Java: Diff-informed queries: phase 3 (non-trivial locations)#20077

Merged

d10c merged 25 commits intogithub:mainfrom

d10c:d10c/diff-informed-phase-3-java

Jul 21, 2025

Commits on Jul 17, 2025

[TEST] Java: CWE-020/ExternalAPI: new test based on qhelp
d10c
committed
[TEST] Java: LogInjection: convert test to qlref
d10c
committed
[TEST] Java: UnsafeCertTrust: convert test to qlref
d10c
committed
[TEST] Java: TrustBoundaryViolations: convert test to qlref
d10c
committed
[TEST] Java: SensitiveLogInfo: convert to qlref
d10c
committed
[TEST] Java: ConditionalBypass: convert to qlref
d10c
committed
[TEST] Java: SensitiveCommunication: convert to qlref
d10c
committed
[DIFF-INFORMED] Java: (Android)SensitiveCommunication
d10c
committed
[DIFF-INFORMED] Java: ArithmeticTainted
d10c
committed
[DIFF-INFORMED] Java: ArithmeticUncontrolled
d10c
committed
[DIFF-INFORMED] Java: ConditionalBypass
d10c
committed
[DIFF-INFORMED] Java: UntrustedDataToExternalAPI
d10c
committed
[DIFF-INFORMED] Java: ExternallyControlledFormatString
d10c
committed
[DIFF-INFORMED] Java: ImproperValidationOfArray…
d10c
committed
[DIFF-INFORMED] Java: InsecureCookie
d10c
committed
[DIFF-INFORMED] Java: InsecureLdapAuth
d10c
committed
[DIFF-INFORMED] Java: LogInjection
d10c
committed
[DIFF-INFORMED] Java: MaybeBrokenCryptoAlgorithm
d10c
committed
[DIFF-INFORMED] Java: SensitiveLogging
d10c
committed
[DIFF-INFORMED] Java: SqlConcatenated
d10c
committed
[DIFF-INFORMED] Java: TaintedEnvironmentVariable
d10c
committed
[DIFF-INFORMED] Java: TempDirLocalInformationDisclosure
d10c
committed
[DIFF-INFORMED] Java: TrustBoundaryViolation
d10c
committed
[DIFF-INFORMED] Java: UnsafeCertTrust
d10c
committed
[DIFF-INFORMED] Java: AndroidWebViewSettingsAllowsContentAccess
d10c
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Java: Diff-informed queries: phase 3 (non-trivial locations)#20077

Java: Diff-informed queries: phase 3 (non-trivial locations)#20077
d10c merged 25 commits intogithub:mainfrom
d10c:d10c/diff-informed-phase-3-java

Commits on Jul 17, 2025

[TEST] Java: CWE-020/ExternalAPI: new test based on qhelp

[TEST] Java: LogInjection: convert test to qlref

[TEST] Java: UnsafeCertTrust: convert test to qlref

[TEST] Java: TrustBoundaryViolations: convert test to qlref

[TEST] Java: SensitiveLogInfo: convert to qlref

[TEST] Java: ConditionalBypass: convert to qlref

[TEST] Java: SensitiveCommunication: convert to qlref

[DIFF-INFORMED] Java: (Android)SensitiveCommunication

[DIFF-INFORMED] Java: ArithmeticTainted

[DIFF-INFORMED] Java: ArithmeticUncontrolled

[DIFF-INFORMED] Java: ConditionalBypass

[DIFF-INFORMED] Java: UntrustedDataToExternalAPI

[DIFF-INFORMED] Java: ExternallyControlledFormatString

[DIFF-INFORMED] Java: ImproperValidationOfArray…

[DIFF-INFORMED] Java: InsecureCookie

[DIFF-INFORMED] Java: InsecureLdapAuth

[DIFF-INFORMED] Java: LogInjection

[DIFF-INFORMED] Java: MaybeBrokenCryptoAlgorithm

[DIFF-INFORMED] Java: SensitiveLogging

[DIFF-INFORMED] Java: SqlConcatenated

[DIFF-INFORMED] Java: TaintedEnvironmentVariable

[DIFF-INFORMED] Java: TempDirLocalInformationDisclosure

[DIFF-INFORMED] Java: TrustBoundaryViolation

[DIFF-INFORMED] Java: UnsafeCertTrust

[DIFF-INFORMED] Java: AndroidWebViewSettingsAllowsContentAccess

Java: Diff-informed queries: phase 3 (non-trivial locations)#20077d10c merged 25 commits intogithub:maingithub/codeql:mainfrom d10c:d10c/diff-informed-phase-3-javad10c/codeql:d10c/diff-informed-phase-3-javaCopy head branch name to clipboard

Commits

Commits on Jul 17, 2025

Java: Diff-informed queries: phase 3 (non-trivial locations)#20077
d10c merged 25 commits intogithub:mainfrom
d10c:d10c/diff-informed-phase-3-java