Sitelet https://github.com/itsallaboutpython/codeql/tree/main/java/old-change-notes
Skip to content

old-change-notes

Directory actions

More options

Directory actions

More options

Latest commit

 

History

History
 
 

old-change-notes

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
2020-05-21-mongodb-sql-injection-sinks.md
2020-05-21-mongodb-sql-injection-sinks.md
 
 
2020-05-21-websocket-taintsource.md
2020-05-21-websocket-taintsource.md
 
 
2020-06-30-jooq-sql-injection-sinks.md
2020-06-30-jooq-sql-injection-sinks.md
 
 
2020-07-03-more-pathcreations.md
2020-07-03-more-pathcreations.md
 
 
2020-07-09-untrusted-data-to-external-api.md
2020-07-09-untrusted-data-to-external-api.md
 
 
2020-07-13-stacktraceexposure-fp-fix.md
2020-07-13-stacktraceexposure-fp-fix.md
 
 
2020-08-11-printwriter-format-xss-sink.md
2020-08-11-printwriter-format-xss-sink.md
 
 
2020-08-14-dataflow-dispatch-instance-arg-ctx.md
2020-08-14-dataflow-dispatch-instance-arg-ctx.md
 
 
2020-08-17-string-formatted.md
2020-08-17-string-formatted.md
 
 
2020-08-24-records-flow.md
2020-08-24-records-flow.md
 
 
2020-08-31-extensible-security-queries.md
2020-08-31-extensible-security-queries.md
 
 
2020-09-08-blockstmt.md
2020-09-08-blockstmt.md
 
 
2020-09-17-exectainted-array.md
2020-09-17-exectainted-array.md
 
 
2020-09-21-jhipster-gen-prng-query.md
2020-09-21-jhipster-gen-prng-query.md
 
 
2020-09-22-hibernate-sql-sinks.md
2020-09-22-hibernate-sql-sinks.md
 
 
2020-09-23-spring-multipart-request-sources.md
2020-09-23-spring-multipart-request-sources.md
 
 
2020-10-03-android-intent-taintsource.md
2020-10-03-android-intent-taintsource.md
 
 
2020-10-07-fastjson-deserialization-sink.md
2020-10-07-fastjson-deserialization-sink.md
 
 
2020-10-16-guava-flow-steps.md
2020-10-16-guava-flow-steps.md
 
 
2020-10-27-insecure-bean-validation.md
2020-10-27-insecure-bean-validation.md
 
 
2020-11-04-commonslang-unsafe-deserialization-sinks.md
2020-11-04-commonslang-unsafe-deserialization-sinks.md
 
 
2020-12-09-xxe-fp-fix.md
2020-12-09-xxe-fp-fix.md
 
 
2021-01-12-unsafe-hostname-verification.md
2021-01-12-unsafe-hostname-verification.md
 
 
2021-01-14-java-15-support.md
2021-01-14-java-15-support.md
 
 
2021-01-19-struts-xml-extraction.md
2021-01-19-struts-xml-extraction.md
 
 
2021-02-09-commons-string-utils.md
2021-02-09-commons-string-utils.md
 
 
2021-02-15-commons-array-utils.md
2021-02-15-commons-array-utils.md
 
 
2021-02-15-snakeyaml-fn-fix.md
2021-02-15-snakeyaml-fn-fix.md
 
 
2021-02-17-apache-http.md
2021-02-17-apache-http.md
 
 
2021-02-23-deprecated-jcenter-bintray.md
2021-02-23-deprecated-jcenter-bintray.md
 
 
2021-03-01-fluent-interface-data-flow.md
2021-03-01-fluent-interface-data-flow.md
 
 
2021-03-02-apache-text-misc.md
2021-03-02-apache-text-misc.md
 
 
2021-03-02-guava-io.md
2021-03-02-guava-io.md
 
 
2021-03-05-commons-lang-randomutils.md
2021-03-05-commons-lang-randomutils.md
 
 
2021-03-05-commons-object-utils.md
2021-03-05-commons-object-utils.md
 
 
2021-03-05-play-framework.md
2021-03-05-play-framework.md
 
 
2021-03-05-regex-utils.md
2021-03-05-regex-utils.md
 
 
2021-03-10-guava-base.md
2021-03-10-guava-base.md
 
 
2021-03-11-commons-strbuilder.md
2021-03-11-commons-strbuilder.md
 
 
2021-03-18-commons-tostring-builder.md
2021-03-18-commons-tostring-builder.md
 
 
2021-03-22-jax-rs-improvements.md
2021-03-22-jax-rs-improvements.md
 
 
2021-03-23-guava-collections-and-preconditions.md
2021-03-23-guava-collections-and-preconditions.md
 
 
2021-03-25-remove-legacy-code-duplication-library.md
2021-03-25-remove-legacy-code-duplication-library.md
 
 
2021-03-25-remove-legacy-filter-queries.md
2021-03-25-remove-legacy-filter-queries.md
 
 
2021-04-02-add-spring-validation-errors.md
2021-04-02-add-spring-validation-errors.md
 
 
2021-04-06-ssrf-query.md
2021-04-06-ssrf-query.md
 
 
2021-04-14-membertype.md
2021-04-14-membertype.md
 
 
2021-04-26-xpath-injection-query.md
2021-04-26-xpath-injection-query.md
 
 
2021-05-03-guava-first-non-null.md
2021-05-03-guava-first-non-null.md
 
 
2021-05-03-jackson-dataflow-deserialization.md
2021-05-03-jackson-dataflow-deserialization.md
 
 
2021-05-04-jexl-injection-query.md
2021-05-04-jexl-injection-query.md
 
 
2021-05-05-kryo-improvements.md
2021-05-05-kryo-improvements.md
 
 
2021-05-06-unsafe-android-access-query.md
2021-05-06-unsafe-android-access-query.md
 
 
2021-05-11-apache-tuples.md
2021-05-11-apache-tuples.md
 
 
2021-05-11-ratpack-support.md
2021-05-11-ratpack-support.md
 
 
2021-05-12-hardcoded-azure-credentials-in-api-call.md
2021-05-12-hardcoded-azure-credentials-in-api-call.md
 
 
2021-05-12-xxe-fp-fix.md
2021-05-12-xxe-fp-fix.md
 
 
2021-05-13-ognl-injection-query.md
2021-05-13-ognl-injection-query.md
 
 
2021-05-14-close-resource-leaks-improvements.md
2021-05-14-close-resource-leaks-improvements.md
 
 
2021-05-17-add-unsafe-deserialization-sinks.md
2021-05-17-add-unsafe-deserialization-sinks.md
 
 
2021-05-17-jackson-deserialization-sink.md
2021-05-17-jackson-deserialization-sink.md
 
 
2021-05-17-missing-jwt-signature-check-query.md
2021-05-17-missing-jwt-signature-check-query.md
 
 
2021-05-20-jndi-injection-query.md
2021-05-20-jndi-injection-query.md
 
 
2021-05-20-savedrequest-taintsources.md
2021-05-20-savedrequest-taintsources.md
 
 
2021-05-24-hardcoded-shiro-key-in-api-call.md
2021-05-24-hardcoded-shiro-key-in-api-call.md
 
 
2021-05-28-remove-senderror-xss-sink.md
2021-05-28-remove-senderror-xss-sink.md
 
 
2021-05-31-add-spring-stringutils.md
2021-05-31-add-spring-stringutils.md
 
 
2021-06-01-collection-flow.md
2021-06-01-collection-flow.md
 
 
2021-06-01-insecure-basic-auth-query.md
2021-06-01-insecure-basic-auth-query.md
 
 
2021-06-01-statement-toString.md
2021-06-01-statement-toString.md
 
 
2021-06-02-mvel-injection-query.md
2021-06-02-mvel-injection-query.md
 
 
2021-06-08-spel-injection-query.md
2021-06-08-spel-injection-query.md
 
 
2021-06-08-spring-http.md
2021-06-08-spring-http.md
 
 
2021-06-08-spring-propertyvalues.md
2021-06-08-spring-propertyvalues.md
 
 
2021-06-11-tainted-key-read-steps.md
2021-06-11-tainted-key-read-steps.md
 
 
2021-06-14-groovy-code-injection-query.md
2021-06-14-groovy-code-injection-query.md
 
 
2021-06-16-xslt-injection-query.md
2021-06-16-xslt-injection-query.md
 
 
2021-06-18-apache-mutable.md
2021-06-18-apache-mutable.md
 
 
2021-06-18-insecure-java-mail-query.md
2021-06-18-insecure-java-mail-query.md
 
 
2021-06-22-more-steps-for-bytebuffer-inputstream.md
2021-06-22-more-steps-for-bytebuffer-inputstream.md
 
 
2021-06-22-util-optional.md
2021-06-22-util-optional.md
 
 
2021-06-23-generic-type-names.md
2021-06-23-generic-type-names.md
 
 
2021-06-24-dataflow-implicit-reads.md
2021-06-24-dataflow-implicit-reads.md
 
 
2021-06-25-apache-collections-maputils-keyvalue.md
2021-06-25-apache-collections-maputils-keyvalue.md
 
 
2021-06-25-jax-rs-content-types.md
2021-06-25-jax-rs-content-types.md
 
 
2021-06-29-javax-json-models.md
2021-06-29-javax-json-models.md
 
 
2021-07-01-spring-collections.md
2021-07-01-spring-collections.md
 
 
2021-07-01-spring-webmultipart.md
2021-07-01-spring-webmultipart.md
 
 
2021-07-01-spring-webutil.md
2021-07-01-spring-webutil.md
 
 
2021-07-01-url-classloader-reactive-webclient.md
2021-07-01-url-classloader-reactive-webclient.md
 
 
2021-07-02-split-queries.md
2021-07-02-split-queries.md
 
 
2021-07-14-spring-jdbc.md
2021-07-14-spring-jdbc.md
 
 
2021-07-19-json-java.md
2021-07-19-json-java.md
 
 
2021-07-22-model-collection-constructors.md
2021-07-22-model-collection-constructors.md
 
 
2021-07-27-apache-collections-base-package.md
2021-07-27-apache-collections-base-package.md
 
 
2021-07-28-guava-cache.md
2021-07-28-guava-cache.md
 
 
2021-08-02-android-intent-redirect-query.md
2021-08-02-android-intent-redirect-query.md
 
 
2021-08-02-guava-collections.md
2021-08-02-guava-collections.md
 
 
2021-08-03-spring-content-types.md
2021-08-03-spring-content-types.md
 
 
2021-08-04-jabsorb-unsafe-deserialization.md
2021-08-04-jabsorb-unsafe-deserialization.md