FilesExpand file tree

main

/

change-notes

/

Copy path

Directory actions

More options

More options

Directory actions

More options

More options

Latest commit

 

History

History

History

 

 

main

/

change-notes

/

Copy path

Top

Folders and files

Name		Name	Last commit message	Last commit date
parent directory ..
2020-05-21-mongodb-sql-injection-sinks.md		2020-05-21-mongodb-sql-injection-sinks.md
2020-05-21-websocket-taintsource.md		2020-05-21-websocket-taintsource.md
2020-06-30-jooq-sql-injection-sinks.md		2020-06-30-jooq-sql-injection-sinks.md
2020-07-03-more-pathcreations.md		2020-07-03-more-pathcreations.md
2020-07-09-untrusted-data-to-external-api.md		2020-07-09-untrusted-data-to-external-api.md
2020-07-13-stacktraceexposure-fp-fix.md		2020-07-13-stacktraceexposure-fp-fix.md
2020-08-11-printwriter-format-xss-sink.md		2020-08-11-printwriter-format-xss-sink.md
2020-08-14-dataflow-dispatch-instance-arg-ctx.md		2020-08-14-dataflow-dispatch-instance-arg-ctx.md
2020-08-17-string-formatted.md		2020-08-17-string-formatted.md
2020-08-24-records-flow.md		2020-08-24-records-flow.md
2020-08-31-extensible-security-queries.md		2020-08-31-extensible-security-queries.md
2020-09-08-blockstmt.md		2020-09-08-blockstmt.md
2020-09-17-exectainted-array.md		2020-09-17-exectainted-array.md
2020-09-21-jhipster-gen-prng-query.md		2020-09-21-jhipster-gen-prng-query.md
2020-09-22-hibernate-sql-sinks.md		2020-09-22-hibernate-sql-sinks.md
2020-09-23-spring-multipart-request-sources.md		2020-09-23-spring-multipart-request-sources.md
2020-10-03-android-intent-taintsource.md		2020-10-03-android-intent-taintsource.md
2020-10-07-fastjson-deserialization-sink.md		2020-10-07-fastjson-deserialization-sink.md
2020-10-16-guava-flow-steps.md		2020-10-16-guava-flow-steps.md
2020-10-27-insecure-bean-validation.md		2020-10-27-insecure-bean-validation.md
2020-11-04-commonslang-unsafe-deserialization-sinks.md		2020-11-04-commonslang-unsafe-deserialization-sinks.md
2020-12-09-xxe-fp-fix.md		2020-12-09-xxe-fp-fix.md
2021-01-12-unsafe-hostname-verification.md		2021-01-12-unsafe-hostname-verification.md
2021-01-14-java-15-support.md		2021-01-14-java-15-support.md
2021-01-19-struts-xml-extraction.md		2021-01-19-struts-xml-extraction.md
2021-02-09-commons-string-utils.md		2021-02-09-commons-string-utils.md
2021-02-15-commons-array-utils.md		2021-02-15-commons-array-utils.md
2021-02-15-snakeyaml-fn-fix.md		2021-02-15-snakeyaml-fn-fix.md
2021-02-17-apache-http.md		2021-02-17-apache-http.md
2021-02-23-deprecated-jcenter-bintray.md		2021-02-23-deprecated-jcenter-bintray.md
2021-03-01-fluent-interface-data-flow.md		2021-03-01-fluent-interface-data-flow.md
2021-03-02-apache-text-misc.md		2021-03-02-apache-text-misc.md
2021-03-02-guava-io.md		2021-03-02-guava-io.md
2021-03-05-commons-lang-randomutils.md		2021-03-05-commons-lang-randomutils.md
2021-03-05-commons-object-utils.md		2021-03-05-commons-object-utils.md
2021-03-05-play-framework.md		2021-03-05-play-framework.md
2021-03-05-regex-utils.md		2021-03-05-regex-utils.md
2021-03-10-guava-base.md		2021-03-10-guava-base.md
2021-03-11-commons-strbuilder.md		2021-03-11-commons-strbuilder.md
2021-03-18-commons-tostring-builder.md		2021-03-18-commons-tostring-builder.md
2021-03-22-jax-rs-improvements.md		2021-03-22-jax-rs-improvements.md
2021-03-23-guava-collections-and-preconditions.md		2021-03-23-guava-collections-and-preconditions.md
2021-03-25-remove-legacy-code-duplication-library.md		2021-03-25-remove-legacy-code-duplication-library.md
2021-03-25-remove-legacy-filter-queries.md		2021-03-25-remove-legacy-filter-queries.md
2021-04-02-add-spring-validation-errors.md		2021-04-02-add-spring-validation-errors.md
2021-04-06-ssrf-query.md		2021-04-06-ssrf-query.md
2021-04-14-membertype.md		2021-04-14-membertype.md
2021-04-26-xpath-injection-query.md		2021-04-26-xpath-injection-query.md
2021-05-03-guava-first-non-null.md		2021-05-03-guava-first-non-null.md
2021-05-03-jackson-dataflow-deserialization.md		2021-05-03-jackson-dataflow-deserialization.md
2021-05-04-jexl-injection-query.md		2021-05-04-jexl-injection-query.md
2021-05-05-kryo-improvements.md		2021-05-05-kryo-improvements.md
2021-05-06-unsafe-android-access-query.md		2021-05-06-unsafe-android-access-query.md
2021-05-11-apache-tuples.md		2021-05-11-apache-tuples.md
2021-05-12-hardcoded-azure-credentials-in-api-call.md		2021-05-12-hardcoded-azure-credentials-in-api-call.md
2021-05-12-xxe-fp-fix.md		2021-05-12-xxe-fp-fix.md
2021-05-13-ognl-injection-query.md		2021-05-13-ognl-injection-query.md
2021-05-14-close-resource-leaks-improvements.md		2021-05-14-close-resource-leaks-improvements.md
2021-05-17-add-unsafe-deserialization-sinks.md		2021-05-17-add-unsafe-deserialization-sinks.md
2021-05-17-jackson-deserialization-sink.md		2021-05-17-jackson-deserialization-sink.md
2021-05-17-missing-jwt-signature-check-query.md		2021-05-17-missing-jwt-signature-check-query.md
2021-05-20-jndi-injection-query.md		2021-05-20-jndi-injection-query.md
2021-05-20-savedrequest-taintsources.md		2021-05-20-savedrequest-taintsources.md
2021-05-24-hardcoded-shiro-key-in-api-call.md		2021-05-24-hardcoded-shiro-key-in-api-call.md
2021-05-28-remove-senderror-xss-sink.md		2021-05-28-remove-senderror-xss-sink.md
2021-05-31-add-spring-stringutils.md		2021-05-31-add-spring-stringutils.md
2021-06-01-collection-flow.md		2021-06-01-collection-flow.md
2021-06-01-insecure-basic-auth-query.md		2021-06-01-insecure-basic-auth-query.md
2021-06-01-statement-toString.md		2021-06-01-statement-toString.md
2021-06-02-mvel-injection-query.md		2021-06-02-mvel-injection-query.md
2021-06-08-spel-injection-query.md		2021-06-08-spel-injection-query.md
2021-06-08-spring-http.md		2021-06-08-spring-http.md
2021-06-08-spring-propertyvalues.md		2021-06-08-spring-propertyvalues.md
2021-06-11-tainted-key-read-steps.md		2021-06-11-tainted-key-read-steps.md
2021-06-14-groovy-code-injection-query.md		2021-06-14-groovy-code-injection-query.md
2021-06-16-xslt-injection-query.md		2021-06-16-xslt-injection-query.md
2021-06-18-apache-mutable.md		2021-06-18-apache-mutable.md
2021-06-22-more-steps-for-bytebuffer-inputstream.md		2021-06-22-more-steps-for-bytebuffer-inputstream.md
2021-06-22-util-optional.md		2021-06-22-util-optional.md
2021-06-23-generic-type-names.md		2021-06-23-generic-type-names.md
2021-06-24-dataflow-implicit-reads.md		2021-06-24-dataflow-implicit-reads.md
2021-06-25-apache-collections-maputils-keyvalue.md		2021-06-25-apache-collections-maputils-keyvalue.md
2021-06-25-jax-rs-content-types.md		2021-06-25-jax-rs-content-types.md
2021-06-29-javax-json-models.md		2021-06-29-javax-json-models.md
2021-07-01-spring-collections.md		2021-07-01-spring-collections.md
2021-07-01-spring-webmultipart.md		2021-07-01-spring-webmultipart.md
2021-07-01-spring-webutil.md		2021-07-01-spring-webutil.md
2021-07-01-url-classloader-reactive-webclient.md		2021-07-01-url-classloader-reactive-webclient.md
2021-07-02-split-queries.md		2021-07-02-split-queries.md
2021-07-14-spring-jdbc.md		2021-07-14-spring-jdbc.md
2021-07-19-json-java.md		2021-07-19-json-java.md
2021-07-22-model-collection-constructors.md		2021-07-22-model-collection-constructors.md
2021-07-27-apache-collections-base-package.md		2021-07-27-apache-collections-base-package.md
2021-07-28-guava-cache.md		2021-07-28-guava-cache.md
2021-08-02-guava-collections.md		2021-08-02-guava-collections.md
2021-08-03-spring-content-types.md		2021-08-03-spring-content-types.md
2021-08-04-jabsorb-unsafe-deserialization.md		2021-08-04-jabsorb-unsafe-deserialization.md
2021-08-05-jodd-unsafe-deserialization.md		2021-08-05-jodd-unsafe-deserialization.md
2021-08-09-flexjson-unsafe-deserialization.md		2021-08-09-flexjson-unsafe-deserialization.md
2021-08-12-jax-rs-filter-sources.md		2021-08-12-jax-rs-filter-sources.md
View all files