| route-pattern | /_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format) |
| route-controller | voltron_pull_requests_fragments |
| route-action | pull_request_layout |
| fetch-nonce | v2:2304c34d-854e-d6ac-ad1c-4fd1fedace33 |
| current-catalog-service-hash | ae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b |
| request-id | 9E1A:3D1E26:108B28F:15EFE12:6A4C59B4 |
| html-safe-nonce | f0a02ce261ed7b95f477b6ec242fb97210645164d1e8dd6bf3a617ae7ca81915 |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI5RTFBOjNEMUUyNjoxMDhCMjhGOjE1RUZFMTI6NkE0QzU5QjQiLCJ2aXNpdG9yX2lkIjoiNDI1NTc3MzAzMTQyODQ4OTQ4IiwicmVnaW9uX2VkZ2UiOiJpYWQiLCJyZWdpb25fcmVuZGVyIjoiaWFkIn0= |
| visitor-hmac | e0358a822eba10f721b04b5f1b66289faabd5a0d1d57fe10f16c7d2547ef9bf3 |
| hovercard-subject-tag | pull_request:496678336 |
| github-keyboard-shortcuts | repository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | ///voltron/pull_requests_fragments/pull_request_layout |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/4388/pull_request_layout |
| twitter:image | https://opengraph.githubassets.com/840656dc1b9c0d125c51ecdfd14169681d8fc76aca3c3524db32fe9ccf12a390/github/codeql/pull/4388 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/840656dc1b9c0d125c51ecdfd14169681d8fc76aca3c3524db32fe9ccf12a390/github/codeql/pull/4388 |
| og:image:alt | This vulnerability detects the use of the local temporary directory in ways that potentially expose sensitive information to other users.
Some examples
public class TempDirUsageVulnerable {
voi... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | JLLeitschuh |
| hostname | github.com |
| expected-hostname | github.com |
| None | 3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c |
| turbo-cache-control | no-cache |
| go-import | github.com/github/codeql git https://github.com/github/codeql.git |
| octolytics-dimension-user_id | 9919 |
| octolytics-dimension-user_login | github |
| octolytics-dimension-repository_id | 143040428 |
| octolytics-dimension-repository_nwo | github/codeql |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 143040428 |
| octolytics-dimension-repository_network_root_nwo | github/codeql |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | 14099438da5379150f15a2892474c7c7e6c0e55e |
| ui-target | full |
| theme-color | #1e2327 |
| color-scheme | light dark |
| Skip to content | https://github.com/github/codeql/pull/4388#start-of-content |
|
| https://github.com/ |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4388 |
| GitHub CopilotWrite better code with AI | https://github.com/features/copilot |
| GitHub Copilot appDirect agents from issue to merge | https://github.com/features/ai/github-app |
| MCP RegistryNewIntegrate external tools | https://github.com/mcp |
| ActionsAutomate any workflow | https://github.com/features/actions |
| CodespacesInstant dev environments | https://github.com/features/codespaces |
| IssuesPlan and track work | https://github.com/features/issues |
| Code ReviewManage code changes | https://github.com/features/code-review |
| GitHub Advanced SecurityFind and fix vulnerabilities | https://github.com/security/advanced-security |
| Code securitySecure your code as you build | https://github.com/security/advanced-security/code-security |
| Secret protectionStop leaks before they start | https://github.com/security/advanced-security/secret-protection |
| Why GitHub | https://github.com/why-github |
| Documentation | https://docs.github.com |
| Blog | https://github.blog |
| Changelog | https://github.blog/changelog |
| Marketplace | https://github.com/marketplace |
| View all features | https://github.com/features |
| Enterprises | https://github.com/enterprise |
| Small and medium teams | https://github.com/team |
| Startups | https://github.com/enterprise/startups |
| Nonprofits | https://github.com/solutions/industry/nonprofits |
| App Modernization | https://github.com/solutions/use-case/app-modernization |
| DevSecOps | https://github.com/solutions/use-case/devsecops |
| DevOps | https://github.com/solutions/use-case/devops |
| CI/CD | https://github.com/solutions/use-case/ci-cd |
| View all use cases | https://github.com/solutions/use-case |
| Healthcare | https://github.com/solutions/industry/healthcare |
| Financial services | https://github.com/solutions/industry/financial-services |
| Manufacturing | https://github.com/solutions/industry/manufacturing |
| Government | https://github.com/solutions/industry/government |
| View all industries | https://github.com/solutions/industry |
| View all solutions | https://github.com/solutions |
| AI | https://github.com/resources/articles?topic=ai |
| Software Development | https://github.com/resources/articles?topic=software-development |
| DevOps | https://github.com/resources/articles?topic=devops |
| Security | https://github.com/resources/articles?topic=security |
| View all topics | https://github.com/resources/articles |
| Customer stories | https://github.com/customer-stories |
| Events & webinars | https://github.com/resources/events |
| Ebooks & reports | https://github.com/resources/whitepapers |
| Business insights | https://github.com/solutions/executive-insights |
| GitHub Skills | https://skills.github.com |
| Documentation | https://docs.github.com |
| Customer support | https://support.github.com |
| Community forum | https://github.com/orgs/community/discussions |
| Trust center | https://github.com/trust-center |
| Partners | https://github.com/partners |
| View all resources | https://github.com/resources |
| GitHub SponsorsFund open source developers | https://github.com/sponsors |
| Security Lab | https://securitylab.github.com |
| Maintainer Community | https://maintainers.github.com |
| Accelerator | https://github.com/accelerator |
| GitHub Stars | https://stars.github.com |
| Archive Program | https://archiveprogram.github.com |
| Topics | https://github.com/topics |
| Trending | https://github.com/trending |
| Collections | https://github.com/collections |
| Enterprise platformAI-powered developer platform | https://github.com/enterprise |
| GitHub Advanced SecurityEnterprise-grade security features | https://github.com/security/advanced-security |
| Copilot for BusinessEnterprise-grade AI features | https://github.com/features/copilot/copilot-business |
| Premium SupportEnterprise-grade 24/7 support | https://github.com/premium-support |
| Pricing | https://github.com/pricing |
| Search syntax tips | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
| documentation | https://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax |
|
Sign in
| https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4388 |
|
Sign up
| https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql |
| Reload | https://github.com/github/codeql/pull/4388 |
| Reload | https://github.com/github/codeql/pull/4388 |
| Reload | https://github.com/github/codeql/pull/4388 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
|
github
| https://github.com/github |
| codeql | https://github.com/github/codeql |
|
Notifications
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Fork
2k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Star
9.8k
| https://github.com/login?return_to=%2Fgithub%2Fcodeql |
|
Code
| https://github.com/github/codeql |
|
Issues
987
| https://github.com/github/codeql/issues |
|
Pull requests
424
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
0
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
|
Code
| https://github.com/github/codeql |
|
Issues
| https://github.com/github/codeql/issues |
|
Pull requests
| https://github.com/github/codeql/pulls |
|
Discussions
| https://github.com/github/codeql/discussions |
|
Actions
| https://github.com/github/codeql/actions |
|
Projects
| https://github.com/github/codeql/projects |
|
Models
| https://github.com/github/codeql/models |
|
Security and quality
| https://github.com/github/codeql/security |
|
Insights
| https://github.com/github/codeql/pulse |
| smowton | https://github.com/smowton |
| github:main | https://github.com/github/codeql/tree/main |
| JLLeitschuh:feat/JLL/java/CWE-200_temp_directory_local_information_disclosure | https://github.com/JLLeitschuh/ql/tree/feat/JLL/java/CWE-200_temp_directory_local_information_disclosure |
| Conversation | https://github.com/github/codeql/pull/4388 |
| Commits39 (39) | https://github.com/github/codeql/pull/4388/commits |
| Checks | https://github.com/github/codeql/pull/4388/checks |
| Files changed | https://github.com/github/codeql/pull/4388/files |
| Java: CWE-200: Temp directory local information disclosure vulnerability | https://github.com/github/codeql/pull/4388#top |
| smowton | https://github.com/smowton |
| github:main | https://github.com/github/codeql/tree/main |
| JLLeitschuh:feat/JLL/java/CWE-200_temp_directory_local_information_disclosure | https://github.com/JLLeitschuh/ql/tree/feat/JLL/java/CWE-200_temp_directory_local_information_disclosure |
|
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Oct 2, 2020 | https://github.com/github/codeql/pull/4388#issue-713344484 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/apps/github-actions |
| github-actions | https://github.com/apps/github-actions |
|
Java
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava |
| Oct 2, 2020 | https://github.com/github/codeql/pull/4388#event-3832356931 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
|
Oct 2, 2020
| https://github.com/github/codeql/pull/4388#ref-issue-696211338 |
|
CVE-2020-8908: Files::createTempDir local information disclosure vulnerability
google/guava#4011
| https://github.com/google/guava/issues/4011 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| force-pushed | https://github.com/github/codeql/compare/7cdf99719acf760df7768c842b5789be27b576d4..d53d77c7e12ae239b0ccf8fb737a1ec8b74c7789 |
| 7cdf997 | https://github.com/github/codeql/commit/7cdf99719acf760df7768c842b5789be27b576d4 |
| d53d77c | https://github.com/github/codeql/commit/d53d77c7e12ae239b0ccf8fb737a1ec8b74c7789 |
|
Compare
| https://github.com/github/codeql/compare/7cdf99719acf760df7768c842b5789be27b576d4..d53d77c7e12ae239b0ccf8fb737a1ec8b74c7789 |
| October 2, 2020 18:53 | https://github.com/github/codeql/pull/4388#event-3835241608 |
| https://github.com/aibaars |
| aibaars | https://github.com/aibaars |
|
Oct 8, 2020
| https://github.com/github/codeql/pull/4388#pullrequestreview-504645108 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure1.ql | https://github.com/github/codeql/pull/4388/files#diff-93f4990da4440c50e19160a65d0c223311870f59596111378fbbb5b89a5b8573 |
| aibaars | https://github.com/aibaars |
| Oct 8, 2020 | https://github.com/github/codeql/pull/4388#discussion_r501616619 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Jan 23, 2021 | https://github.com/github/codeql/pull/4388#discussion_r563214173 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/aibaars |
| aibaars | https://github.com/aibaars |
|
Oct 8, 2020
| https://github.com/github/codeql/pull/4388#pullrequestreview-504646200 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure2.ql | https://github.com/github/codeql/pull/4388/files#diff-a41822938a2463e3fbb6b8952b1f23fdb08c1bcf97e1d3eaf5956120c63dca6c |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/aibaars |
| aibaars | https://github.com/aibaars |
| Oct 8, 2020 | https://github.com/github/codeql/pull/4388#issuecomment-705484805 |
| CVE-2020-1945 | https://github.com/advisories/GHSA-4p6w-m9wc-c9c9 |
| apache/ant@9c1f4d9 | https://github.com/apache/ant/commit/9c1f4d905da59bf446570ac28df5b68a37281f35 |
| apache/ant@a8645a1 | https://github.com/apache/ant/commit/a8645a151bc706259fb1789ef587d05482d98612 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
|
Oct 12, 2020
| https://github.com/github/codeql/pull/4388#ref-pullrequest-718682617 |
|
Java: Track taint through java.io.File constructor and #toURI; URI#toURL
#4457
| https://github.com/github/codeql/pull/4457 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Oct 12, 2020 | https://github.com/github/codeql/pull/4388#issuecomment-707184242 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| GHSA-269g-pwp5-87pp | https://github.com/junit-team/junit4/security/advisories/GHSA-269g-pwp5-87pp |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/melloware |
| melloware | https://github.com/melloware |
| Oct 12, 2020 | https://github.com/github/codeql/pull/4388#issuecomment-707188044 |
| @JLLeitschuh | https://github.com/JLLeitschuh |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Oct 12, 2020 | https://github.com/github/codeql/pull/4388#issuecomment-707217499 |
| @melloware | https://github.com/melloware |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/melloware |
| melloware | https://github.com/melloware |
| Oct 12, 2020 | https://github.com/github/codeql/pull/4388#issuecomment-707218360 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Oct 12, 2020 | https://github.com/github/codeql/pull/4388#issuecomment-707220086 |
| google/guava#4011 | https://github.com/google/guava/issues/4011 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
|
Oct 14, 2020
| https://github.com/github/codeql/pull/4388#pullrequestreview-507961258 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure2.ql | https://github.com/github/codeql/pull/4388/files#diff-a41822938a2463e3fbb6b8952b1f23fdb08c1bcf97e1d3eaf5956120c63dca6c |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/aibaars |
| aibaars | https://github.com/aibaars |
|
Oct 14, 2020
| https://github.com/github/codeql/pull/4388#pullrequestreview-508108337 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure2.ql | https://github.com/github/codeql/pull/4388/files#diff-a41822938a2463e3fbb6b8952b1f23fdb08c1bcf97e1d3eaf5956120c63dca6c |
| aibaars | https://github.com/aibaars |
| Oct 14, 2020 | https://github.com/github/codeql/pull/4388#discussion_r504493444 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Jan 23, 2021 | https://github.com/github/codeql/pull/4388#discussion_r563185408 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Jan 23, 2021 | https://github.com/github/codeql/pull/4388#discussion_r563185792 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure2.ql | https://github.com/github/codeql/pull/4388/files#diff-a41822938a2463e3fbb6b8952b1f23fdb08c1bcf97e1d3eaf5956120c63dca6c |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Nov 10, 2020 | https://github.com/github/codeql/pull/4388#issuecomment-724933228 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| force-pushed | https://github.com/github/codeql/compare/1b216f869f018e1972c2187448429d0e063bf2da..b1aeb992d716d2cf91ad68e4c2619e2d10a92efa |
| 1b216f8 | https://github.com/github/codeql/commit/1b216f869f018e1972c2187448429d0e063bf2da |
| b1aeb99 | https://github.com/github/codeql/commit/b1aeb992d716d2cf91ad68e4c2619e2d10a92efa |
|
Compare
| https://github.com/github/codeql/compare/1b216f869f018e1972c2187448429d0e063bf2da..b1aeb992d716d2cf91ad68e4c2619e2d10a92efa |
| December 8, 2020 20:42 | https://github.com/github/codeql/pull/4388#event-4086669168 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
|
Jan 2, 2021
| https://github.com/github/codeql/pull/4388#ref-pullrequest-777383072 |
|
Add MethodAccessSystemGetProperty predicate
#4898
| https://github.com/github/codeql/pull/4898 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
| Jan 4, 2021 | https://github.com/github/codeql/pull/4388#event-4165275545 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| force-pushed | https://github.com/github/codeql/compare/e53cfd86ccc31b1fe7fe9eab0e187a2a5e6652e4..6deb3d81cf48f7372d51428aa4888ca5e87ee37c |
| e53cfd8 | https://github.com/github/codeql/commit/e53cfd86ccc31b1fe7fe9eab0e187a2a5e6652e4 |
| 6deb3d8 | https://github.com/github/codeql/commit/6deb3d81cf48f7372d51428aa4888ca5e87ee37c |
|
Compare
| https://github.com/github/codeql/compare/e53cfd86ccc31b1fe7fe9eab0e187a2a5e6652e4..6deb3d81cf48f7372d51428aa4888ca5e87ee37c |
| January 23, 2021 17:49 | https://github.com/github/codeql/pull/4388#event-4241764200 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Jan 23, 2021 | https://github.com/github/codeql/pull/4388#issuecomment-766165200 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://lgtm.com/query/3077692672321886364/ | https://lgtm.com/query/3077692672321886364/ |
| https://lgtm.com/query/5276757681085693414/ | https://lgtm.com/query/5276757681085693414/ |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/apps/github-actions |
| github-actions | https://github.com/apps/github-actions |
|
documentation
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation |
| Jan 23, 2021 | https://github.com/github/codeql/pull/4388#event-4242002538 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Jan 23, 2021 | https://github.com/github/codeql/pull/4388#issuecomment-766233483 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/aibaars |
| aibaars | https://github.com/aibaars |
| Jan 25, 2021 | https://github.com/github/codeql/pull/4388#issuecomment-766644825 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Jan 25, 2021 | https://github.com/github/codeql/pull/4388#issuecomment-766763989 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| January 25, 2021 14:56 | https://github.com/github/codeql/pull/4388#event-4246021784 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| felicitymay | https://github.com/felicitymay |
| code owners | https://github.com/github/codeql/blob/36ad6b343260b6e6f9b04af0bdd02341e4b096ef/CODEOWNERS#L3 |
| January 25, 2021 14:56 | https://github.com/github/codeql/pull/4388#event-4246021811 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
| aibaars | https://github.com/aibaars |
| smowton | https://github.com/smowton |
| Jan 27, 2021 | https://github.com/github/codeql/pull/4388#event-4255250907 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
| Jan 27, 2021 | https://github.com/github/codeql/pull/4388#issuecomment-768207472 |
| @aibaars | https://github.com/aibaars |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
|
| https://github.com/smowton |
| Apply suggestions from code review | https://github.com/github/codeql/pull/4388/commits/79654592d92a5d9532b60affb3f41e1df0485383 |
| 7965459 | https://github.com/github/codeql/pull/4388/commits/79654592d92a5d9532b60affb3f41e1df0485383 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
|
Feb 8, 2022
| https://github.com/github/codeql/pull/4388#pullrequestreview-875814681 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files/79654592d92a5d9532b60affb3f41e1df0485383 |
| https://github.com/aschackmull |
| aschackmull | https://github.com/aschackmull |
|
Feb 8, 2022
| https://github.com/github/codeql/pull/4388#pullrequestreview-875823663 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files/79654592d92a5d9532b60affb3f41e1df0485383 |
|
| https://github.com/smowton |
| Fix test requirements, formatting | https://github.com/github/codeql/pull/4388/commits/a6596ea7ce6539809f5b72526abbcbb4b33bbc7e |
| a6596ea | https://github.com/github/codeql/pull/4388/commits/a6596ea7ce6539809f5b72526abbcbb4b33bbc7e |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
| aschackmull | https://github.com/aschackmull |
| a6596ea | https://github.com/github/codeql/commit/a6596ea7ce6539809f5b72526abbcbb4b33bbc7e |
| February 8, 2022 12:02 | https://github.com/github/codeql/pull/4388#event-6026252688 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Feb 8, 2022 | https://github.com/github/codeql/pull/4388#issuecomment-1032924529 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://lgtm.com/query/8810980313419129810/ | https://lgtm.com/query/8810980313419129810/ |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
|
| https://github.com/JLLeitschuh |
| Consider calls to setReadable(false, false) then setReadable(true, tr… | https://github.com/github/codeql/pull/4388/commits/7f466401762f8ec2884246fe7f5913ff29a9030a |
| 7f46640 | https://github.com/github/codeql/pull/4388/commits/7f466401762f8ec2884246fe7f5913ff29a9030a |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
| Feb 9, 2022 | https://github.com/github/codeql/pull/4388#issuecomment-1033665138 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
|
Feb 9, 2022
| https://github.com/github/codeql/pull/4388#pullrequestreview-877327401 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files/7f466401762f8ec2884246fe7f5913ff29a9030a |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.ql | https://github.com/github/codeql/pull/4388/files/7f466401762f8ec2884246fe7f5913ff29a9030a#diff-6d29e19010e83d1c9a9186af28fb2c8743a17540f12f15e006c4d7ee8e8efeb2 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Feb 9, 2022 | https://github.com/github/codeql/pull/4388#issuecomment-1033859458 |
| #4388 (comment) | https://github.com/github/codeql/pull/4388#issuecomment-1032924529 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| JLLeitschuh | https://github.com/JLLeitschuh |
| February 9, 2022 10:07 | https://github.com/github/codeql/pull/4388#commits-pushed-787e3da |
|
| https://github.com/JLLeitschuh |
|
| https://github.com/smowton |
| Update java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclo… | https://github.com/github/codeql/pull/4388/commits/787e3dac31c4d6fcf76354192328e3dee3a04148 |
| 787e3da | https://github.com/github/codeql/pull/4388/commits/787e3dac31c4d6fcf76354192328e3dee3a04148 |
|
| https://github.com/JLLeitschuh |
| Fix FP from mkdirs call on exact temp directory | https://github.com/github/codeql/pull/4388/commits/49a73673b64dd02e1581be5cbf13d5fbfc3ca330 |
| 49a7367 | https://github.com/github/codeql/pull/4388/commits/49a73673b64dd02e1581be5cbf13d5fbfc3ca330 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Feb 9, 2022 | https://github.com/github/codeql/pull/4388#issuecomment-1033924665 |
| 49a7367 | https://github.com/github/codeql/commit/49a73673b64dd02e1581be5cbf13d5fbfc3ca330 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| smowton | https://github.com/smowton |
| February 9, 2022 17:34 | https://github.com/github/codeql/pull/4388#event-6036185107 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
|
Feb 9, 2022
| https://github.com/github/codeql/pull/4388#pullrequestreview-877826142 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files/49a73673b64dd02e1581be5cbf13d5fbfc3ca330 |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.ql | https://github.com/github/codeql/pull/4388/files/49a73673b64dd02e1581be5cbf13d5fbfc3ca330#diff-6d29e19010e83d1c9a9186af28fb2c8743a17540f12f15e006c4d7ee8e8efeb2 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| java/ql/src/Security/CWE/CWE-200/TempDirUtils.qll | https://github.com/github/codeql/pull/4388/files/49a73673b64dd02e1581be5cbf13d5fbfc3ca330#diff-0188c0fb3eef6f8bb0eccd9371e1a126aaaec4d8d851bde07f576559a5f5f7ca |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
|
| https://github.com/JLLeitschuh |
|
| https://github.com/smowton |
| Apply suggestions from code review | https://github.com/github/codeql/pull/4388/commits/bafcce17d43064db7995948c03c24ad4a981ff94 |
| bafcce1 | https://github.com/github/codeql/pull/4388/commits/bafcce17d43064db7995948c03c24ad4a981ff94 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Feb 10, 2022 | https://github.com/github/codeql/pull/4388#issuecomment-1034928890 |
| @smowton | https://github.com/smowton |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
| Feb 10, 2022 | https://github.com/github/codeql/pull/4388#issuecomment-1034947231 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/felicitymay |
| felicitymay | https://github.com/felicitymay |
|
ready-for-doc-review
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Aready-for-doc-review |
| Feb 10, 2022 | https://github.com/github/codeql/pull/4388#event-6043277094 |
|
| https://github.com/JLLeitschuh |
| Fix test failure for TempDirLocalInformationDisclosure | https://github.com/github/codeql/pull/4388/commits/eee521e6cee2c649ad9f02d12e88c828b75ed901 |
| eee521e | https://github.com/github/codeql/pull/4388/commits/eee521e6cee2c649ad9f02d12e88c828b75ed901 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Feb 10, 2022 | https://github.com/github/codeql/pull/4388#issuecomment-1035070759 |
| @smowton | https://github.com/smowton |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.com/felicitymay |
| felicitymay | https://github.com/felicitymay |
|
Feb 10, 2022
| https://github.com/github/codeql/pull/4388#pullrequestreview-879086743 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files/eee521e6cee2c649ad9f02d12e88c828b75ed901 |
| felicitymay | https://github.com/felicitymay |
| https://github.com/github/codeql/pull/4388#pullrequestreview-879086743 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.qhelp | https://github.com/github/codeql/pull/4388/files/eee521e6cee2c649ad9f02d12e88c828b75ed901#diff-5eacc196c73272631012b8dfb28657bce0863735109f72ca441a5fd5c61e228b |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.ql | https://github.com/github/codeql/pull/4388/files/eee521e6cee2c649ad9f02d12e88c828b75ed901#diff-6d29e19010e83d1c9a9186af28fb2c8743a17540f12f15e006c4d7ee8e8efeb2 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.ql | https://github.com/github/codeql/pull/4388/files/eee521e6cee2c649ad9f02d12e88c828b75ed901#diff-6d29e19010e83d1c9a9186af28fb2c8743a17540f12f15e006c4d7ee8e8efeb2 |
| felicitymay | https://github.com/felicitymay |
| Feb 10, 2022 | https://github.com/github/codeql/pull/4388#discussion_r803851874 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| java/ql/src/change-notes/2022-02-04-local-temp-file-or-directory-information-disclosure.md | https://github.com/github/codeql/pull/4388/files/eee521e6cee2c649ad9f02d12e88c828b75ed901#diff-4cbf353384aa3e747233b3c4e87cdf10b3c5151752f96eb618c3d2e11aad3a71 |
| felicitymay | https://github.com/felicitymay |
| Feb 10, 2022 | https://github.com/github/codeql/pull/4388#discussion_r803853066 |
| Learn more | https://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.qhelp | https://github.com/github/codeql/pull/4388/files/eee521e6cee2c649ad9f02d12e88c828b75ed901#diff-5eacc196c73272631012b8dfb28657bce0863735109f72ca441a5fd5c61e228b |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| JLLeitschuh | https://github.com/JLLeitschuh |
| February 14, 2022 11:00 | https://github.com/github/codeql/pull/4388#commits-pushed-7dee22a |
|
| https://github.com/JLLeitschuh |
| Fix implicit 'this' usage | https://github.com/github/codeql/pull/4388/commits/7dee22a1302ae997d8d2ed62bb73c51ce4f1fb09 |
| 7dee22a | https://github.com/github/codeql/pull/4388/commits/7dee22a1302ae997d8d2ed62bb73c51ce4f1fb09 |
|
| https://github.com/JLLeitschuh |
|
| https://github.com/felicitymay |
| Apply suggestions from code review | https://github.com/github/codeql/pull/4388/commits/bb580ddbab7da0a1bca46d4a2bbb1e3a6c6b79f6 |
| bb580dd | https://github.com/github/codeql/pull/4388/commits/bb580ddbab7da0a1bca46d4a2bbb1e3a6c6b79f6 |
|
| https://github.com/JLLeitschuh |
|
| https://github.com/felicitymay |
| Apply suggestions from code review | https://github.com/github/codeql/pull/4388/commits/76964d58f23cef877e27e0aab1c3792cd33b0354 |
| 76964d5 | https://github.com/github/codeql/pull/4388/commits/76964d58f23cef877e27e0aab1c3792cd33b0354 |
|
| https://github.com/JLLeitschuh |
| Review feedback and improve temp dir vulnerable/safe code sugestion | https://github.com/github/codeql/pull/4388/commits/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec |
| 2048aed | https://github.com/github/codeql/pull/4388/commits/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
|
Feb 14, 2022
| https://github.com/github/codeql/pull/4388#pullrequestreview-882062634 |
|
View reviewed changes
| https://github.com/github/codeql/pull/4388/files/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec |
| https://github.com/smowton |
| smowton | https://github.com/smowton |
| 0bf6c83 | https://github.com/github/codeql/commit/0bf6c83ef2356ceabfbf945a136c4f75eeeeda4f |
| Feb 14, 2022 | https://github.com/github/codeql/pull/4388#event-6069468928 |
| https://github.com/JLLeitschuh |
| JLLeitschuh | https://github.com/JLLeitschuh |
| Feb 14, 2022 | https://github.com/github/codeql/pull/4388#issuecomment-1039609540 |
| #8032 | https://github.com/github/codeql/pull/8032 |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
| https://github.co/hiddenchars |
| https://github.com/github/codeql/pull/{{ revealButtonHref }} |
| Sign up for free | https://github.com/join?source=comment-repo |
| Sign in to comment | https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4388 |
|
| https://github.com/smowton |
|
smowton
| https://github.com/smowton |
|
| https://github.com/github/codeql/pull/4388/files/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec |
|
| https://github.com/aschackmull |
|
aschackmull
| https://github.com/aschackmull |
|
| https://github.com/github/codeql/pull/4388/files/79654592d92a5d9532b60affb3f41e1df0485383 |
|
| https://github.com/aibaars |
|
aibaars
| https://github.com/aibaars |
|
| https://github.com/felicitymay |
|
felicitymay
| https://github.com/felicitymay |
|
| https://github.com/github/codeql/pull/4388/files/eee521e6cee2c649ad9f02d12e88c828b75ed901 |
|
| https://github.com/aschackmull |
|
aschackmull
| https://github.com/aschackmull |
|
documentation
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation |
|
Java
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava |
|
ready-for-doc-review
| https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Aready-for-doc-review |
| Please reload this page | https://github.com/github/codeql/pull/4388 |
|
| https://github.com/JLLeitschuh |
|
| https://github.com/aibaars |
|
| https://github.com/melloware |
|
| https://github.com/smowton |
|
| https://github.com/aschackmull |
|
| https://github.com/intrigus-lgtm |
|
| https://github.com/felicitymay |
|
| https://github.com/docubot |
|
| https://github.com |
| Terms | https://docs.github.com/site-policy/github-terms/github-terms-of-service |
| Privacy | https://docs.github.com/site-policy/privacy-policies/github-privacy-statement |
| Security | https://github.com/security |
| Status | https://www.githubstatus.com/ |
| Community | https://github.community/ |
| Docs | https://docs.github.com/ |
| Contact | https://support.github.com?tags=dotcom-footer |