René's URL Explorer Experiment


Title: Java: CWE-552 Query to detect unsafe resource loading in Java Spring applications by luchua-bc · Pull Request #9199 · github/codeql · GitHub

Open Graph Title: Java: CWE-552 Query to detect unsafe resource loading in Java Spring applications by luchua-bc · Pull Request #9199 · github/codeql

X Title: Java: CWE-552 Query to detect unsafe resource loading in Java Spring applications by luchua-bc · Pull Request #9199 · github/codeql

Description: CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security - Java: CWE-552 Query to detect unsafe resource loading in Java Spring applications by luchua-bc · Pull Request #9199 · github/codeql

Open Graph Description: Directly incorporating user input into loading resource calls on the server side without proper validation of the input can allow any web application resource such as configuration files and source...

X Description: Directly incorporating user input into loading resource calls on the server side without proper validation of the input can allow any web application resource such as configuration files and source...

Opengraph URL: https://github.com/github/codeql/pull/9199

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/commits(.:format)
route-controllerpull_requests
route-actioncommits
fetch-noncev2:21ad6cc7-cbbd-ac1b-39b1-c2758f06071f
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-idD4E4:165250:2FBD50:406FFF:6A4D8CEC
html-safe-nonce90cba668907f806e9910831df39a5e9b25035d5246407a359bf98b425d2e6311
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJENEU0OjE2NTI1MDoyRkJENTA6NDA2RkZGOjZBNEQ4Q0VDIiwidmlzaXRvcl9pZCI6IjE2OTI5MzM5MTk1NTA3MDE4OCIsInJlZ2lvbl9lZGdlIjoiaWFkIiwicmVnaW9uX3JlbmRlciI6ImlhZCJ9
visitor-hmac7d278c95be1d8579e9e1c64b54115d02c593547f0270826f22db3505ed6dd838
hovercard-subject-tagpull_request:938982069
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/commits
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/9199/commits
twitter:imagehttps://opengraph.githubassets.com/b591a1b825506f44f546de2be534c792aff0fda64f9ae89fa4109b081cebcadc/github/codeql/pull/9199
twitter:cardsummary_large_image
og:imagehttps://opengraph.githubassets.com/b591a1b825506f44f546de2be534c792aff0fda64f9ae89fa4109b081cebcadc/github/codeql/pull/9199
og:image:altDirectly incorporating user input into loading resource calls on the server side without proper validation of the input can allow any web application resource such as configuration files and source...
og:image:width1200
og:image:height600
og:site_nameGitHub
og:typeobject
og:author:usernameluchua-bc
hostnamegithub.com
expected-hostnamegithub.com
None9f8758a3953dfe943439713a6fa4f90d542a3431f10e861ca03dd7f39009f320
turbo-cache-controlno-cache
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive
disable-turbofalse
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasebffd5484f01713a661b03469b77678f72b6574ed
ui-targetfull
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/9199/commits#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F9199%2Fcommits
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F9199%2Fcommits
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Fcommits&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/9199/commits
Reloadhttps://github.com/github/codeql/pull/9199/commits
Reloadhttps://github.com/github/codeql/pull/9199/commits
Please reload this pagehttps://github.com/github/codeql/pull/9199/commits
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 425 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
atorralbahttps://github.com/atorralba
github:mainhttps://github.com/github/codeql/tree/main
luchua-bc:java/unsafe-url-forward-dispatch-loadhttps://github.com/luchua-bc/ql/tree/java/unsafe-url-forward-dispatch-load
Conversationhttps://github.com/github/codeql/pull/9199
Commits6 (6)https://github.com/github/codeql/pull/9199/commits
Checkshttps://github.com/github/codeql/pull/9199/checks
Files changedhttps://github.com/github/codeql/pull/9199/files
Java: CWE-552 Query to detect unsafe resource loading in Java Spring applicationshttps://github.com/github/codeql/pull/9199/commits#top
atorralbahttps://github.com/atorralba
github:mainhttps://github.com/github/codeql/tree/main
luchua-bc:java/unsafe-url-forward-dispatch-loadhttps://github.com/luchua-bc/ql/tree/java/unsafe-url-forward-dispatch-load
Query to detect unsafe resource loading in Java Spring applicationshttps://github.com/github/codeql/pull/9199/commits/311c9e47191a06b905c09cd448fef4de565a92a0
https://github.com/luchua-bc
luchua-bchttps://github.com/github/codeql/commits?author=luchua-bc
311c9e4https://github.com/github/codeql/pull/9199/commits/311c9e47191a06b905c09cd448fef4de565a92a0
https://github.com/github/codeql/tree/311c9e47191a06b905c09cd448fef4de565a92a0
Simplify test case and minor update to the queryhttps://github.com/github/codeql/pull/9199/commits/b3572747f01ad9b9b06f144f293daf316da4ce67
https://github.com/luchua-bc
luchua-bchttps://github.com/github/codeql/commits?author=luchua-bc
b357274https://github.com/github/codeql/pull/9199/commits/b3572747f01ad9b9b06f144f293daf316da4ce67
https://github.com/github/codeql/tree/b3572747f01ad9b9b06f144f293daf316da4ce67
Use the new CSV modelhttps://github.com/github/codeql/pull/9199/commits/251f67dcf375237b3b0847a8c39957628af5d768
https://github.com/luchua-bc
luchua-bchttps://github.com/github/codeql/commits?author=luchua-bc
251f67dhttps://github.com/github/codeql/pull/9199/commits/251f67dcf375237b3b0847a8c39957628af5d768
https://github.com/github/codeql/tree/251f67dcf375237b3b0847a8c39957628af5d768
Add test cases and reduce FPshttps://github.com/github/codeql/pull/9199/commits/e33d78674565b64f9ef4ab2001b49bfd5b29b3c0
https://github.com/luchua-bc
luchua-bchttps://github.com/github/codeql/commits?author=luchua-bc
e33d786https://github.com/github/codeql/pull/9199/commits/e33d78674565b64f9ef4ab2001b49bfd5b29b3c0
https://github.com/github/codeql/tree/e33d78674565b64f9ef4ab2001b49bfd5b29b3c0
Remove unused code and update qldochttps://github.com/github/codeql/pull/9199/commits/8effbff817e87db04e73976e3634ed3173a563ca
https://github.com/luchua-bc
luchua-bchttps://github.com/github/codeql/commits?author=luchua-bc
8effbffhttps://github.com/github/codeql/pull/9199/commits/8effbff817e87db04e73976e3634ed3173a563ca
https://github.com/github/codeql/tree/8effbff817e87db04e73976e3634ed3173a563ca
Update java/ql/src/experimental/Security/CWE/CWE-552/UnsafeUrlForward.qllhttps://github.com/github/codeql/pull/9199/commits/7ff82bbed35282d8040b8bf5db9d0225f866b059
https://github.com/atorralba
atorralbahttps://github.com/github/codeql/commits?author=atorralba
7ff82bbhttps://github.com/github/codeql/pull/9199/commits/7ff82bbed35282d8040b8bf5db9d0225f866b059
https://github.com/github/codeql/tree/7ff82bbed35282d8040b8bf5db9d0225f866b059
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.