René's URL Explorer Experiment


Title: Java: CWE-552 Query to detect unsafe request dispatcher usage by luchua-bc · Pull Request #7286 · github/codeql · GitHub

Open Graph Title: Java: CWE-552 Query to detect unsafe request dispatcher usage by luchua-bc · Pull Request #7286 · github/codeql

X Title: Java: CWE-552 Query to detect unsafe request dispatcher usage by luchua-bc · Pull Request #7286 · github/codeql

Description: CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security - Java: CWE-552 Query to detect unsafe request dispatcher usage by luchua-bc · Pull Request #7286 · github/codeql

Open Graph Description: Directly incorporating user input into HTTP requests dispatched from the Java EE RequestDispatcher without proper validation of the input can allow any web application resource such as configuratio...

X Description: Directly incorporating user input into HTTP requests dispatched from the Java EE RequestDispatcher without proper validation of the input can allow any web application resource such as configuratio...

Opengraph URL: https://github.com/github/codeql/pull/7286

X: @github

direct link

Domain: github.com

route-pattern/_view_fragments/voltron/pull_requests/show/:user_id/:repository/:id/pull_request_layout(.:format)
route-controllervoltron_pull_requests_fragments
route-actionpull_request_layout
fetch-noncev2:32f8fd56-df5f-2f5b-698e-6e81a2661b80
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idB16C:DE39B:4AF6F:62967:6A4C69C0
html-safe-nonce4c68c5403ae3b540ff8e86bc27212541a3ef4be0e595630e9316c66cf413ebf9
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJCMTZDOkRFMzlCOjRBRjZGOjYyOTY3OjZBNEM2OUMwIiwidmlzaXRvcl9pZCI6IjQ3MTM3NTYxNzE0MDMyOTEwNzMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmaceca700333fd5fc6cd3af00a0f736db95ea15f0061e2fc70fc42e40ba999c1393
hovercard-subject-tagpull_request:793316929
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///voltron/pull_requests_fragments/pull_request_layout
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/_view_fragments/voltron/pull_requests/show/github/codeql/7286/pull_request_layout
twitter:imagehttps://opengraph.githubassets.com/71fbe9549f86a62167a10c8258056cbbe745ee987640fdaaad3256e38622fc34/github/codeql/pull/7286
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/71fbe9549f86a62167a10c8258056cbbe745ee987640fdaaad3256e38622fc34/github/codeql/pull/7286
og:image:altDirectly incorporating user input into HTTP requests dispatched from the Java EE RequestDispatcher without proper validation of the input can allow any web application resource such as configuratio...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameluchua-bc
hostnamegithub.com
expected-hostnamegithub.com
None3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c
turbo-cache-controlno-cache
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
release14099438da5379150f15a2892474c7c7e6c0e55e
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/7286#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F7286
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F7286
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fvoltron%2Fpull_requests_fragments%2Fpull_request_layout&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/7286
Reloadhttps://github.com/github/codeql/pull/7286
Reloadhttps://github.com/github/codeql/pull/7286
Please reload this pagehttps://github.com/github/codeql/pull/7286
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 424 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
smowtonhttps://github.com/smowton
github:mainhttps://github.com/github/codeql/tree/main
luchua-bc:java/unsafe-url-forward-dispatchhttps://github.com/luchua-bc/ql/tree/java/unsafe-url-forward-dispatch
Conversationhttps://github.com/github/codeql/pull/7286
Commits17 (17)https://github.com/github/codeql/pull/7286/commits
Checkshttps://github.com/github/codeql/pull/7286/checks
Files changedhttps://github.com/github/codeql/pull/7286/files
Java: CWE-552 Query to detect unsafe request dispatcher usagehttps://github.com/github/codeql/pull/7286#top
smowtonhttps://github.com/smowton
github:mainhttps://github.com/github/codeql/tree/main
luchua-bc:java/unsafe-url-forward-dispatchhttps://github.com/luchua-bc/ql/tree/java/unsafe-url-forward-dispatch
https://github.com/luchua-bc
luchua-bchttps://github.com/luchua-bc
Dec 2, 2021https://github.com/github/codeql/pull/7286#issue-1069109431
Java API dochttps://jakarta.ee/specifications/webprofile/9/apidocs/jakarta/servlet/servletrequest#getRequestDispatcher-java.lang.String-
Please reload this pagehttps://github.com/github/codeql/pull/7286
https://github.com/luchua-bc
Query to detect unsafe request dispatcher usagehttps://github.com/github/codeql/pull/7286/commits/8bcffc2886f3c17d6083287d4177f053683e36db
8bcffc2https://github.com/github/codeql/pull/7286/commits/8bcffc2886f3c17d6083287d4177f053683e36db
https://github.com/luchua-bc
luchua-bchttps://github.com/luchua-bc
code ownerhttps://github.com/github/codeql/blob/9f8326a3fad914b2406edc0a679a30431f22610a/CODEOWNERS#L3
December 2, 2021 04:12https://github.com/github/codeql/pull/7286#event-5703211575
https://github.com/apps/github-actions
github-actionshttps://github.com/apps/github-actions
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Java https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava
Dec 2, 2021https://github.com/github/codeql/pull/7286#event-5703212182
[Java] CWE-552: Query to detect unsafe request dispatcher usage github/securitylab#495 https://github.com/github/securitylab/issues/495
[Java] CWE-552: Query to detect configuration file/source code exposure from unsafe request dispatcher github/securitylab#398 https://github.com/github/securitylab/issues/398
https://github.com/luchua-bc
Add sanitizer for virtual method callshttps://github.com/github/codeql/pull/7286/commits/29ce0e9ef19a46bf756472b8a3956a19cda443be
29ce0e9https://github.com/github/codeql/pull/7286/commits/29ce0e9ef19a46bf756472b8a3956a19cda443be
https://github.com/perovovao
perovovaohttps://github.com/perovovao
Dec 15, 2021 https://github.com/github/codeql/pull/7286#ref-issue-1081622024
## Query shieldfy/API-Security-Checklist#155 https://github.com/shieldfy/API-Security-Checklist/issues/155
https://github.com/smowton
smowtonhttps://github.com/smowton
atorralbahttps://github.com/atorralba
Jan 10, 2022https://github.com/github/codeql/pull/7286#event-5865188476
https://github.com/atorralba
atorralbahttps://github.com/atorralba
Jan 11, 2022 https://github.com/github/codeql/pull/7286#pullrequestreview-848949625
View reviewed changes https://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be
atorralbahttps://github.com/atorralba
https://github.com/github/codeql/pull/7286#pullrequestreview-848949625
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
@luchua-bchttps://github.com/luchua-bc
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qlhttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-3caec98bb63246165cd000f9dbbac654f2cd460af72d62cc2b6c0001f62eaf5e
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qlhttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-3caec98bb63246165cd000f9dbbac654f2cd460af72d62cc2b6c0001f62eaf5e
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qlhttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-3caec98bb63246165cd000f9dbbac654f2cd460af72d62cc2b6c0001f62eaf5e
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qlhttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-3caec98bb63246165cd000f9dbbac654f2cd460af72d62cc2b6c0001f62eaf5e
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qlhttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-3caec98bb63246165cd000f9dbbac654f2cd460af72d62cc2b6c0001f62eaf5e
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qllhttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-171b613f67732add15b5c1b18e1c983ed4522338e7debe776016bcd4f13ffcba
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qhelphttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-3e5cfcc60b5abc0126d377789c00f2606f31d2cb303c412acca9c927e0a0d722
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qlhttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-3caec98bb63246165cd000f9dbbac654f2cd460af72d62cc2b6c0001f62eaf5e
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qlhttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-3caec98bb63246165cd000f9dbbac654f2cd460af72d62cc2b6c0001f62eaf5e
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qlhttps://github.com/github/codeql/pull/7286/files/29ce0e9ef19a46bf756472b8a3956a19cda443be#diff-3caec98bb63246165cd000f9dbbac654f2cd460af72d62cc2b6c0001f62eaf5e
Please reload this pagehttps://github.com/github/codeql/pull/7286
luchua-bchttps://github.com/luchua-bc
January 12, 2022 02:33https://github.com/github/codeql/pull/7286#commits-pushed-263dbd3
https://github.com/luchua-bc
Optimize the queryhttps://github.com/github/codeql/pull/7286/commits/263dbd33f6b908940e1b6d205652ccde050a35d6
263dbd3https://github.com/github/codeql/pull/7286/commits/263dbd33f6b908940e1b6d205652ccde050a35d6
https://github.com/atorralba
Refactor NullOrEmptyCheckGuardhttps://github.com/github/codeql/pull/7286/commits/cd9a485c47a9ae8c4145fffaaba8e4bc435bdfdf
cd9a485https://github.com/github/codeql/pull/7286/commits/cd9a485c47a9ae8c4145fffaaba8e4bc435bdfdf
https://github.com/atorralba
Refactor PathMatchGuardhttps://github.com/github/codeql/pull/7286/commits/81feaaec0270c7b9635d539eaa7f3877d34e9340
81feaaehttps://github.com/github/codeql/pull/7286/commits/81feaaec0270c7b9635d539eaa7f3877d34e9340
https://github.com/atorralba
Move code to qll filehttps://github.com/github/codeql/pull/7286/commits/b6886b8e4385f5857f62d27395d85d1ee2fe4227
b6886b8https://github.com/github/codeql/pull/7286/commits/b6886b8e4385f5857f62d27395d85d1ee2fe4227
https://github.com/atorralba
atorralbahttps://github.com/atorralba
Jan 13, 2022https://github.com/github/codeql/pull/7286#issuecomment-1012302383
@luchua-bchttps://github.com/luchua-bc
cd9a485https://github.com/github/codeql/commit/cd9a485c47a9ae8c4145fffaaba8e4bc435bdfdf
81feaaehttps://github.com/github/codeql/commit/81feaaec0270c7b9635d539eaa7f3877d34e9340
b6886b8https://github.com/github/codeql/commit/b6886b8e4385f5857f62d27395d85d1ee2fe4227
Please reload this pagehttps://github.com/github/codeql/pull/7286
https://github.com/luchua-bc
luchua-bchttps://github.com/luchua-bc
Jan 13, 2022https://github.com/github/codeql/pull/7286#issuecomment-1012580032
Please reload this pagehttps://github.com/github/codeql/pull/7286
@atorralbahttps://github.com/atorralba
Please reload this pagehttps://github.com/github/codeql/pull/7286
https://github.com/atorralba
atorralbahttps://github.com/atorralba
Jan 14, 2022 https://github.com/github/codeql/pull/7286#pullrequestreview-852679721
View reviewed changes https://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227
java/ql/lib/semmle/code/java/frameworks/Servlets.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-33368733f046f32b4d0f28bebe9c0451ca1ce54376de355f82992b8b82f63083
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/lib/semmle/code/java/frameworks/Servlets.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-33368733f046f32b4d0f28bebe9c0451ca1ce54376de355f82992b8b82f63083
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/lib/semmle/code/java/frameworks/Servlets.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-33368733f046f32b4d0f28bebe9c0451ca1ce54376de355f82992b8b82f63083
Please reload this pagehttps://github.com/github/codeql/pull/7286
https://github.com/smowton
smowtonhttps://github.com/smowton
Jan 14, 2022 https://github.com/github/codeql/pull/7286#pullrequestreview-852795703
View reviewed changes https://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeServletRequestDispatch.javahttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-805730cadcfe1d72986a16492864bb2a853e59d650ac947b163182cc8d6ecec3
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-171b613f67732add15b5c1b18e1c983ed4522338e7debe776016bcd4f13ffcba
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-171b613f67732add15b5c1b18e1c983ed4522338e7debe776016bcd4f13ffcba
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-171b613f67732add15b5c1b18e1c983ed4522338e7debe776016bcd4f13ffcba
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-171b613f67732add15b5c1b18e1c983ed4522338e7debe776016bcd4f13ffcba
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-171b613f67732add15b5c1b18e1c983ed4522338e7debe776016bcd4f13ffcba
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-171b613f67732add15b5c1b18e1c983ed4522338e7debe776016bcd4f13ffcba
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeServletRequestDispatch.javahttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-805730cadcfe1d72986a16492864bb2a853e59d650ac947b163182cc8d6ecec3
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qhelphttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-3e5cfcc60b5abc0126d377789c00f2606f31d2cb303c412acca9c927e0a0d722
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qllhttps://github.com/github/codeql/pull/7286/files/b6886b8e4385f5857f62d27395d85d1ee2fe4227#diff-171b613f67732add15b5c1b18e1c983ed4522338e7debe776016bcd4f13ffcba
Please reload this pagehttps://github.com/github/codeql/pull/7286
luchua-bchttps://github.com/luchua-bc
January 14, 2022 12:13https://github.com/github/codeql/pull/7286#commits-pushed-877c529
https://github.com/luchua-bc
Remove the deprecated library keywordhttps://github.com/github/codeql/pull/7286/commits/877c52981ff3b333d13cdb802b7f3592e5d753bc
877c529https://github.com/github/codeql/pull/7286/commits/877c52981ff3b333d13cdb802b7f3592e5d753bc
https://github.com/atorralba
https://github.com/smowton
Apply suggestions from code reviewhttps://github.com/github/codeql/pull/7286/commits/136fefbab55fe4ec9f2cec51feeddbf2c37ec9fa
136fefbhttps://github.com/github/codeql/pull/7286/commits/136fefbab55fe4ec9f2cec51feeddbf2c37ec9fa
https://github.com/atorralba
atorralbahttps://github.com/atorralba
Jan 14, 2022https://github.com/github/codeql/pull/7286#issuecomment-1013159033
@smowtonhttps://github.com/smowton
@luchua-bchttps://github.com/luchua-bc
@smowtonhttps://github.com/smowton
Please reload this pagehttps://github.com/github/codeql/pull/7286
https://github.com/atorralba
Use dominance instead of getParenthttps://github.com/github/codeql/pull/7286/commits/fb1287d577d09cfd6710b51c466351e47fd624c4
fb1287dhttps://github.com/github/codeql/pull/7286/commits/fb1287d577d09cfd6710b51c466351e47fd624c4
https://github.com/atorralba
atorralbahttps://github.com/atorralba
force-pushedhttps://github.com/github/codeql/compare/5a1dbd48720375a6b9bbc8f68b645992595bb366..fb1287d577d09cfd6710b51c466351e47fd624c4
5a1dbd4https://github.com/github/codeql/commit/5a1dbd48720375a6b9bbc8f68b645992595bb366
fb1287dhttps://github.com/github/codeql/commit/fb1287d577d09cfd6710b51c466351e47fd624c4
Compare https://github.com/github/codeql/compare/5a1dbd48720375a6b9bbc8f68b645992595bb366..fb1287d577d09cfd6710b51c466351e47fd624c4
January 14, 2022 14:28https://github.com/github/codeql/pull/7286#event-5895153087
atorralbahttps://github.com/atorralba
January 14, 2022 17:14https://github.com/github/codeql/pull/7286#commits-pushed-eb1806c
https://github.com/atorralba
Split PathMatchGuard into three guardshttps://github.com/github/codeql/pull/7286/commits/eb1806c0a92d23dbd87fcc9b62fb11d1c5370711
eb1806chttps://github.com/github/codeql/pull/7286/commits/eb1806c0a92d23dbd87fcc9b62fb11d1c5370711
https://github.com/atorralba
Reorderinghttps://github.com/github/codeql/pull/7286/commits/a2c98baf29941f171128f21e189b18b7604b8b68
a2c98bahttps://github.com/github/codeql/pull/7286/commits/a2c98baf29941f171128f21e189b18b7604b8b68
https://github.com/luchua-bc
Update method nameshttps://github.com/github/codeql/pull/7286/commits/978ef1570a7fcbefdedb5a75a5a484e33f45b323
978ef15https://github.com/github/codeql/pull/7286/commits/978ef1570a7fcbefdedb5a75a5a484e33f45b323
https://github.com/luchua-bc
Update use cases and qldochttps://github.com/github/codeql/pull/7286/commits/4797fce48a3d78adc95223a25a027f5e992cf078
4797fcehttps://github.com/github/codeql/pull/7286/commits/4797fce48a3d78adc95223a25a027f5e992cf078
https://github.com/luchua-bc
luchua-bchttps://github.com/luchua-bc
Jan 16, 2022https://github.com/github/codeql/pull/7286#issuecomment-1013788686
@atorralbahttps://github.com/atorralba
@smowtonhttps://github.com/smowton
Please reload this pagehttps://github.com/github/codeql/pull/7286
https://github.com/smowton
smowtonhttps://github.com/smowton
Jan 18, 2022 https://github.com/github/codeql/pull/7286#pullrequestreview-855372490
View reviewed changes https://github.com/github/codeql/pull/7286/files/4797fce48a3d78adc95223a25a027f5e992cf078
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qhelphttps://github.com/github/codeql/pull/7286/files/4797fce48a3d78adc95223a25a027f5e992cf078#diff-3e5cfcc60b5abc0126d377789c00f2606f31d2cb303c412acca9c927e0a0d722
Please reload this pagehttps://github.com/github/codeql/pull/7286
java/ql/src/experimental/Security/CWE/CWE-552/UnsafeServletRequestDispatch.javahttps://github.com/github/codeql/pull/7286/files/4797fce48a3d78adc95223a25a027f5e992cf078#diff-805730cadcfe1d72986a16492864bb2a853e59d650ac947b163182cc8d6ecec3
Please reload this pagehttps://github.com/github/codeql/pull/7286
https://github.com/luchua-bc
Update recommendation in qldoc and make examples more comprehendiblehttps://github.com/github/codeql/pull/7286/commits/a3d65a8ed0663b044f6c9d9828cc3f60db5395c9
a3d65a8https://github.com/github/codeql/pull/7286/commits/a3d65a8ed0663b044f6c9d9828cc3f60db5395c9
smowtonhttps://github.com/smowton
January 18, 2022 17:08https://github.com/github/codeql/pull/7286#commits-pushed-748008a
https://github.com/smowton
Remove dangling reference to UnsafeRequestPath.javahttps://github.com/github/codeql/pull/7286/commits/748008ad517be80dfff4de9a867b7d9e181a19ae
748008ahttps://github.com/github/codeql/pull/7286/commits/748008ad517be80dfff4de9a867b7d9e181a19ae
https://github.com/smowton
Clean up guard logic:https://github.com/github/codeql/pull/7286/commits/d744cf9053442a1067162ff75bef8028b686f270
d744cf9https://github.com/github/codeql/pull/7286/commits/d744cf9053442a1067162ff75bef8028b686f270
https://github.com/smowton
smowtonhttps://github.com/smowton
Jan 18, 2022 https://github.com/github/codeql/pull/7286#pullrequestreview-855734987
View reviewed changes https://github.com/github/codeql/pull/7286/files/d744cf9053442a1067162ff75bef8028b686f270
https://github.com/smowton
Avoid using this for a non-extending supertype, and remove needless…https://github.com/github/codeql/pull/7286/commits/1e32514600132eb40d7a5c9944efb0ff926992c6
1e32514https://github.com/github/codeql/pull/7286/commits/1e32514600132eb40d7a5c9944efb0ff926992c6
https://github.com/smowton
smowtonhttps://github.com/smowton
stale reviewhttps://github.com/github/codeql/pull/7286#pullrequestreview-855734987
1e32514https://github.com/github/codeql/commit/1e32514600132eb40d7a5c9944efb0ff926992c6
January 18, 2022 17:21https://github.com/github/codeql/pull/7286#event-5912191730
https://github.com/smowton
smowtonhttps://github.com/smowton
Jan 18, 2022 https://github.com/github/codeql/pull/7286#pullrequestreview-855758992
View reviewed changes https://github.com/github/codeql/pull/7286/files/1e32514600132eb40d7a5c9944efb0ff926992c6
https://github.com/luchua-bc
luchua-bchttps://github.com/luchua-bc
Jan 18, 2022https://github.com/github/codeql/pull/7286#issuecomment-1015684767
@atorralbahttps://github.com/atorralba
@smowtonhttps://github.com/smowton
Please reload this pagehttps://github.com/github/codeql/pull/7286
https://github.com/smowton
smowtonhttps://github.com/smowton
8409746https://github.com/github/codeql/commit/84097468cc8d826db03c9736c9760c1f02e5c050
Jan 18, 2022https://github.com/github/codeql/pull/7286#event-5912521021
https://github.com/luchua-bc
luchua-bchttps://github.com/luchua-bc
January 19, 2022 22:25https://github.com/github/codeql/pull/7286#event-5920902904
https://github.com/luchua-bc
luchua-bchttps://github.com/luchua-bc
Feb 16, 2022 https://github.com/github/codeql/pull/7286#ref-pullrequest-1140266702
CWE-552: Switch to the shared PathSanitizer library #8055 https://github.com/github/codeql/pull/8055
https://github.com/jcogs33
jcogs33https://github.com/jcogs33
Mar 11, 2024 https://github.com/github/codeql/pull/7286#ref-pullrequest-2003188893
Java: Promote Unsafe URL Forward query from experimental #14854 https://github.com/github/codeql/pull/14854
https://github.co/hiddenchars
https://github.com/github/codeql/pull/{{ revealButtonHref }}
Sign up for freehttps://github.com/join?source=comment-repo
Sign in to commenthttps://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F7286
https://github.com/smowton
smowton https://github.com/smowton
https://github.com/github/codeql/pull/7286/files/1e32514600132eb40d7a5c9944efb0ff926992c6
https://github.com/atorralba
atorralba https://github.com/atorralba
https://github.com/github/codeql/pull/7286/files/5a1dbd48720375a6b9bbc8f68b645992595bb366
https://github.com/atorralba
atorralba https://github.com/atorralba
documentation https://github.com/github/codeql/issues?q=state%3Aopen%20label%3Adocumentation
Java https://github.com/github/codeql/issues?q=state%3Aopen%20label%3AJava
Please reload this pagehttps://github.com/github/codeql/pull/7286
https://github.com/luchua-bc
https://github.com/atorralba
https://github.com/smowton
https://github.com/aschackmull
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.