Commits

Breadcrumbs

History for

on0c9d46a

User selector

All users

All time

Commit History

Commits on Jan 15, 2021

• changes based on review

  Show description for 0c9d46a
  

  erik-krogh

  and

  esbena

  committed
  0c9d46a

  Copy full SHA for 0c9d46a

Commits on Jan 14, 2021

• improve alert message for js/polynomial-redos

  erik-krogh

  committed
  c5595f4

  Copy full SHA for c5595f4

• select the shortest possible reason

  erik-krogh

  committed
  86e33d9

  Copy full SHA for 86e33d9

• refactor `PolynomialBackTrackingTerm`, to allow getting the pump string and the prefix-message

  erik-krogh

  committed
  03d8aeb

  Copy full SHA for 03d8aeb

• highlight the use of the regular expression, instead of the sink for user input

  erik-krogh

  committed
  a520a51

  Copy full SHA for a520a51

• adjust `description` to not mention user-provided values

  erik-krogh

  committed
  e8ea720

  Copy full SHA for e8ea720

Commits on Jan 13, 2021

• dont sanitize global replacements where the regexp is a char class

  erik-krogh

  committed
  d71adff

  Copy full SHA for d71adff

Commits on Jan 12, 2021

• refactor copy-pasted code into `getAnLibraryInputParameter`

  erik-krogh

  committed
  0a17b04

  Copy full SHA for 0a17b04

• add library input as source for `js/polynomial-redos`

  erik-krogh

  committed
  eaee5c2

  Copy full SHA for eaee5c2

• Merge pull request #4774 from erik-krogh/forms

  Show description for 1c8547c
  codeql-ci

  authored
  1c8547c

  Copy full SHA for 1c8547c

Commits on Jan 8, 2021

• Merge pull request #4921 from erik-krogh/moreShellSan

  Show description for 807fc94
  codeql-ci

  authored
  807fc94

  Copy full SHA for 807fc94

Commits on Jan 7, 2021

• Update javascript/ql/src/semmle/javascript/security/dataflow/UnsafeShellCommandConstructionCustomizations.qll

  Show description for 6423c32
  

  erik-krogh

  and

  esbena

  authored
  6423c32

  Copy full SHA for 6423c32

• Merge pull request #4823 from erik-krogh/furtherReDoS

  Show description for c193d9f
  codeql-ci

  authored
  c193d9f

  Copy full SHA for c193d9f

• add source code examples to `blocksCharInAccess`

  erik-krogh

  committed
  7eab085

  Copy full SHA for 7eab085

• update docstring for `getAShellChar`

  Show description for 8b03ab0
  

  erik-krogh

  and

  esbena

  committed
  8b03ab0

  Copy full SHA for 8b03ab0

• support sanitizers that sanitize individual chars in js/shell-command-constructed-from-input

  erik-krogh

  committed
  2aa59a3

  Copy full SHA for 2aa59a3

• add comment about regexp detected by js/polynomial-redos

  erik-krogh

  committed
  7e21081

  Copy full SHA for 7e21081

Commits on Jan 6, 2021

• Merge branch 'main' into revertSum

  erik-krogh

  committed
  bfd8d1b

  Copy full SHA for bfd8d1b

• Merge pull request #4862 from erik-krogh/shellSanitizer

  Show description for 9d4cd0a
  codeql-ci

  authored
  9d4cd0a

  Copy full SHA for 9d4cd0a

• add class-field flowstep to js/shell-command-constructed-from-input

  erik-krogh

  committed
  f1cee70

  Copy full SHA for f1cee70

• add comment in isFork about /(a*)*/ regular expressions

  erik-krogh

  committed
  28cffa1

  Copy full SHA for 28cffa1

• reintroduce performance improvement - but sound this time

  erik-krogh

  committed
  c58f67b

  Copy full SHA for c58f67b

• autoformat

  erik-krogh

  committed
  4392f02

  Copy full SHA for 4392f02

• support nested stars in js/ReDoS

  erik-krogh

  committed
  3d98732

  Copy full SHA for 3d98732

• undo unsound optimization in js/ReDoS

  erik-krogh

  committed
  77967c3

  Copy full SHA for 77967c3

• add more tests for js/ReDoS

  erik-krogh

  committed
  b42aac1

  Copy full SHA for b42aac1

Commits on Jan 5, 2021

• Merge pull request #4847 from erik-krogh/afterReDoS

  Show description for a5e28ac
  codeql-ci

  authored
  a5e28ac

  Copy full SHA for a5e28ac

Commits on Jan 4, 2021

• improve precision of intersect

  erik-krogh

  committed
  ce8cc23

  Copy full SHA for ce8cc23

Commits on Dec 22, 2020

• use the full ascii set instead of a few chosen chars

  erik-krogh

  committed
  44571ff

  Copy full SHA for 44571ff

• remove duplicate char

  erik-krogh

  committed
  303408b

  Copy full SHA for 303408b

• changes based on review

  erik-krogh

  committed
  354954c

  Copy full SHA for 354954c

• Merge branch 'main' into shellSanitizer

  erik-krogh

  committed
  530a4ae

  Copy full SHA for 530a4ae

• use strings in isTypeofGard

  erik-krogh

  committed
  f7f8868

  Copy full SHA for f7f8868

• Merge pull request #4868 from erik-krogh/boundShell

  Show description for 2bb9636
  codeql-ci

  authored
  2bb9636

  Copy full SHA for 2bb9636

• Merge pull request #4865 from esbena/js/fix-execa-model

  Show description for 7c6b4d7
  codeql-ci

  authored
  7c6b4d7

  Copy full SHA for 7c6b4d7