| Aug | SEP | Oct |
| 18 | ||
| 2019 | 2020 | 2021 |
COLLECTED BY
Collection: Common Crawl
from DataFlow::PathNode source, DataFlow::PathNode sink, UnsafeDeserializationConfig conf
where conf.hasFlowPath(source, sink)
select sink.getNode().(UnsafeDeserializationSink).getMethodAccess(), source, sink,
"Unsafe deserialization of $@.", source.getNode(), "user input"
$ # Clone the project $ git clone https://github.com/m-y-mo/struts_9805 $ # Create a CodeQL database $ codeql database create ./struts_db -s ./struts_9805 \ -j 0 -l java --command "mvn -B -DskipTests \ -DskipAssembly"
CodeQL adaptive threat modeling BETA
Adaptive threat modeling (ATM) is an extension for CodeQL which semi-automatically boosts your JavaScript security queries to find more security vulnerabilities. Interested? Please sign up for our private beta.
Join the beta
GitHub CodeQL can only be used on codebases that are released under an OSI-approved open source license, or to perform academic research, or to generate CodeQL databases for or during automated analysis, continuous integration (CI) or continuous delivery (CD) in the following cases: (1) on any Open Source Codebase hosted and maintained on GitHub.com, and (2) to test CodeQL queries you have released under an OSI-approved open source software license. It can't be used for automated analysis, continuous integration or continuous delivery, whether as part of normal software engineering processes or otherwise, except in the express cases set forth herein. For these uses, contact the sales team.