Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

seqra / opentaint Public

Notifications You must be signed in to change notification settings
Fork 11
Star 138

Code
Issues 42
Pull requests 33
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights

feat(model): Make passthrough models more precise - #315

#315

Open

misonijnik wants to merge 65 commits into

misonijnik/3-rulesseqra/opentaint:misonijnik/3-rulesfrom

misonijnik/4-configseqra/opentaint:misonijnik/4-configCopy head branch name to clipboard

Conversation Commits65 (65)Checks Files changed

Open

feat(model): Make passthrough models more precise#315
misonijnik wants to merge 65 commits into
misonijnik/3-rulesfrom
misonijnik/4-config

Commits

Commits on Aug 19, 2026

refactor(dataflow): delete the implicit array-element mechanism
misonijnik
authored
a1c62ec
refactor(rules): field-sensitive java.io.File model and $*VAR syntax
misonijnik
authored
5bd7acf
refactor(engine): drop the get* default passthrough for explicit servlet models
misonijnik
authored
d405d70
refactor(config): make the branch-added passthroughs precise
misonijnik
authored
ab76500
refactor(config): field-sensitive models for the leaking beans
misonijnik
authored
78ceaf2
style(config): normalise java-lang.yaml to the width=80 serialisation
misonijnik
authored
3f314da
refactor(config): collapse the CharSequence rule-storage slot onto the base
misonijnik
authored
bb17a3a
refactor(config): collapse nio buffer and Matcher rule-storage slots onto the base
misonijnik
authored
6dc868f
fix(config): drop the dead builder-content and matcher-pattern slots
misonijnik
authored
6d80610
refactor(config): collapse java.lang.ref.Reference rule-storage slot onto the base
misonijnik
authored
3fb392c
refactor(config): collapse javax.xml.namespace.QName rule-storage slot onto the base
misonijnik
authored
94ee9f2
refactor(config): collapse java.sql Array/Blob/Clob/Ref/ResultSet/Struct and javax.sql.rowset CachedRowSet/JoinRowSet/WebRowSet rule-storage slots onto the base
misonijnik
authored
549ed26
refactor(config): collapse java.net URI/URL rule-storage slots onto the base
misonijnik
authored
e448cbc
refactor(config): collapse java.util.concurrent CompletableFuture/CompletionStage/Future rule-storage slots onto the base
misonijnik
authored
304f304
refactor(config): collapse java.util.logging.LogRecord rule-storage slot onto the base
misonijnik
authored
499c6d6
refactor(config): collapse javax.sql.rowset.serial SerialDatalink/SerialJavaObject rule-storage slots onto the base
misonijnik
authored
4180393
refactor(config): collapse javax.xml.transform rule-storage slots onto the base
misonijnik
authored
44e8a0c
refactor(config): collapse java.io holder rule-storage slots onto the base
misonijnik
authored
5cfff9e
refactor(config): collapse java.lang holder rule-storage slots onto the base
misonijnik
authored
b38acdd
refactor(config): collapse java.util holder rule-storage slots onto the base
misonijnik
authored
6bccfaf
refactor(config): collapse java.text holder rule-storage slots onto the base
misonijnik
authored
c3957a4
refactor(config): split NameClassPair name/className/nameInNamespace
misonijnik
authored
575feae
refactor(config): split javax.naming.Reference, collapse the name holders
misonijnik
authored
4d6067d
refactor(config): collapse javax.naming.directory holders, slot SearchControls
misonijnik
authored
9eb68fa
refactor(config): slot the javax.naming.ldap control properties
misonijnik
authored
8fdcba4
fix(config): restore the SortControl(String, boolean) taint model
misonijnik
authored
9f8dc19
fix(config): key SortResponseControl's encodedValue to its declaring class
misonijnik
authored
6d804c7
refactor(config): collapse the org.w3c.dom.Document rule-storage slot onto the base
misonijnik
authored
11bc36a
refactor(config): slot the javax.script engine properties, collapse the bindings holders
misonijnik
authored
be1bff1
refactor(config): split the java.text symbols into per-property slots
misonijnik
authored
7b37e3d
fix(config): close BasicControl#getID whole-object leak (star ctrlSink)
misonijnik
authored
3e4c6ea
fix(config): close DecimalFormatSymbols#getCurrencySymbol whole-object leak
misonijnik
authored
3e49c4f
fix(config): close DateFormatSymbols set./get. whole-object leak
misonijnik
authored
b4a6826
fix(config): revert gate-invisible matcher form, adjudicate the leak
misonijnik
authored
0f42604
fix(config): propagate taint through SearchResult, Binding, and Rdn ctors
misonijnik
authored
32b8471
fix(config): remove whole-object twins on SortKey, MessageFormat, DecimalFormat
misonijnik
authored
64d2a98
fix(config): DecimalFormat#applyPattern taints only the pattern slot
misonijnik
authored
71b7172
fix(config): restore DecimalFormatSymbols setCurrency/getLocale, drop leak-generating pattern
misonijnik
authored
82e46fc
fix(config): preserve servlet parameter map fields
misonijnik
authored
ad52d5b
style(config): normalize Spring function entries
misonijnik
authored
34a8e70
test(ci): update OWASP trace expectation for config batch
misonijnik
authored
9ffede7
fix(model): preserve reversed comparator state
misonijnik
authored
9290f47
fix(config): model Map.Entry accessors and tighten LinkedList element reads
misonijnik
authored
eacae1d
refactor(model): rename <rule-storage> to semantic field names
misonijnik
authored
7afc656
fix(test): track primitive approximation flows (model)
misonijnik
authored
bb5e659
fix(model): restore every passthrough rule deleted across the config batch
misonijnik
authored
0d670e2
fix(model): match primitive array parameter types
misonijnik
authored
ddce2c8
fix(model): re-key virtual-field slots whose value type diverged
misonijnik
authored
40eb1d3
fix(model): read into the destination buffer, keep nio buffers fluent
misonijnik
authored
9deb135
chore(model): drop duplicate copy actions
misonijnik
authored
118ba59
fix(model): drop <serialized-value> reads that cannot type-check
misonijnik
authored
c6e7077
test(rules): pin the library passthrough models with regression samples
misonijnik
authored
655af12
test(ci): restore the OWASP trace expectation
misonijnik
authored
bf7bc14
refactor(model): give every field slot a java.lang.Object value type
misonijnik
authored
cd6f6dc
fix(model): close the container and serializer gaps the new samples found
misonijnik
authored
5d58be4
test(rules): cover the buffer-filling models and the rest of the containers
misonijnik
authored
5c6c45b
test(rules): leave Collectors#joining out of the assertions
misonijnik
authored
fcb3d5a
revert(model): drop the blanket restore of the deleted passthrough rules
misonijnik
authored
2b2945c
test(ci): put the OWASP trace expectation back to 2633
misonijnik
authored
9bf524c
fix(model): carry array elements into scalar destinations
misonijnik
authored
492e567
fix(model): drop copies that name an argument the overload does not have
misonijnik
authored
f285e33
refactor(model): stop hanging String content slots off String positions
misonijnik
authored
95f933b
feat(model): model the servlet attribute slots and close the jakarta gap
misonijnik
authored
6af7cb5
feat(model): model the list element read
misonijnik
authored
48f5131
fix(model): keep the serialized-value read on readValue(String)

misonijnik
and
claude
committed
affac6e

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.