René's URL Explorer Experiment


Title: Java: Promote Unsafe URL Forward query from experimental by jcogs33 · Pull Request #14854 · github/codeql · GitHub

Open Graph Title: Java: Promote Unsafe URL Forward query from experimental by jcogs33 · Pull Request #14854 · github/codeql

X Title: Java: Promote Unsafe URL Forward query from experimental by jcogs33 · Pull Request #14854 · github/codeql

Description: CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security - Java: Promote Unsafe URL Forward query from experimental by jcogs33 · Pull Request #14854 · github/codeql

Open Graph Description: This PR promotes java/unsafe-url-forward-dispatch-load from experimental (#6240 and #7286). Note: this promotion does not include the resource-related additions in #8706 and 9199. Since we already ...

X Description: This PR promotes java/unsafe-url-forward-dispatch-load from experimental (#6240 and #7286). Note: this promotion does not include the resource-related additions in #8706 and 9199. Since we already ...

Opengraph URL: https://github.com/github/codeql/pull/14854

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:0308c9fa-fd1b-b519-a248-c1418460163f
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id9E9C:354A24:EBD2EC:1402C8B:6A4C7A40
html-safe-nonce62a974f0ebfd03cddfd33c0d12f99c594ba3c94eb418ac63b77664665de89c53
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5RTlDOjM1NEEyNDpFQkQyRUM6MTQwMkM4Qjo2QTRDN0E0MCIsInZpc2l0b3JfaWQiOiIyNDc4MzI4Mzg2NTAzMzQyNjU2IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0=
visitor-hmac088e9fd3c9d18c8b7eca645c11414d08fd9ebec92ebf1997cef86b2cd26ed8fc
hovercard-subject-tagpull_request:1609992356
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/14854/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/61723fba9d1fe4366031c54ba1b3e919e976bae77dedaee3a4afc85379741edc/github/codeql/pull/14854
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/61723fba9d1fe4366031c54ba1b3e919e976bae77dedaee3a4afc85379741edc/github/codeql/pull/14854
og:image:altThis PR promotes java/unsafe-url-forward-dispatch-load from experimental (#6240 and #7286). Note: this promotion does not include the resource-related additions in #8706 and 9199. Since we already ...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernamejcogs33
hostnamegithub.com
expected-hostnamegithub.com
None3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c
turbo-cache-controlno-cache
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release56ac743bebb13694b888673bb7257f4b97a4b7fd
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/14854#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F14854
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F14854
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/14854
Reloadhttps://github.com/github/codeql/pull/14854
Reloadhttps://github.com/github/codeql/pull/14854
Please reload this pagehttps://github.com/github/codeql/pull/14854
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 424 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
jcogs33https://github.com/jcogs33
github:mainhttps://github.com/github/codeql/tree/main
jcogs33:jcogs33/unsafe-url-forward-promotionhttps://github.com/jcogs33/codeql/tree/jcogs33/unsafe-url-forward-promotion
Conversationhttps://github.com/github/codeql/pull/14854
Commits40 (40)https://github.com/github/codeql/pull/14854/commits
Checkshttps://github.com/github/codeql/pull/14854/checks
Files changedhttps://github.com/github/codeql/pull/14854/files
Java: Promote Unsafe URL Forward query from experimentalhttps://github.com/github/codeql/pull/14854#top
jcogs33https://github.com/jcogs33
github:mainhttps://github.com/github/codeql/tree/main
jcogs33:jcogs33/unsafe-url-forward-promotionhttps://github.com/jcogs33/codeql/tree/jcogs33/unsafe-url-forward-promotion
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
Nov 20, 2023https://github.com/github/codeql/pull/14854#issue-2003188893
Please reload this pagehttps://github.com/github/codeql/pull/14854
#6240https://github.com/github/codeql/pull/6240
#7286https://github.com/github/codeql/pull/7286
#8706https://github.com/github/codeql/pull/8706
9199https://github.com/github/codeql/pull/9199
examplehttps://github.com/github/codeql/blob/9c51514bd9fdd877990cb7a62a3688127002c392/java/ql/lib/ext/java.lang.model.yml#L6-L7
#15921https://github.com/github/codeql/pull/15921
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Java https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava
Nov 20, 2023https://github.com/github/codeql/pull/14854#event-11017751861
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Nov 20, 2023https://github.com/github/codeql/pull/14854#issuecomment-1819974287
Please reload this pagehttps://github.com/github/codeql/pull/14854
Unvalidated Redirects and Forwards Cheat Sheethttps://cheatsheetseries.owasp.org/cheatsheets/Unvalidated_Redirects_and_Forwards_Cheat_Sheet.html
CWE-552https://cwe.mitre.org/data/definitions/552.html
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
Nov 20, 2023https://github.com/github/codeql/pull/14854#issuecomment-1819975951
Please reload this pagehttps://github.com/github/codeql/pull/14854
artifacts of this workflow runhttps://github.com/github/codeql/actions/runs/8451486618
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/apps/github-advanced-security
github-advanced-securityhttps://github.com/apps/github-advanced-security
Nov 20, 2023 https://github.com/github/codeql/pull/14854#pullrequestreview-1740872778
View reviewed changes https://github.com/github/codeql/pull/14854/files
java/ql/src/Security/CWE/CWE-552/UnsafeUrlForward.qlhttps://github.com/github/codeql/pull/14854/files#diff-2580715eba833826b6881db3458d0c1d88a4f4b8787b9432edaa01d8e7c4de01
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
force-pushedhttps://github.com/github/codeql/compare/576e14608a0870d7fbf75d726cac12b18c2d5750..5773be6f19c7d862acdb73efb68c841fa8885416
576e146https://github.com/github/codeql/commit/576e14608a0870d7fbf75d726cac12b18c2d5750
5773be6https://github.com/github/codeql/commit/5773be6f19c7d862acdb73efb68c841fa8885416
Compare https://github.com/github/codeql/compare/576e14608a0870d7fbf75d726cac12b18c2d5750..5773be6f19c7d862acdb73efb68c841fa8885416
December 1, 2023 22:52https://github.com/github/codeql/pull/14854#event-11127160359
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
force-pushedhttps://github.com/github/codeql/compare/5773be6f19c7d862acdb73efb68c841fa8885416..5a14f3e4eac4e0b3ca8f0dec6cc8e74617b635e4
5773be6https://github.com/github/codeql/commit/5773be6f19c7d862acdb73efb68c841fa8885416
5a14f3ehttps://github.com/github/codeql/commit/5a14f3e4eac4e0b3ca8f0dec6cc8e74617b635e4
Compare https://github.com/github/codeql/compare/5773be6f19c7d862acdb73efb68c841fa8885416..5a14f3e4eac4e0b3ca8f0dec6cc8e74617b635e4
December 11, 2023 03:16https://github.com/github/codeql/pull/14854#event-11204843205
https://github.com/apps/github-advanced-security
github-advanced-securityhttps://github.com/apps/github-advanced-security
Dec 11, 2023 https://github.com/github/codeql/pull/14854#pullrequestreview-1774226840
View reviewed changes https://github.com/github/codeql/pull/14854/files
java/ql/lib/semmle/code/java/security/UrlForwardQuery.qllhttps://github.com/github/codeql/pull/14854/files#diff-8df78ba740135187938580722e32cd4d7312be48a79d76efdb69775d1096175c
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
force-pushedhttps://github.com/github/codeql/compare/d04bbd626e4ca9f2e9d530d1f58f54fb71810cdc..e92b372e266a3c3a36d5e3b3ad8c7a60309cdbc4
d04bbd6https://github.com/github/codeql/commit/d04bbd626e4ca9f2e9d530d1f58f54fb71810cdc
e92b372https://github.com/github/codeql/commit/e92b372e266a3c3a36d5e3b3ad8c7a60309cdbc4
Compare https://github.com/github/codeql/compare/d04bbd626e4ca9f2e9d530d1f58f54fb71810cdc..e92b372e266a3c3a36d5e3b3ad8c7a60309cdbc4
March 5, 2024 17:26https://github.com/github/codeql/pull/14854#event-12017345995
https://github.com/apps/github-advanced-security
github-advanced-securityhttps://github.com/apps/github-advanced-security
Mar 5, 2024 https://github.com/github/codeql/pull/14854#pullrequestreview-1917684082
View reviewed changes https://github.com/github/codeql/pull/14854/files
java/ql/lib/semmle/code/java/security/UrlForward.qllhttps://github.com/github/codeql/pull/14854/files#diff-e44964d6efadc329f0c4e3a26c5925e8056d0ab5891465edb58f5d1efee41300
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/semmle/code/java/security/UrlForward.qllhttps://github.com/github/codeql/pull/14854/files#diff-e44964d6efadc329f0c4e3a26c5925e8056d0ab5891465edb58f5d1efee41300
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/semmle/code/java/security/UrlForward.qllhttps://github.com/github/codeql/pull/14854/files#diff-e44964d6efadc329f0c4e3a26c5925e8056d0ab5891465edb58f5d1efee41300
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/semmle/code/java/security/UrlForward.qllhttps://github.com/github/codeql/pull/14854/files#diff-e44964d6efadc329f0c4e3a26c5925e8056d0ab5891465edb58f5d1efee41300
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/semmle/code/java/security/UrlForward.qllhttps://github.com/github/codeql/pull/14854/files#diff-e44964d6efadc329f0c4e3a26c5925e8056d0ab5891465edb58f5d1efee41300
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
force-pushedhttps://github.com/github/codeql/compare/c4f39e488bc467858d051c64591fa89599a4e014..dec48b0a942f471148749f54b0b58f1a3a17dac1
c4f39e4https://github.com/github/codeql/commit/c4f39e488bc467858d051c64591fa89599a4e014
dec48b0https://github.com/github/codeql/commit/dec48b0a942f471148749f54b0b58f1a3a17dac1
Compare https://github.com/github/codeql/compare/c4f39e488bc467858d051c64591fa89599a4e014..dec48b0a942f471148749f54b0b58f1a3a17dac1
March 5, 2024 21:13https://github.com/github/codeql/pull/14854#event-12019708628
https://github.com/apps/github-advanced-security
github-advanced-securityhttps://github.com/apps/github-advanced-security
Mar 10, 2024 https://github.com/github/codeql/pull/14854#pullrequestreview-1926696908
View reviewed changes https://github.com/github/codeql/pull/14854/files
java/ql/lib/semmle/code/java/security/UrlForward.qllhttps://github.com/github/codeql/pull/14854/files#diff-e44964d6efadc329f0c4e3a26c5925e8056d0ab5891465edb58f5d1efee41300
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
force-pushedhttps://github.com/github/codeql/compare/b748360f3163d5683be9ffff1a7cb4b2f906c9a0..f7462a329e0d60d9edc4cc5859b03ca77dd04f28
b748360https://github.com/github/codeql/commit/b748360f3163d5683be9ffff1a7cb4b2f906c9a0
f7462a3https://github.com/github/codeql/commit/f7462a329e0d60d9edc4cc5859b03ca77dd04f28
Compare https://github.com/github/codeql/compare/b748360f3163d5683be9ffff1a7cb4b2f906c9a0..f7462a329e0d60d9edc4cc5859b03ca77dd04f28
March 12, 2024 16:24https://github.com/github/codeql/pull/14854#event-12091973400
March 13, 2024 16:28https://github.com/github/codeql/pull/14854#commits-pushed-0d38a96
Java: copy files from experimentalhttps://github.com/github/codeql/pull/14854/commits/0d38a9625e039120e715dfe79b529dc5bfead3d8
0d38a96https://github.com/github/codeql/pull/14854/commits/0d38a9625e039120e715dfe79b529dc5bfead3d8
Java: move config to Query.qll filehttps://github.com/github/codeql/pull/14854/commits/2793f28428567060b66819525a5a045f52f2228d
2793f28https://github.com/github/codeql/pull/14854/commits/2793f28428567060b66819525a5a045f52f2228d
Java: update test cases to use inline expectationshttps://github.com/github/codeql/pull/14854/commits/35a083ae9e5c70a29ac426cf54112ef98286507b
35a083ahttps://github.com/github/codeql/pull/14854/commits/35a083ae9e5c70a29ac426cf54112ef98286507b
Java: remove path-injection related models and tests for nowhttps://github.com/github/codeql/pull/14854/commits/915e106ab382aaa060e11b02e34d61c7434452c6
915e106https://github.com/github/codeql/pull/14854/commits/915e106ab382aaa060e11b02e34d61c7434452c6
Java: move MaD models to correct files, delete ones that already existhttps://github.com/github/codeql/pull/14854/commits/2a682995aeadbb919d4c400b916c7737fae0b150
2a68299https://github.com/github/codeql/pull/14854/commits/2a682995aeadbb919d4c400b916c7737fae0b150
Java: remove more path-injection related classes (will maybe add some…https://github.com/github/codeql/pull/14854/commits/4ff884e26cad54486745861fe1145c6539418f8c
4ff884ehttps://github.com/github/codeql/pull/14854/commits/4ff884e26cad54486745861fe1145c6539418f8c
Java: convert RequestDispatcherSink to MaDhttps://github.com/github/codeql/pull/14854/commits/42e3825ea3b50ee362ae723c657744de85860e5e
42e3825https://github.com/github/codeql/pull/14854/commits/42e3825ea3b50ee362ae723c657744de85860e5e
Java: switch StaplerResponse.forward from request-forgery sink to url…https://github.com/github/codeql/pull/14854/commits/8d66097483a8892d4a15c2232e63d883035a45f9
8d66097https://github.com/github/codeql/pull/14854/commits/8d66097483a8892d4a15c2232e63d883035a45f9
Java: convert SpringModelAndViewSink to MaDhttps://github.com/github/codeql/pull/14854/commits/1da1e896cbc8eb1b918c8c4950010b53146391a6
1da1e89https://github.com/github/codeql/pull/14854/commits/1da1e896cbc8eb1b918c8c4950010b53146391a6
Java: add some comments and minor code reorghttps://github.com/github/codeql/pull/14854/commits/5a9d7552b3d92aba8cdee9a75ea95c02819bb4cf
5a9d755https://github.com/github/codeql/pull/14854/commits/5a9d7552b3d92aba8cdee9a75ea95c02819bb4cf
Java: update query metadata and alert messagehttps://github.com/github/codeql/pull/14854/commits/6e7c05467bddf44f0411920392b6886f680c5ecf
6e7c054https://github.com/github/codeql/pull/14854/commits/6e7c05467bddf44f0411920392b6886f680c5ecf
Java: rename 'UnsafeUrlForward' to 'UrlForward'https://github.com/github/codeql/pull/14854/commits/09bc21dbd36e4f0e4ab954d5f691bc440b2cb0c5
09bc21dhttps://github.com/github/codeql/pull/14854/commits/09bc21dbd36e4f0e4ab954d5f691bc440b2cb0c5
Java: update qhelphttps://github.com/github/codeql/pull/14854/commits/c331393cfd3982f06098e7f1a0613124c0cb44f4
c331393https://github.com/github/codeql/pull/14854/commits/c331393cfd3982f06098e7f1a0613124c0cb44f4
Java: update/add some TODO commentshttps://github.com/github/codeql/pull/14854/commits/5fa63ab5c22adc24b62cdfdc4efe12e578ede3bf
5fa63abhttps://github.com/github/codeql/pull/14854/commits/5fa63ab5c22adc24b62cdfdc4efe12e578ede3bf
March 13, 2024 16:28https://github.com/github/codeql/pull/14854#commits-pushed-e99cea3
Java: update UrlPathBarrier to include FollowsBarrierPrefixhttps://github.com/github/codeql/pull/14854/commits/e99cea340bcf8902bf133c8913cf867d943475c9
e99cea3https://github.com/github/codeql/pull/14854/commits/e99cea340bcf8902bf133c8913cf867d943475c9
Java: adjust prefix barriershttps://github.com/github/codeql/pull/14854/commits/04d27f2d65e9fa1833731889404e57c33f9a22f0
04d27f2https://github.com/github/codeql/pull/14854/commits/04d27f2d65e9fa1833731889404e57c33f9a22f0
Java: add spurious test case for StringBuilder.appendhttps://github.com/github/codeql/pull/14854/commits/5ac453eb38813b14f0e62c2215486581c3943b87
5ac453ehttps://github.com/github/codeql/pull/14854/commits/5ac453eb38813b14f0e62c2215486581c3943b87
Java: adjust BarrierPrefix to handle prepended charshttps://github.com/github/codeql/pull/14854/commits/1b01f26d09dc118c3796846ceaa975525c3ccf6f
1b01f26https://github.com/github/codeql/pull/14854/commits/1b01f26d09dc118c3796846ceaa975525c3ccf6f
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
force-pushedhttps://github.com/github/codeql/compare/2701a8e0662f6724fde51f20a42cba60f0dba0d6..1b01f26d09dc118c3796846ceaa975525c3ccf6f
2701a8ehttps://github.com/github/codeql/commit/2701a8e0662f6724fde51f20a42cba60f0dba0d6
1b01f26https://github.com/github/codeql/commit/1b01f26d09dc118c3796846ceaa975525c3ccf6f
Compare https://github.com/github/codeql/compare/2701a8e0662f6724fde51f20a42cba60f0dba0d6..1b01f26d09dc118c3796846ceaa975525c3ccf6f
March 13, 2024 20:29https://github.com/github/codeql/pull/14854#event-12108830717
March 15, 2024 14:06https://github.com/github/codeql/pull/14854#commits-pushed-55f7369
Java: performance fixhttps://github.com/github/codeql/pull/14854/commits/55f7369df0d44893dd4cd4d843b7e740cc764854
55f7369https://github.com/github/codeql/pull/14854/commits/55f7369df0d44893dd4cd4d843b7e740cc764854
Java: remove experimental fileshttps://github.com/github/codeql/pull/14854/commits/658fffeac1acaf6e3b823635efd27df7f611584f
658fffehttps://github.com/github/codeql/pull/14854/commits/658fffeac1acaf6e3b823635efd27df7f611584f
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
Mar 18, 2024 https://github.com/github/codeql/pull/14854#pullrequestreview-1941856474
View reviewed changes https://github.com/github/codeql/pull/14854/files/658fffeac1acaf6e3b823635efd27df7f611584f
java/ql/lib/ext/javax.servlet.model.ymlhttps://github.com/github/codeql/pull/14854/files/658fffeac1acaf6e3b823635efd27df7f611584f#diff-c99a4adda4ae854cc26f80e70e269ae0f76b7a45138bee7653c329c608db514b
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
March 18, 2024 02:15https://github.com/github/codeql/pull/14854#event-12145040741
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
code ownerhttps://github.com/github/codeql/blob/daee22d38cdfedb110ff3e807df83d6149c904c9/CODEOWNERS#L4
March 18, 2024 02:15https://github.com/github/codeql/pull/14854#event-12145040771
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
atorralbahttps://github.com/atorralba
March 18, 2024 02:15https://github.com/github/codeql/pull/14854#event-12145044584
Java: remove experimental testshttps://github.com/github/codeql/pull/14854/commits/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab
a8eb1d1https://github.com/github/codeql/pull/14854/commits/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab
https://github.com/atorralba
atorralbahttps://github.com/atorralba
Mar 26, 2024 https://github.com/github/codeql/pull/14854#pullrequestreview-1959906094
View reviewed changes https://github.com/github/codeql/pull/14854/files/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab
atorralbahttps://github.com/atorralba
https://github.com/github/codeql/pull/14854#pullrequestreview-1959906094
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/ext/experimental/io.undertow.server.handlers.resource.model.ymlhttps://github.com/github/codeql/pull/14854/files/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab#diff-33cf17e36afb575eb10419fda992787b61a54ec6f115dceb1062c23b58941bf8
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/ext/experimental/org.springframework.core.io.model.ymlhttps://github.com/github/codeql/pull/14854/files/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab#diff-0ebe996bd717c518580d5e1c433b6ceec7beb8c95b32f1bfbec0e3b118c95adf
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/ext/javax.servlet.model.ymlhttps://github.com/github/codeql/pull/14854/files/658fffeac1acaf6e3b823635efd27df7f611584f#diff-c99a4adda4ae854cc26f80e70e269ae0f76b7a45138bee7653c329c608db514b
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/semmle/code/java/security/PathSanitizer.qllhttps://github.com/github/codeql/pull/14854/files/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab#diff-38978229f15815dd860ec9f3696f469770f85b8082736b808072ef64be18a834
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/semmle/code/java/security/UrlForward.qllhttps://github.com/github/codeql/pull/14854/files/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab#diff-e44964d6efadc329f0c4e3a26c5925e8056d0ab5891465edb58f5d1efee41300
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/semmle/code/java/security/UrlForwardQuery.qllhttps://github.com/github/codeql/pull/14854/files/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab#diff-8df78ba740135187938580722e32cd4d7312be48a79d76efdb69775d1096175c
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/lib/semmle/code/java/security/UrlForwardQuery.qllhttps://github.com/github/codeql/pull/14854/files/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab#diff-8df78ba740135187938580722e32cd4d7312be48a79d76efdb69775d1096175c
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/test/query-tests/security/CWE-552/UrlForwardTest.qlhttps://github.com/github/codeql/pull/14854/files/a8eb1d10f646c0928dfb97b29d7fe418aadb8bab#diff-c21f70011afafbe073c8420c55c3adfa55116e530ddbc7b21a99c355b7b18491
Please reload this pagehttps://github.com/github/codeql/pull/14854
March 27, 2024 08:09https://github.com/github/codeql/pull/14854#commits-pushed-35fbc95
Java: remove redundant linehttps://github.com/github/codeql/pull/14854/commits/35fbc95cc743f63b16a68f8f5f6ce82a9d0bdbeb
35fbc95https://github.com/github/codeql/pull/14854/commits/35fbc95cc743f63b16a68f8f5f6ce82a9d0bdbeb
Java: remove parentheseshttps://github.com/github/codeql/pull/14854/commits/121b24ea7c0e21f2032afc64b54f4de85bda9275
121b24ehttps://github.com/github/codeql/pull/14854/commits/121b24ea7c0e21f2032afc64b54f4de85bda9275
Java: use InlineFlowTest instead of InlineExpectationsTesthttps://github.com/github/codeql/pull/14854/commits/2391fe7d89ff46cad715c09963c73ae6a8fd6f90
2391fe7https://github.com/github/codeql/pull/14854/commits/2391fe7d89ff46cad715c09963c73ae6a8fd6f90
Java: move UrlForward.qll code to UrlForwardQuery.qllhttps://github.com/github/codeql/pull/14854/commits/40c932a5f911c7ad5c1ca0cd5d517ee6081f4107
40c932ahttps://github.com/github/codeql/pull/14854/commits/40c932a5f911c7ad5c1ca0cd5d517ee6081f4107
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
ready-for-doc-review https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Aready-for-doc-review
Mar 27, 2024https://github.com/github/codeql/pull/14854#event-12273737963
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
Mar 27, 2024 https://github.com/github/codeql/pull/14854#ref-pullrequest-2185276240
Java: add models for some resource-related methods #15921 https://github.com/github/codeql/pull/15921
https://github.com/subatoi
subatoihttps://github.com/subatoi
Mar 28, 2024 https://github.com/github/codeql/pull/14854#pullrequestreview-1966598293
View reviewed changes https://github.com/github/codeql/pull/14854/files/40c932a5f911c7ad5c1ca0cd5d517ee6081f4107
subatoihttps://github.com/subatoi
https://github.com/github/codeql/pull/14854#pullrequestreview-1966598293
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/src/Security/CWE/CWE-552/UrlForward.qhelphttps://github.com/github/codeql/pull/14854/files/40c932a5f911c7ad5c1ca0cd5d517ee6081f4107#diff-e6b081066bb460a734a1a39938f6a8890ad40705cff8f70deefac95fdb5957a1
Please reload this pagehttps://github.com/github/codeql/pull/14854
java/ql/src/Security/CWE/CWE-552/UrlForward.qlhttps://github.com/github/codeql/pull/14854/files/40c932a5f911c7ad5c1ca0cd5d517ee6081f4107#diff-838f9417cf68951cb4de778cd72181d41c8f69e9cb5370a737664f99977c032e
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/subatoi
subatoihttps://github.com/subatoi
Mar 28, 2024https://github.com/github/codeql/pull/14854#event-12283845936
https://github.com/atorralba
atorralbahttps://github.com/atorralba
Mar 28, 2024 https://github.com/github/codeql/pull/14854#pullrequestreview-1966796187
View reviewed changes https://github.com/github/codeql/pull/14854/files/40c932a5f911c7ad5c1ca0cd5d517ee6081f4107
atorralbahttps://github.com/atorralba
https://github.com/github/codeql/pull/14854#pullrequestreview-1966796187
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
@jcogs33https://github.com/jcogs33
@subatoihttps://github.com/subatoi
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/subatoi
subatoihttps://github.com/subatoi
Mar 28, 2024https://github.com/github/codeql/pull/14854#issuecomment-2025714136
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/jcogs33
https://github.com/subatoi
docs wording updateshttps://github.com/github/codeql/pull/14854/commits/2f8c4df309a177c46aa5d2ad60919ebad815db62
2f8c4dfhttps://github.com/github/codeql/pull/14854/commits/2f8c4df309a177c46aa5d2ad60919ebad815db62
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
atorralbahttps://github.com/atorralba
subatoihttps://github.com/subatoi
2f8c4dfhttps://github.com/github/codeql/commit/2f8c4df309a177c46aa5d2ad60919ebad815db62
March 28, 2024 20:15https://github.com/github/codeql/pull/14854#event-12287034396
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
Mar 28, 2024https://github.com/github/codeql/pull/14854#issuecomment-2026038678
@subatoihttps://github.com/subatoi
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/subatoi
subatoihttps://github.com/subatoi
Mar 28, 2024 https://github.com/github/codeql/pull/14854#pullrequestreview-1967452955
View reviewed changes https://github.com/github/codeql/pull/14854/files/2f8c4df309a177c46aa5d2ad60919ebad815db62
subatoihttps://github.com/subatoi
https://github.com/github/codeql/pull/14854#pullrequestreview-1967452955
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
d889e3chttps://github.com/github/codeql/commit/d889e3cf980c52ddd173c246640016114f5f1544
Mar 29, 2024https://github.com/github/codeql/pull/14854#event-12298231679
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
March 29, 2024 20:34https://github.com/github/codeql/pull/14854#event-12298232439
https://github.co/hiddenchars
https://github.com/github/codeql/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F14854
https://github.com/subatoi
subatoi https://github.com/subatoi
https://github.com/github/codeql/pull/14854/files/2f8c4df309a177c46aa5d2ad60919ebad815db62
https://github.com/atorralba
atorralba https://github.com/atorralba
https://github.com/github/codeql/pull/14854/files/40c932a5f911c7ad5c1ca0cd5d517ee6081f4107
https://github.com/subatoi
subatoi https://github.com/subatoi
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Java https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava
ready-for-doc-review https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Aready-for-doc-review
Please reload this pagehttps://github.com/github/codeql/pull/14854
https://github.com/jcogs33
https://github.com/subatoi
https://github.com/atorralba
https://github.com/apps/github-advanced-security
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.