle/code/java/frameworks/apache/CommonsXml.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/12932/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/frameworks/javaee/Xml.qllhttps://github.com/github/codeql/pull/12932/files#diff-654593fb7f34123eb7a1034770479b22530fb06986f7f5f912041ec64f292cfe
View file https://github.com/atorralba/codeql/blob/770099f210ebcc6cbe8526d42435811b9a4a421e/java/ql/lib/semmle/code/java/frameworks/javaee/Xml.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/12932/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/frameworks/javase/Beans.qllhttps://github.com/github/codeql/pull/12932/files#diff-6f004c8ad61dc92a7b763080222fc567b1bd27753e8868f68fc4225e6929e1ac
View file https://github.com/atorralba/codeql/blob/770099f210ebcc6cbe8526d42435811b9a4a421e/java/ql/lib/semmle/code/java/frameworks/javase/Beans.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/12932/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/frameworks/rundeck/RundeckXml.qllhttps://github.com/github/codeql/pull/12932/files#diff-bbf7ca4348d060ad347d1dcce5a3590d0b28eafd363a02db62793438a182796b
View file https://github.com/atorralba/codeql/blob/770099f210ebcc6cbe8526d42435811b9a4a421e/java/ql/lib/semmle/code/java/frameworks/rundeck/RundeckXml.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/12932/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/XmlParsers.qllhttps://github.com/github/codeql/pull/12932/files#diff-a0f62217138aaa9280a46b4e1b35b93299d2520cc8a4d3ab7493ad035e8733f7
View file https://github.com/atorralba/codeql/blob/770099f210ebcc6cbe8526d42435811b9a4a421e/java/ql/lib/semmle/code/java/security/XmlParsers.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/12932/{{ revealButtonHref }}
https://github.com/github/codeql/pull/12932/files#diff-a0f62217138aaa9280a46b4e1b35b93299d2520cc8a4d3ab7493ad035e8733f7
https://github.com/github/codeql/pull/12932/files#diff-a0f62217138aaa9280a46b4e1b35b93299d2520cc8a4d3ab7493ad035e8733f7
https://github.com/github/codeql/pull/12932/files#diff-a0f62217138aaa9280a46b4e1b35b93299d2520cc8a4d3ab7493ad035e8733f7
https://github.com/github/codeql/pull/12932/files#diff-a0f62217138aaa9280a46b4e1b35b93299d2520cc8a4d3ab7493ad035e8733f7
https://github.com/github/codeql/pull/12932/files#diff-a0f62217138aaa9280a46b4e1b35b93299d2520cc8a4d3ab7493ad035e8733f7
https://github.com/github/codeql/pull/12932/files#diff-a0f62217138aaa9280a46b4e1b35b93299d2520cc8a4d3ab7493ad035e8733f7
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/change-notes/2023-04-26-xxe-sinks-promotion.mdhttps://github.com/github/codeql/pull/12932/files#diff-6e758603061b4f1e199630d150eacacbe6362112c87eef63ae780807e4ec9c71
View file https://github.com/atorralba/codeql/blob/770099f210ebcc6cbe8526d42435811b9a4a421e/java/ql/src/change-notes/2023-04-26-xxe-sinks-promotion.md
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/12932/{{ revealButtonHref }}
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/experimental/Security/CWE/CWE-611/XXE.javahttps://github.com/github/codeql/pull/12932/files#diff-8c93ad4a0bef845f3def1e3d8eeecf06860bea257917edb7653665604da0c04a
View file https://github.com/github/codeql/blob/ac1df4de91438904c86e6e3ce5d01f9e6ba2468a/java/ql/src/experimental/Security/CWE/CWE-611/XXE.java
Open in desktop https://desktop.github.com
Please reload this pagehttps://github.com/github/codeql/pull/12932/files
Please reload this pagehttps://github.com/github/codeql/pull/12932/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width


URLs of crawlers that visited me.