45
I Use This!
Very High Activity

Commits : Listings

Analyzed 1 day ago. based on code collected 2 days ago.
Sep 04, 2025 — Sep 04, 2026
Commit Message Contributor Files Modified Lines Added Lines Removed Code Location Date
Merge pull request #3864 from alvations/fix-develop-pickle-asset-scanner More... 1 day ago
Exclude pytest's ephemeral basetemp from the pickle-asset scanner More... 1 day ago
Merge pull request #3862 from alvations/add-regex-redos-guard-and-tests More... 2 days ago
Add java-tool injection and featstruct ReDoS regression tests More... 2 days ago
Add the all-regex-through-redos pre-commit guard More... 2 days ago
Merge pull request #3861 from alvations/harden-open-guard-app-draw-twitter More... 2 days ago
Extend the no-unsandboxed-open guard to the app, draw and twitter subtrees More... 2 days ago
Merge pull request #3860 from alvations/add-security-regression-tests More... 2 days ago
Add regression tests for already-fixed CWEs (test-only, no code changes) More... 2 days ago
Merge pull request #3856 from alvations/harden-wordnet-app-xss More... 3 days ago
Escape corpus text, pin the response charset, and escape the reflected title in the WordNet browser app (CWE-79) More... 3 days ago
Merge pull request #3855 from alvations/expand-security-redos-attack-tests More... 3 days ago
Add and expand security / ReDoS attack test coverage More... 3 days ago
Merge pull request #3853 from alvations/harden-data-no-protocol-traversal More... 3 days ago
Refuse ':' and '|' in no-protocol resource paths (CWE-22 Windows drive/ADS) More... 3 days ago
test: accept guard ValueError and assert no-leak for overlong-UTF-8 More... 3 days ago
Harden the no-protocol normalization guard against every escape vector (CWE-22) More... 3 days ago
Merge pull request #3852 from alvations/harden-pathsec-nul-byte More... 3 days ago
Refuse NUL bytes in pathsec.validate_path and add a pathsec attack-candidate harness More... 3 days ago
Merge pull request #3819 from webzuweb/fix/casual-tokenizer-newline-ellipsis More... 3 days ago
Merge pull request #3828 from alvations/bound-json-deserialization-dos More... 3 days ago
Assert the depth-cap outcome deterministically per interpreter More... 3 days ago
Assert the depth-cap document is handled without crashing, not that it always parses More... 3 days ago
Parse deep JSON on the C scanner so safe_json_loads never leaks a RecursionError More... 3 days ago
Merge pull request #3851 from alvations/fix-repp-scratch-file-staging More... 3 days ago
Stage REPP scratch input in an nltk.data root instead of the shared system temp More... 3 days ago
Count JSON byte caps in UTF-8 bytes and close json-guard import bypasses More... 4 days ago
Merge pull request #3849 from alvations/bring-security-fixture-tests More... 4 days ago
Route security-test fixtures through the pathsec I/O helpers More... 4 days ago
Sort imports in an added test (isort) More... 4 days ago